CVEs published in August 2010
393 vulnerabilities, 158 critical, 3 exploited.
- phpThe default session serializer in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 does not properly...5.0 Medium
- dest-unreach socatStack-based buffer overflow in the nestlex function in nestlex.c in Socat 1.5.0.0 through 1.7.1.2...6.8 Medium
- invensys wonderware application server, wonderware archestra configuration access component activex control +1 moreStack-based buffer overflow in the IConfigurationAccess interface in the Invensys Wonderware...9.3 High
- apple iphone osInteger overflow in IOSurface in Apple iOS before 4.0.2 on the iPhone and iPod touch, and before...6.9 Medium
- adobe acrobat, acrobat reader +1 moreInteger overflow in CoolType.dll in Adobe Reader 8.2.3 and 9.3.3, and Acrobat 9.3.3, allows...9.3 High
- joachim fritschi phpcasCross-site scripting (XSS) vulnerability in phpCAS before 1.1.2, when proxy mode is enabled,...2.6 Low
- joachim fritschi phpcasphpCAS before 1.1.2 allows remote authenticated users to hijack sessions via a query string...4.0 Medium
- apache http servermod_proxy in httpd in Apache HTTP Server 2.2.9, when running on Unix, does not close the backend...5.0 Medium
- nalin dahyabhai vteThe vte_sequence_handler_window_manipulation function in vteseq.c in libvte (aka libvte9) in VTE...6.8 Medium
- hp openview network node managerStack-based buffer overflow in webappmon.exe in HP OpenView Network Node Manager (OV NNM) 7.51...9.3 High
- apache tomcatCross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp in the calendar application in the...4.3 Medium
- moinmo moinmoinMoinMoin cross-site scripting (XSS) vulnerability4.3 Medium
- moinmo moinmoinMoinMoin cross-site scripting (XSS) vulnerability4.3 Medium
- windriver vxworksThe FTP daemon in Wind River VxWorks does not close the TCP connection after a number of failed...7.8 High
- windriver vxworksThe loginDefaultEncrypt algorithm in loginLib in Wind River VxWorks before 6.9 does not properly...7.8 High
- windriver vxworksThe INCLUDE_SECURITY functionality in Wind River VxWorks 6.x, 5.x, and earlier uses the...7.8 High
- windriver vxworks, rockwellautomation 1756-enbt\/a firmware +1 moreThe WDB target agent debug service in Wind River VxWorks 6.x, 5.x, and earlier, as used on the...10.0 High
- emc celerra network attached storageThe EMC Celerra Network Attached Storage (NAS) appliance accepts external network traffic to IP...9.3 High
- heinz mauelshagen lvm2The cluster logical volume manager daemon (clvmd) in lvm2-cluster in LVM2 before 2.02.72, as used...4.6 Medium
- avscripts av arcadeSQL injection vulnerability in AV Scripts AV Arcade 3 allows remote attackers to execute...7.5 High
- barcodewiz barcode activex controlBuffer overflow in BarCodeWiz BarCode 3.29 ActiveX control (BarcodeWiz.dll) allows remote...9.3 High
- topazsystems sigplus pro activex controlStack-based buffer overflow in SigPlus Pro 3.74 ActiveX control allows remote attackers to...9.3 High
- zabbixMultiple cross-site scripting (XSS) vulnerabilities in the formatQuery function in frontends/php...4.3 Medium
- barnowlBarnOwl before 1.6.2 does not check the return code of calls to the (1) ZPending and (2)...7.5 High
- red hat jboss seam 2, redhat jboss enterprise application platform, netapp oncommand balance +2 more +4 moreJBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat...8.8 High
- cabextract project cabextractInteger signedness error in the Quantum decompressor in cabextract before 1.3, when archive test...5.1 Medium
- matomoDirectory traversal vulnerability in Piwik 0.6 through 0.6.3 allows remote attackers to include...6.8 Medium
- emc disk libraryUnspecified vulnerability in EMC Disk Library (EDL) before 3.2.7, 3.3.x before 3.3.2 epatch 8,...7.8 High
- pharscape hsolinkMultiple stack-based buffer overflows in hsolinkcontrol in hsolink 1.0.118 allow local users to...7.2 High
- pharscape hsolinkUntrusted search path vulnerability in hsolinkcontrol in hsolink 1.0.118 allows local users to...7.2 High
- adjam rekonqMultiple cross-site scripting (XSS) vulnerabilities in rekonq 0.5 and earlier allow remote...4.3 Medium
- pharscape hsolinkhsolinkcontrol in hsolink 1.0.118 allows local users to gain privileges via shell metacharacters...7.2 High
- urs wolfer kwebkitpartCross-site scripting (XSS) vulnerability in webkitpart.cpp in kwebkitpart allows remote attackers...4.3 Medium
- nokia qtdemobrowserCross-site scripting (XSS) vulnerability in webview.cpp in QtDemoBrowser allows remote attackers...4.3 Medium
- ibm tivoli directory serverThe slapi_printmessage function in IBM Tivoli Directory Server (ITDS) before 6.0.0.8-TIV-ITDS...5.0 Medium
- eterna bozohttpdbozotic HTTP server (aka bozohttpd) before 20100621 allows remote attackers to list the contents...5.0 Medium
- eterna bozohttpdbozotic HTTP server (aka bozohttpd) 20090522 through 20100512 allows attackers to cause a denial...5.0 Medium
- apple mac os xThe webdav_mount function in webdav_vfsops.c in the WebDAV kernel extension (aka webdav_fs.kext)...4.9 Medium
- gigabyte dldrv2 activex controlArray index error in the SetDLInfo method in the GIGABYTE Dldrv2 ActiveX control 1.4.206.11...10.0 High
- gigabyte dldrv2 activex controlThe GIGABYTE Dldrv2 ActiveX control 1.4.206.11 allows remote attackers to (1) download arbitrary...10.0 High
- moinmo moinmoinMoinMoin Cross-site Scripting (XSS) vulnerability4.3 Medium
- raphael assenat libmikmodloaders/load_it.c in libmikmod, possibly 3.1.12, does not properly account for the larger size of...9.3 High
- raphael assenat libmikmodMultiple heap-based buffer overflows in loaders/load_it.c in libmikmod, possibly 3.1.12, might...9.3 High