Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2010
June

CVEs published in June 2010

490 vulnerabilities, 145 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

ibm websphere application serverCross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere...CVE-2010-07784.3 MediumJune 24, 2010
ibm websphere ilog jrulesMultiple cross-site scripting (XSS) vulnerabilities in content/internalError.jsp in IBM WebSphere...CVE-2010-2433Public exploit4.3 MediumJune 23, 2010
phpUse-after-free vulnerability in the SplObjectStorage unserializer in PHP 5.2.x and 5.3.x through...CVE-2010-22257.5 HighJune 23, 2010
libtiff, canonical ubuntu linux +1 moreStack-based buffer overflow in the TIFFFetchSubjectDistance function in tif_dirread.c in LibTIFF...CVE-2010-2067Fix available6.8 MediumJune 23, 2010
libtiffInteger overflow in the TIFFroundup macro in LibTIFF before 3.9.3 allows remote attackers to...CVE-2010-2065Fix available6.8 MediumJune 23, 2010
malcom box lxr cross referencerCross-site scripting (XSS) vulnerability in LXR Cross Referencer before 0.9.7 allows remote...CVE-2010-16254.3 MediumJune 23, 2010
malcom box lxr cross referencerCross-site scripting (XSS) vulnerability in lib/LXR/Common.pm in LXR Cross Referencer before 0.9...CVE-2010-14484.3 MediumJune 23, 2010
mozilla firefoxThe JavaScript engine in Mozilla Firefox 3.6.x before 3.6.4 allow remote attackers to cause a...CVE-2010-12039.3 HighJune 23, 2010
mozilla firefox, seamonkey, thunderbird +2 moreMultiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox 3.5.x before 3.5...CVE-2010-12029.3 HighJune 23, 2010
mozilla firefox, seamonkey, thunderbird +2 moreUnspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.10,...CVE-2010-12019.3 HighJune 23, 2010
mozilla firefox, seamonkey, thunderbird +2 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.10...CVE-2010-12009.3 HighJune 23, 2010
mozilla firefox, seamonkey, thunderbird +2 moreInteger overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10...CVE-2010-1199Public exploitEPSS 11.4%9.3 HighJune 23, 2010
mozilla firefox, seamonkey +1 moreUse-after-free vulnerability in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and...CVE-2010-11989.3 HighJune 23, 2010
mozilla firefox, seamonkey +1 moreMozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, does not...CVE-2010-11974.3 MediumJune 23, 2010
mozilla firefox, seamonkey, thunderbird +2 moreInteger overflow in the nsGenericDOMDataNode::SetTextInternal function in Mozilla Firefox 3.5.x...CVE-2010-11969.3 HighJune 23, 2010
mozilla firefox, seamonkey +1 moreUse-after-free vulnerability in the nsCycleCollector::MarkRoots function in Mozilla Firefox 3.5.x...CVE-2010-01839.3 HighJune 23, 2010
splunkCross-site scripting (XSS) vulnerability in Splunk 4.0 through 4.1.2, when Internet Explorer is...CVE-2010-24294.3 MediumJune 23, 2010
wftpserver wing ftp serverCross-site scripting (XSS) vulnerability in admin_loginok.html in the Administrator web interface...CVE-2010-24284.3 MediumJune 23, 2010
southrivertech titan ftp serverDirectory traversal vulnerability in TitanFTPd in South River Technologies Titan FTP Server 8.10...CVE-2010-2426EPSS 12.3%4.0 MediumJune 23, 2010
southrivertech titan ftp serverDirectory traversal vulnerability in TitanFTPd in South River Technologies Titan FTP Server 8.10...CVE-2010-24256.5 MediumJune 23, 2010
plonePlone Cross-site Scripting vulnerability in PortalTransformsCVE-2010-2422Fix available4.3 MediumJune 23, 2010
apple cupsThe cupsDoAuthentication function in auth.c in the client in CUPS before 1.4.4, when HAVE_GSSAPI...CVE-2010-2432Fix available5.0 MediumJune 22, 2010
apple cupsThe cupsFileOpen function in CUPS before 1.4.4 allows local users, with lp group membership, to...CVE-2010-2431Fix available2.6 LowJune 22, 2010
apple iphone osRace condition in Passcode Lock in Apple iOS before 4 on the iPhone and iPod touch allows...CVE-2010-17751.9 LowJune 22, 2010
apple iphone osWebKit in Apple iOS before 4 on the iPhone and iPod touch does not enforce the expected boundary...CVE-2010-17576.4 MediumJune 22, 2010
apple iphone osThe Settings application in Apple iOS before 4 on the iPhone and iPod touch does not properly...CVE-2010-17565.8 MediumJune 22, 2010
apple iphone osSafari in Apple iOS before 4 on the iPhone and iPod touch does not properly implement the Accept...CVE-2010-17554.3 MediumJune 22, 2010
apple iphone osPasscode Lock in Apple iOS before 4 on the iPhone and iPod touch does not properly handle alert...CVE-2010-17546.9 MediumJune 22, 2010
apple iphone osImageIO in Apple iOS before 4 on the iPhone and iPod touch allows remote attackers to execute...CVE-2010-17536.8 MediumJune 22, 2010
apple iphone osStack-based buffer overflow in CFNetwork in Apple iOS before 4 on the iPhone and iPod touch...CVE-2010-17526.8 MediumJune 22, 2010
apple iphone osApplication Sandbox in Apple iOS before 4 on the iPhone and iPod touch does not prevent photo...CVE-2010-17515.0 MediumJune 22, 2010
apache axis2Improper Input Validation in Apache Axis2CVE-2010-1632Fix availableEPSS 22.4%7.5 HighJune 22, 2010
apple iphone osWebKit in Apple iOS before 4 on the iPhone and iPod touch does not properly implement the history...CVE-2010-14074.3 MediumJune 22, 2010
opera browserMultiple unspecified vulnerabilities in Opera before 10.54 have unknown impact and attack vectors...CVE-2010-242110.0 HighJune 22, 2010
fenrir-inc activegeckobrowserMultiple unspecified vulnerabilities in Fenrir Inc. ActiveGeckoBrowser 1.0.0 and 1.0.5 alpha, a...CVE-2010-24206.8 MediumJune 22, 2010
hordeThe IMP plugin in Horde allows remote attackers to bypass firewall restrictions and use Horde as...CVE-2010-16385.0 MediumJune 22, 2010
squirrelmail, apple mac os x, mac os x server +4 more +6 moreThe Mail Fetch plugin in SquirrelMail 1.4.20 and earlier allows remote authenticated users to...CVE-2010-16376.5 MediumJune 22, 2010
activewebsoftwares ewebquizSQL injection vulnerability in eWebQuiz.asp in ActiveWebSoftwares.com eWebquiz 8 allows remote...CVE-2010-2359Public exploit7.5 HighJune 21, 2010
jeffkilroy nakid cmsPHP remote file inclusion vulnerability in modules/catalog/upload_photo.php in Nakid CMS 0.5.2,...CVE-2010-2358Public exploit5.1 MediumJune 21, 2010
eicrasoft eicra realestate scriptSQL injection vulnerability in index.php in Eicra Realestate Script 1.0 and 1.6.0 allows remote...CVE-2010-2357Public exploit7.5 HighJune 21, 2010
pilotgroup elms proCross-site scripting (XSS) vulnerability in subscribe.php in Pilot Group (PG) eLMS Pro allows...CVE-2010-2356Public exploit4.3 MediumJune 21, 2010
pilotgroup elms proCross-site scripting (XSS) vulnerability in error.php in Pilot Group (PG) eLMS Pro allows remote...CVE-2010-2355Public exploit4.3 MediumJune 21, 2010
pilotgroup elms proSQL injection vulnerability in subscribe.php in Pilot Group (PG) eLMS Pro allows remote attackers...CVE-2010-2354Public exploit7.5 HighJune 21, 2010
yves chedemois cckThe Node Reference module in Content Construction Kit (CCK) module 6.x before 6.x-2.7 for Drupal...CVE-2010-23535.0 MediumJune 21, 2010
karen stevenson cckThe Node Reference module in Content Construction Kit (CCK) module 5.x before 5.x-1.11 and 6.x...CVE-2010-23525.0 MediumJune 21, 2010
novell netwareStack-based buffer overflow in the CIFS.NLM driver in Netware SMB 1.0 for Novell Netware 6.5 SP8...CVE-2010-2351Public exploitEPSS 15.7%10.0 HighJune 21, 2010
daniel mealha cabrita ziproxyHeap-based buffer overflow in the PNG decoder in Ziproxy 3.1.0 allows remote attackers to cause a...CVE-2010-2350Fix available6.8 MediumJune 21, 2010
timhillone h264webcamH264WebCam 3.7 allows remote attackers to cause a denial of service (crash) via a long URI in a...CVE-2010-2349Public exploit5.0 MediumJune 21, 2010
freesoftwaretoolbox batch audio converterStack-based buffer overflow in Batch Audio Converter Lite Edition 1.0.0.0 and earlier allows...CVE-2010-2348Public exploit9.3 HighJune 21, 2010
sap j2ee engine core, server core +1 moreThe Telnet interface in the SAP J2EE Engine Core (SAP-JEECOR) 6.40 through 7.02, and Server Core ...CVE-2010-23474.9 MediumJune 21, 2010
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open