Skip to content
OpenAdvisories

Archive

December 2010

Vulnerabilities first published in this month (UTC), newest first.

← November 2010 2010 / December January 2011 →
  1. 116
  2. 224
  3. 35
  4. 49
  5. 5 
  6. 617
  7. 726
  8. 814
  9. 920
  10. 1018
  11. 11 
  12. 12 
  13. 13 
  14. 1429
  15. 15 
  16. 1652
  17. 1712
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 2245
  23. 2310
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 2924
  30. 3038
  31. 31 
All Critical High Medium Low Exploited only Public exploit

91 results · Clear filters · Feed

  • Unscored —
    CVE-2010-3906 Public exploit

    Cross-site scripting (XSS) vulnerability in Gitweb 1.7.3.3 and earlier allows remote attackers to inject arbitrary web …

    git Debian
  • Unscored —
    CVE-2010-3944 Public exploit

    win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2008 R2 and Windows 7 does not properly validate user…

  • Unscored —
    CVE-2010-3964 Public exploit EPSS 94%

    Unrestricted file upload vulnerability in the Document Conversions Launcher Service in Microsoft Office SharePoint Serv…

  • Unscored —
    CVE-2010-3967 Public exploit EPSS 20%

    Untrusted search path vulnerability in Microsoft Windows Movie Maker (WMM) 2.6 allows local users to gain privileges vi…

  • Unscored —
    CVE-2010-3338 Public exploit EPSS 23%

    The Windows Task Scheduler in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7…

  • Critical 9.8
    CVE-2010-4344 Exploited Public exploit EPSS 72%

    Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to ex…

    exim4 Debian
    KEV Mar 25, 2022
  • High 7.8
    CVE-2010-4345 Exploited Public exploit EPSS 18%

    Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to speci…

    exim4 Debian
    KEV Mar 25, 2022
  • Unscored —
    CVE-2010-3770 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the rendering engine in Mozilla Firefox before 3.5.16 and 3.6.x …

  • Unscored —
    CVE-2010-4513 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Zimplit CMS 3.0, and possibly earlier, allow remote attackers to…

  • Unscored —
    CVE-2010-4518 Public exploit

    Cross-site scripting (XSS) vulnerability in wp-safe-search/wp-safe-search-jx.php in the Safe Search plugin 0.7 for Word…

  • Unscored —
    CVE-2010-4514 Public exploit

    Cross-site scripting (XSS) vulnerability in Install/InstallWizard.aspx in DotNetNuke 5.05.01 and 5.06.00 allows remote …

  • Unscored —
    CVE-2010-4517 Public exploit

    SQL injection vulnerability in the JExtensions JE Auto (com_jeauto) component 1.0 for Joomla!, when magic_quotes_gpc is…

  • Unscored —
    CVE-2010-4502 Public exploit

    Integer overflow in KmxSbx.sys 6.2.0.22 in CA Internet Security Suite Plus 2010 allows local users to cause a denial of…

  • Unscored —
    CVE-2010-4503 Public exploit

    SQL injection vulnerability in indexlight.php in Aigaion 1.3.4 allows remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2010-4480 Public exploit

    error.php in PhpMyAdmin 3.3.8.1, and other versions before 3.4.0-beta1, allows remote attackers to conduct cross-site s…

    phpmyadmin Debian
  • Unscored —
    CVE-2010-4170 Public exploit

    The staprun runtime tool in SystemTap 1.3 does not properly clear the environment before executing modprobe, which allo…

    systemtap Debian
  • Unscored —
    CVE-2010-4412 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in pfSense 2 beta 4 allow remote attackers to inject arbitrary web …

  • Unscored —
    CVE-2010-4259 Public exploit EPSS 11%

    Stack-based buffer overflow in FontForge 20100501 allows remote attackers to cause a denial of service (application cra…

    fontforge Debian
  • Unscored —
    CVE-2010-4246 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in graph.php in pfSense 1.2.3 and 2 beta 4 allow remote attackers t…

  • Unscored —
    CVE-2010-4330 Public exploit

    Directory traversal vulnerability in includes/controller.php in Pulse CMS Basic before 1.2.9 allows remote attackers to…

  • Unscored —
    CVE-2010-4297 Public exploit

    The VMware Tools update functionality in VMware Workstation 6.5.x before 6.5.5 build 328052 and 7.x before 7.1.2 build …

  • Unscored —
    CVE-2010-4409 Public exploit EPSS 19%

    Integer overflow in the NumberFormatter::getSymbol (aka numfmt_get_symbol) function in PHP 5.3.3 and earlier allows con…

  • High 7.8
    CVE-2010-3904 Exploited Public exploit EPSS 16%

    The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the…

    KEV May 12, 2023
  • Unscored —
    CVE-2010-3449 Public exploit

    Cross-site request forgery (CSRF) vulnerability in Redback before 1.2.4, as used in Apache Archiva 1.0 through 1.0.3, 1…

  • Unscored —
    CVE-2010-4401 Public exploit

    languages.inc.php in DynPG CMS 4.2.0 allows remote attackers to obtain sensitive information via a direct request, whic…

  • Unscored —
    CVE-2010-4399 Public exploit

    Directory traversal vulnerability in languages.inc.php in DynPG CMS 4.1.1 and 4.2.0, when magic_quotes_gpc is disabled,…

  • Unscored —
    CVE-2010-4400 Public exploit

    SQL injection vulnerability in _rights.php in DynPG CMS 4.2.0 allows remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2010-4406 Public exploit

    Directory traversal vulnerability in gallery.php in Brunetton LittlePhpGallery 1.0.2, when magic_quotes_gpc is disabled…

  • Unscored —
    CVE-2010-4254 Public exploit EPSS 14%

    Mono, when Moonlight before 2.3.0.1 or 2.99.x before 2.99.0.10 is used, does not properly validate arguments to generic…

  • High 7.8
    CVE-2010-4398 Exploited Public exploit

    Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows XP SP2 and SP3, W…

    KEV Mar 28, 2022
  • Unscored —
    CVE-2010-4281 Public exploit

    Incomplete blacklist vulnerability in the safe_url_extraclean function in ajax.php in Pandora FMS before 3.1.1 allows r…

  • Unscored —
    CVE-2010-4313 Public exploit

    Unrestricted file upload vulnerability in fileman_file_upload.php in Orbis CMS 1.0.2 allows remote authenticated users …

  • Unscored —
    CVE-2010-4279 Public exploit EPSS 66%

    The default configuration of Pandora FMS 3.1 and earlier specifies an empty string for the loginhash_pwd field, which a…

  • Unscored —
    CVE-2010-4280 Public exploit

    Multiple SQL injection vulnerabilities in Pandora FMS before 3.1.1 allow remote authenticated users to execute arbitrar…

  • Unscored —
    CVE-2010-4282 Public exploit Scanner template EPSS 20%

    Multiple directory traversal vulnerabilities in Pandora FMS before 3.1.1 allow remote attackers to include and execute …

  • Unscored —
    CVE-2010-4278 Public exploit EPSS 11%

    operation/agentes/networkmap.php in Pandora FMS before 3.1.1 allows remote authenticated users to execute arbitrary com…

  • Unscored —
    CVE-2010-4283 Public exploit

    PHP remote file inclusion vulnerability in extras/pandora_diag.php in Pandora FMS before 3.1.1 allows remote attackers …

  • Unscored —
    CVE-2010-4371 Public exploit

    Buffer overflow in the in_mod plugin in Winamp before 5.6 allows remote attackers to have an unspecified impact via vec…

  • Unscored —
    CVE-2010-4367 Public exploit EPSS 27%

    awstats.cgi in AWStats before 7.0 accepts a configdir parameter in the URL, which allows remote attackers to execute ar…

    awstats Debian
  • Unscored —
    CVE-2010-3267 Public exploit

    Multiple SQL injection vulnerabilities in BugTracker.NET before 3.4.5 allow remote authenticated users to execute arbit…