Skip to content
OpenAdvisories

Archive

7 December 2010

Vulnerabilities first published on this day (UTC), newest first.

  1. 116
  2. 224
  3. 35
  4. 49
  5. 5 
  6. 617
  7. 726
  8. 814
  9. 920
  10. 1018
  11. 11 
  12. 12 
  13. 13 
  14. 1429
  15. 15 
  16. 1652
  17. 1712
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 2245
  23. 2310
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 2924
  30. 3038
  31. 31 

26 results · Feed

  • Unscored —
    CVE-2010-4170 Public exploit

    The staprun runtime tool in SystemTap 1.3 does not properly clear the environment before executing modprobe, which allo…

  • Unscored —

    Double free vulnerability in the imap_do_open function in the IMAP extension (ext/imap/php_imap.c) in PHP 5.2 before 5.…

  • Unscored —

    The installation documentation for Red Hat Enterprise Messaging, Realtime and Grid (MRG) 1.3 recommends that Condor sho…

  • Unscored —

    plymouth-pretrigger.sh in dracut and udev, when running on Fedora 13 and 14, sets weak permissions for the /dev/systty …

  • Unscored —

    The staprun runtime tool in SystemTap 1.3 does not verify that a module to unload was previously loaded by SystemTap, w…

  • Unscored —

    Use-after-free vulnerability in Google Chrome before 8.0.552.215 allows remote attackers to cause a denial of service v…

  • Unscored —

    Google Chrome before 8.0.552.215 does not properly restrict privileged extensions, which allows remote attackers to cau…

  • Unscored —

    Google Chrome before 8.0.552.215 does not properly restrict read access to videos derived from CANVAS elements, which a…

  • Unscored —

    Google Chrome before 8.0.552.215 does not properly handle HTML5 databases, which allows attackers to cause a denial of …

  • Unscored —

    Incomplete blacklist vulnerability in Google Chrome before 8.0.552.215 on Linux and Mac OS X allows remote attackers to…

  • Unscored —

    Google Chrome before 8.0.552.215 does not properly restrict the generation of file dialogs, which allows remote attacke…

  • Unscored —

    libvpx, as used in Google Chrome before 8.0.552.215 and possibly other products, allows remote attackers to cause a den…

  • Unscored —

    Double free vulnerability in libxml2 2.7.8 and other versions, as used in Google Chrome before 8.0.552.215 and other pr…

  • Unscored —

    Google Chrome before 8.0.552.215 allows remote attackers to cause a denial of service (application crash) or possibly h…

  • Unscored —

    Google Chrome before 8.0.552.215 does not properly handle HTTP proxy authentication, which allows remote attackers to c…

  • Unscored —

    Use-after-free vulnerability in Google Chrome before 8.0.552.215 allows remote attackers to cause a denial of service o…

  • Unscored —

    Use-after-free vulnerability in Google Chrome before 8.0.552.215 allows remote attackers to cause a denial of service o…

  • Unscored —

    Unspecified vulnerability in Google Chrome before 8.0.552.215 allows remote attackers to bypass the pop-up blocker via …

  • Unscored —

    Unspecified vulnerability in pdf.c in libclamav in ClamAV before 0.96.5 allows remote attackers to cause a denial of se…

  • Unscored —

    Off-by-one error in the icon_cb function in pe_icons.c in libclamav in ClamAV before 0.96.5 allows remote attackers to …

  • Unscored —
    CVE-2010-4412 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in pfSense 2 beta 4 allow remote attackers to inject arbitrary web …

  • Unscored —

    SQL injection vulnerability in the do_trackbacks function in wp-includes/comment.php in WordPress before 3.0.2 allows r…

  • Unscored —
    CVE-2010-4259 Public exploit EPSS 11%

    Stack-based buffer overflow in FontForge 20100501 allows remote attackers to cause a denial of service (application cra…

  • Unscored —

    Multiple unspecified vulnerabilities in pdf.c in libclamav in ClamAV before 0.96.5 allow remote attackers to cause a de…

  • Unscored —
    CVE-2010-4246 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in graph.php in pfSense 1.2.3 and 2 beta 4 allow remote attackers t…

  • Unscored —
    CVE-2010-4330 Public exploit

    Directory traversal vulnerability in includes/controller.php in Pulse CMS Basic before 1.2.9 allows remote attackers to…