Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2010
February

CVEs published in February 2010

303 vulnerabilities, 56 critical, 2 exploited.

Known exploitedIn KEVPublic exploitFix available

ibm cognos expressIBM Cognos Express 9.0 allows attackers to obtain unspecified access to the Tomcat Manager...CVE-2010-0557Public exploitEPSS 51.7%7.5 HighFebruary 5, 2010
hp system management homepageCross-site scripting (XSS) vulnerability in proxy/smhui/getuiinfo in HP System Management...CVE-2009-41854.3 MediumFebruary 5, 2010
ibm websphere commerceIBM WebSphere Commerce 7.0 does not properly encrypt data in a database, which makes it easier...CVE-2009-27521.5 LowFebruary 5, 2010
ibm websphere commerceIBM WebSphere Commerce 7.0 uses the same cryptographic key for session attributes and merchant...CVE-2009-27514.3 MediumFebruary 5, 2010
iplanet loganproCross-site scripting (XSS) vulnerability in LoganPro allows remote attackers to inject arbitrary...CVE-2003-15875.0 MediumFebruary 5, 2010
iplanet webexpertCross-site scripting (XSS) vulnerability in WebExpert allows remote attackers to inject arbitrary...CVE-2003-15864.3 MediumFebruary 5, 2010
alentum weblog expertCross-site scripting (XSS) vulnerability in WebLogExpert allows remote attackers to inject...CVE-2003-15854.3 MediumFebruary 5, 2010
surfstatsCross-site scripting (XSS) vulnerability in SurfStats allows remote attackers to inject arbitrary...CVE-2003-15844.3 MediumFebruary 5, 2010
webtrends log analyzerCross-site scripting (XSS) vulnerability in WebTrends allows remote attackers to inject arbitrary...CVE-2003-15834.3 MediumFebruary 5, 2010
microsoft internet information serverMicrosoft Internet Information Services (IIS) 6.0, when DNS resolution is enabled for client IP...CVE-2003-1582EPSS 10.3%2.6 LowFebruary 5, 2010
apache http serverThe Apache HTTP Server 2.0.44, when DNS resolution is enabled for client IP addresses, allows...CVE-2003-15812.6 LowFebruary 5, 2010
apache http serverThe Apache HTTP Server 2.0.44, when DNS resolution is enabled for client IP addresses, uses a...CVE-2003-15804.3 MediumFebruary 5, 2010
sun one web serverSun ONE (aka iPlanet) Web Server 6 on Windows, when DNS resolution is enabled for client IP...CVE-2003-15794.3 MediumFebruary 5, 2010
sun one web serverSun ONE (aka iPlanet) Web Server 4.1 through SP12 and 6.0 through SP5, when DNS resolution is...CVE-2003-15784.3 MediumFebruary 5, 2010
sun one web serverSun ONE (aka iPlanet) Web Server 4.1 through SP12 and 6.0 through SP5, when DNS resolution is...CVE-2003-15772.6 LowFebruary 5, 2010
microsoft internet explorer, windows 2000, windows server 2003 +3 more +5 moreMicrosoft Internet Explorer 5.01 SP4, 6, 6 SP1, 7, and 8 does not prevent rendering of non-HTML...CVE-2010-0555EPSS 20.8%9.3 HighFebruary 4, 2010
geopp geo\+\+ gncasterThe HTTP Authentication implementation in Geo++ GNCASTER 1.4.0.7 and earlier uses the same nonce...CVE-2010-05547.5 HighFebruary 4, 2010
geopp geo\+\+ gncasterGeo++ GNCASTER 1.4.0.7 and earlier allows remote authenticated users to cause a denial of service...CVE-2010-0553Public exploit6.5 MediumFebruary 4, 2010
geopp geo\+\+ gncasterGeo++ GNCASTER 1.4.0.7 and earlier allows remote attackers to cause a denial of service ...CVE-2010-0552Public exploit7.5 HighFebruary 4, 2010
geopp geo\+\+ gncasterHTTP authentication implementation in Geo++ GNCASTER 1.4.0.7 and earlier allows remote attackers...CVE-2010-05515.0 MediumFebruary 4, 2010
geopp geo\+\+ gncasteradmin.htm in Geo++ GNCASTER 1.4.0.7 and earlier does not properly enforce HTTP Digest...CVE-2010-05504.0 MediumFebruary 4, 2010
xerox workcentre 6400 system software, workcentre 6400 net controller +1 moreUnspecified vulnerability in the Network Controller in Xerox WorkCentre 6400 System Software 060...CVE-2010-05495.0 MediumFebruary 4, 2010
xerox workcentre 5632, workcentre 5638, workcentre 5645 +4 more +6 moreMultiple unspecified vulnerabilities in the Network Controller and Web Server in Xerox WorkCentre...CVE-2010-05485.0 MediumFebruary 4, 2010
microsoft internet explorerMicrosoft Internet Explorer 5.01 SP4, 6, 6 SP1, 7, and 8 does not prevent rendering of non-HTML...CVE-2010-0255EPSS 36.9%4.3 MediumFebruary 4, 2010
sambaclient/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1...CVE-2010-0547Fix available2.1 LowFebruary 4, 2010
hp openvms rmsUnspecified vulnerability in Record Management Services (RMS) before VMS83A_RMS-V1100 for HP...CVE-2010-04436.8 MediumFebruary 4, 2010
asteriskAsterisk Open Source 1.6.0.x before 1.6.0.22, 1.6.1.x before 1.6.1.14, and 1.6.2.x before 1.6.2.2...CVE-2010-0441Fix available5.0 MediumFebruary 4, 2010
ibm websphere service registry and repositoryIBM WebSphere Service Registry and Repository (WSRR) 6.3.0 before FP2 does not have the intended...CVE-2009-27505.5 MediumFebruary 4, 2010
tuxfamily chronychronyd in Chrony before 1.23.1, and possibly 1.24-pre1, generates a syslog message for each...CVE-2010-0294Fix available5.0 MediumFebruary 4, 2010
tuxfamily chronyThe client logging functionality in chronyd in Chrony before 1.23.1 does not restrict the amount...CVE-2010-0293Fix available5.0 MediumFebruary 4, 2010
tuxfamily chronyThe read_from_cmd_socket function in cmdmon.c in chronyd in Chrony before 1.23.1, and 1.24-pre1,...CVE-2010-0292Fix available5.0 MediumFebruary 4, 2010
freebit serversmanFreeBit ServersMan 3.1.5 on Apple iPhone OS 3.1.2, and iPhone OS for iPod touch, allows remote...CVE-2010-0496Public exploit5.0 MediumFebruary 3, 2010
process-one ejabberdejabberd_c2s.erl in ejabberd before 2.1.3 allows remote attackers to cause a denial of service ...CVE-2010-0305Fix available5.0 MediumFebruary 3, 2010
apple iphone osRecovery Mode in Apple iPhone OS 1.0 through 3.1.2, and iPhone OS for iPod touch 1.1 through 3.1...CVE-2010-00384.6 MediumFebruary 3, 2010
mozilla bugzillaBugzilla before 3.0.11, 3.2.x before 3.2.6, 3.4.x before 3.4.5, and 3.5.x before 3.5.3 does not...CVE-2009-39894.3 MediumFebruary 3, 2010
mozilla bugzillaBugzilla 3.3.1 through 3.4.4, 3.5.1, and 3.5.2 does not allow group restrictions to be preserved...CVE-2009-33875.0 MediumFebruary 3, 2010
sun opensolaris, solaris +1 moreThe ucode_ioctl function in intel/io/ucode_drv.c in Sun Solaris 10 and OpenSolaris snv_69 through...CVE-2010-0453Public exploit4.9 MediumFebruary 3, 2010
cisco secure desktop, adaptive security appliance software +1 moreCross-site scripting (XSS) vulnerability in +CSCOT+/translation in Cisco Secure Desktop 3.4.2048,...CVE-2010-0440Public exploit4.3 MediumFebruary 3, 2010
squid-cache squidlib/rfc1035.c in Squid 2.x, 3.0 through 3.0.STABLE22, and 3.1 through 3.1.0.15 allows remote...CVE-2010-0308Fix availableEPSS 27.8%4.0 MediumFebruary 3, 2010
adobe coldfusionThe default configuration of Adobe ColdFusion 9.0 does not restrict access to collections that...CVE-2010-01855.0 MediumFebruary 3, 2010
hp enterprise cluster master toolkitUnspecified vulnerability in HP Enterprise Cluster Master Toolkit (ECMT) B.05.00 on HP-UX B.11.23...CVE-2009-41846.2 MediumFebruary 3, 2010
nanosleep trac-gitPyGIT.py in the Trac Git plugin (trac-git) before 0.0.20080710-3+lenny1 and before 0.0.20090320-1...CVE-2010-0394Fix available6.8 MediumFebruary 3, 2010
ibm db2kuddb2 in Tivoli Monitoring for DB2, as distributed in IBM DB2 9.7 FP1 on Linux, allows remote...CVE-2010-04725.0 MediumFebruary 2, 2010
postgresqlThe bitsubstr function in backend/utils/adt/varbit.c in PostgreSQL 8.0.23, 8.1.11, and 8.3.8...CVE-2010-0442Public exploitEPSS 13.3%6.5 MediumFebruary 2, 2010
enanocmsSQL injection vulnerability in the comment submission interface (includes/comment.php) in Enano...CVE-2010-04717.5 HighFebruary 2, 2010
comtrend ct-507it adsl routerCross-site scripting (XSS) vulnerability in scvrtsrv.cmd in Comtrend CT-507IT ADSL Router allows...CVE-2010-0470Public exploit4.3 MediumFebruary 2, 2010
files2links f2l 3000 applianceSQL injection vulnerability in Files2Links F2L 3000 appliance 4.0.0, and possibly other versions...CVE-2010-04697.5 HighFebruary 2, 2010
paperthin commonspot content serverCross-site scripting (XSS) vulnerability in utilities/longproc.cfm in PaperThin CommonSpot...CVE-2010-0468Public exploit4.3 MediumFebruary 2, 2010
chillcreations com ccnewsletterDirectory traversal vulnerability in the ccNewsletter (com_ccnewsletter) component 1.0.5 for...CVE-2010-0467Public exploitEPSS 43.3%5.8 MediumFebruary 2, 2010
apache http serverInteger overflow in the ap_proxy_send_fb function in proxy/proxy_util.c in mod_proxy in the...CVE-2010-0010EPSS 43.4%6.8 MediumFebruary 2, 2010
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open