CVEs published in March 2010

515 vulnerabilities, 79 critical, 1 exploited.

• microsoft internet explorer, windows 2003 server, windows server 2003 +3 more +5 more Microsoft Internet Explorer 7 does not properly handle objects in memory, which allows remote... CVE-2010-0807 EPSS 29.3% 9.3 HighMarch 31, 2010
• microsoft internet explorer, windows xp, windows 2000 +2 more The Tabular Data Control (TDC) ActiveX control in Microsoft Internet Explorer 5.01 SP4, 6 on... CVE-2010-0805 Public exploit EPSS 80.5% 9.3 HighMarch 31, 2010
• microsoft internet explorer, windows 2000, windows 2003 server +5 more +7 more Cross-domain vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 allows user-assisted... CVE-2010-0494 EPSS 22.9% 4.3 MediumMarch 31, 2010
• microsoft internet explorer, ie, windows 2003 server +5 more +7 more Use-after-free vulnerability in mstime.dll in Microsoft Internet Explorer 8 allows remote... CVE-2010-0492 EPSS 27.5% 9.3 HighMarch 31, 2010
• microsoft internet explorer, windows 2000, windows 2003 server +2 more +4 more Use-after-free vulnerability in Microsoft Internet Explorer 5.01 SP4, 6, and 6 SP1 allows remote... CVE-2010-0491 EPSS 29.3% 9.3 HighMarch 31, 2010
• microsoft internet explorer, windows 2003 server, windows 7 +4 more +6 more Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which... CVE-2010-0490 EPSS 29.3% 9.3 HighMarch 31, 2010
• microsoft internet explorer, windows 2000, windows 2003 server +4 more +6 more Race condition in Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7 allows remote attackers... CVE-2010-0489 EPSS 23.7% 9.3 HighMarch 31, 2010
• microsoft internet explorer, windows 2000, windows 2003 server +4 more +6 more Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7 does not properly handle unspecified ... CVE-2010-0488 EPSS 29.2% 4.3 MediumMarch 31, 2010
• microsoft internet explorer, windows 2000, windows 2003 server +4 more +6 more Microsoft Internet Explorer 6, 6 SP1, and 7 does not properly handle objects in memory, which... CVE-2010-0267 EPSS 34.4% 9.3 HighMarch 31, 2010
• apple quicktime Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or... CVE-2010-0536 9.3 HighMarch 31, 2010
• apple itunes Race condition in the installation package in Apple iTunes before 9.1 on Windows allows local... CVE-2010-0532 6.9 MediumMarch 31, 2010
• apple itunes Apple iTunes before 9.1 allows remote attackers to cause a denial of service (infinite loop) via... CVE-2010-0531 4.3 MediumMarch 31, 2010
• apple quicktime Heap-based buffer overflow in QuickTime.qts in Apple QuickTime before 7.6.6 on Windows allows... CVE-2010-0529 EPSS 12.2% 9.3 HighMarch 31, 2010
• apple quicktime Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or... CVE-2010-0528 9.3 HighMarch 31, 2010
• apple quicktime Integer overflow in Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute... CVE-2010-0527 9.3 HighMarch 31, 2010
• stafford.uklinux libesmtp The match_component function in smtp-tls.c in libESMTP 1.0.3.r1, and possibly other versions... CVE-2010-1194 Fix available 6.8 MediumMarch 31, 2010
• stafford.uklinux libesmtp libESMTP, probably 1.0.4 and earlier, does not properly handle a '\0' character in a domain name... CVE-2010-1192 Fix available 6.8 MediumMarch 31, 2010
• sahanafoundation sahana Sahana disaster management system 0.6.2.2, and possibly other versions, allows remote attackers... CVE-2010-1191 6.4 MediumMarch 31, 2010
• linux kernel Use-after-free vulnerability in net/ipv4/tcp_input.c in the Linux kernel 2.6 before 2.6.20, when... CVE-2010-1188 Fix available 7.1 HighMarch 31, 2010
• debian linux, linux kernel, canonical ubuntu linux +2 more The Transparent Inter-Process Communication (TIPC) functionality in Linux kernel 2.6.16-rc1... CVE-2010-1187 4.9 MediumMarch 31, 2010
• hp hp-ux Unspecified vulnerability in HP-UX B.11.31, with AudFilter rules enabled, allows local users to... CVE-2010-1030 4.4 MediumMarch 31, 2010
• hp soa registry foundation Unspecified vulnerability in HP SOA Registry Foundation 6.63 and 6.64 allows remote authenticated... CVE-2010-0450 8.5 HighMarch 31, 2010
• hp soa registry foundation Cross-site scripting (XSS) vulnerability in HP SOA Registry Foundation 6.63 and 6.64 allows... CVE-2010-0449 4.3 MediumMarch 31, 2010
• hp soa registry foundation Unspecified vulnerability in HP SOA Registry Foundation 6.63 and 6.64 allows remote attackers to... CVE-2010-0448 5.0 MediumMarch 31, 2010
• viewvc Cross-site scripting (XSS) vulnerability in ViewVC 1.1 before 1.1.5 and 1.0 before 1.0.11, when... CVE-2010-0132 2.6 LowMarch 31, 2010
• moinmo moinmoin MoinMoin Cross-site Scripting (XSS) vulnerability CVE-2010-0828 Fix available 3.5 LowMarch 31, 2010
• com janews janews Directory traversal vulnerability in the JA News (com_janews) component 1.0 for Joomla! allows... CVE-2010-1219 Public exploit 6.8 MediumMarch 30, 2010
• mm forum mmforum Cross-site scripting (XSS) vulnerability in the mm_forum extension 1.8.2 and earlier for TYPO3... CVE-2010-1218 4.3 MediumMarch 30, 2010
• je form creator form creator Directory traversal vulnerability in the JE Form Creator (com_jeformcr) component for Joomla!,... CVE-2010-1217 Public exploit 4.3 MediumMarch 30, 2010
• notsopureedit PHP remote file inclusion vulnerability in templates/template.php in notsoPureEdit 1.4.1 and... CVE-2010-1216 Public exploit 6.8 MediumMarch 30, 2010
• phpmyvisites Unspecified vulnerability in the ClickHeat plugin, as used in phpMyVisites before 2.4, has... CVE-2009-4763 6.8 MediumMarch 30, 2010
• apple mac os x, mac os x server +1 more DesktopServices in Apple Mac OS X 10.6 before 10.6.3 does not properly resolve pathnames in... CVE-2010-0537 2.6 LowMarch 30, 2010
• apple mac os x, mac os x server +1 more Dovecot in Apple Mac OS X 10.6 before 10.6.3, when Kerberos is enabled, does not properly enforce... CVE-2010-0535 6.5 MediumMarch 30, 2010
• apple mac os x, mac os x server +1 more Wiki Server in Apple Mac OS X 10.6 before 10.6.3 does not enforce the service access control list... CVE-2010-0534 4.0 MediumMarch 30, 2010
• apple mac os x, mac os x server +1 more Heap-based buffer overflow in QuickTimeMPEG.qtx in QuickTime in Apple Mac OS X before 10.6.3... CVE-2010-0526 4.3 MediumMarch 30, 2010
• apple mac os x, mac os x server +1 more Mail in Apple Mac OS X before 10.6.3 does not properly enforce the key usage extension during... CVE-2010-0525 5.0 MediumMarch 30, 2010
• apple mac os x, mac os x server +1 more The default configuration of the FreeRADIUS server in Apple Mac OS X Server before 10.6.3 permits... CVE-2010-0524 7.5 HighMarch 30, 2010
• apple mac os x server Wiki Server in Apple Mac OS X 10.5.8 does not restrict the file types of uploaded files, which... CVE-2010-0523 5.0 MediumMarch 30, 2010
• apple mac os x server Server Admin in Apple Mac OS X Server 10.5.8 does not properly determine the privileges of users... CVE-2010-0522 9.0 HighMarch 30, 2010
• apple mac os x, mac os x server +1 more Server Admin in Apple Mac OS X Server before 10.6.3 does not properly enforce authentication for... CVE-2010-0521 5.0 MediumMarch 30, 2010
• apple mac os x, mac os x server +1 more Heap-based buffer overflow in QuickTimeAuthoring.qtx in QuickTime in Apple Mac OS X before 10.6.3... CVE-2010-0520 Public exploit EPSS 18.6% 6.8 MediumMarch 30, 2010
• apple mac os x, mac os x server +1 more Integer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute... CVE-2010-0519 Public exploit 6.8 MediumMarch 30, 2010
• apple mac os x, mac os x server +1 more QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or... CVE-2010-0518 6.8 MediumMarch 30, 2010
• apple mac os x, mac os x server +1 more Heap-based buffer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers... CVE-2010-0517 6.8 MediumMarch 30, 2010
• apple mac os x, mac os x server +1 more Heap-based buffer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers... CVE-2010-0516 6.8 MediumMarch 30, 2010
• apple mac os x, mac os x server +1 more QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or... CVE-2010-0515 6.8 MediumMarch 30, 2010
• apple mac os x, mac os x server +1 more Heap-based buffer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers... CVE-2010-0514 6.8 MediumMarch 30, 2010
• apple mac os x, mac os x server +1 more Stack-based buffer overflow in PS Normalizer in Apple Mac OS X before 10.6.3 allows remote... CVE-2010-0513 6.8 MediumMarch 30, 2010
• apple mac os x, mac os x server +1 more The Accounts Preferences implementation in Apple Mac OS X 10.6 before 10.6.3, when a network... CVE-2010-0512 9.3 HighMarch 30, 2010
• apple mac os x server Podcast Producer in Apple Mac OS X 10.6 before 10.6.3 deletes the access restrictions of a... CVE-2010-0511 5.0 MediumMarch 30, 2010
• Show olderLoading…