Skip to content
OpenAdvisories

Archive

December 2010

Vulnerabilities first published in this month (UTC), newest first.

← November 2010 2010 / December January 2011 →
  1. 116
  2. 224
  3. 35
  4. 49
  5. 5 
  6. 617
  7. 726
  8. 814
  9. 920
  10. 1018
  11. 11 
  12. 12 
  13. 13 
  14. 1429
  15. 15 
  16. 1652
  17. 1712
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 2245
  23. 2310
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 2924
  30. 3038
  31. 31 
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • High —
    CVE-2010-3708

    Drools Improper Input Validation vulnerability allows remote attackers to execute arbitrary code in JBoss EAP

    The serialization implementation in JBoss Drools in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 before 4.3.0.CP09 and JBoss Enterprise SOA Platform 4.2 and 4.3 supports the embedding of class files, which allows remote attackers…

    org.drools:drools-core Maven
  • High 7.5
    CVE-2010-4577

    The CSSParser::parseFontFaceSrc function in WebCore/css/CSSParser.cpp in WebKit, as used in Google Chrome before 8.0.55…

  • High —
    CVE-2010-4481

    phpMyAdmin allows remote attackers to bypass authentication and obtain sensitive information

    phpMyAdmin before 3.4.0-beta1 allows remote attackers to bypass authentication and obtain sensitive information via a direct request to phpinfo.php, which calls the phpinfo function.

    phpmyadmin phpmyadmin/phpmyadmin Debian Packagist
  • High 8.4
    CVE-2010-3941

    Double free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server …

  • High 7.3
    CVE-2010-3957

    Double free vulnerability in the OpenType Font (OTF) driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP…

  • High 7.8
    CVE-2010-4345 Exploited Public exploit EPSS 18%

    Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to speci…

    exim4 Debian
    KEV Mar 25, 2022
  • High —
    CVE-2010-2235

    Cobbler is vulnerable to code injection

    template_api.py in Cobbler before 2.0.7, as used in Red Hat Network Satellite Server and other products, does not disable the ability of the Cheetah template engine to execute Python statements contained in templates, which allows remote authenticated adminis…

    cobbler PyPI
  • High 7.8
    CVE-2010-3904 Exploited Public exploit EPSS 16%

    The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the…

    KEV May 12, 2023
  • High 7.8
    CVE-2010-4398 Exploited Public exploit

    Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows XP SP2 and SP3, W…

    KEV Mar 28, 2022