CVEs published in September 2010
287 vulnerabilities, 50 critical, 1 exploited.
- clamav Buffer overflow in the find_stream_bounds function in pdf.c in libclamav in ClamAV before 0.96.3... 9.3 High
- ffmpeg, ffmpeg libavcodec, mplayerhq mplayer +2 more flicvideo.c in libavcodec 0.6 and earlier in FFmpeg, as used in MPlayer and other products,... 6.8 Medium
- debian linux, linux kernel, canonical ubuntu linux +4 more +6 more The hso_get_count function in drivers/net/usb/hso.c in the Linux kernel before 2.6.36-rc5 does... 2.1 Low
- debian linux, linux kernel, canonical ubuntu linux +4 more +6 more The eql_g_master_cfg function in drivers/net/eql.c in the Linux kernel before 2.6.36-rc5 does not... 2.1 Low
- debian linux, linux kernel, canonical ubuntu linux +4 more +6 more The cxgb_extension_ioctl function in drivers/net/cxgb3/cxgb3_main.c in the Linux kernel before 2... 2.1 Low
- linux kernel, canonical ubuntu linux, suse linux enterprise desktop +2 more +4 more kernel/trace/ftrace.c in the Linux kernel before 2.6.35.5, when debugfs is enabled, does not... 5.5 Medium
- linux kernel, avaya aura communication manager, aura presence services +7 more +9 more The xfs implementation in the Linux kernel before 2.6.35 does not look up inode allocation btrees... 8.1 High
- linux kernel, canonical ubuntu linux, suse linux enterprise desktop +2 more +4 more Integer overflow in the btrfs_ioctl_clone function in fs/btrfs/ioctl.c in the Linux kernel before... 5.5 Medium
- linux kernel, canonical ubuntu linux, suse linux enterprise high availability extension +2 more +4 more The btrfs_ioctl_clone function in fs/btrfs/ioctl.c in the Linux kernel before 2.6.35 allows local... 7.1 High
- netartmedia websiteadmin Directory traversal vulnerability in ADMIN/login.php in NetArtMEDIA WebSiteAdmin allows remote... 7.5 High
- alex kellner powermail Unspecified vulnerability in the powermail extension 1.5.3 and earlier for TYPO3 allows remote... 5.0 Medium
- synology dsm The FTP authentication module in Synology Disk Station 2.x logs passwords to the web application... 2.1 Low
- blueriver mura cms, sava cms +1 more Directory traversal vulnerability in fileManager.cfc in Mura CMS 5.1 before 5.1.498 and 5.2... 5.0 Medium
- llnl slurm The (1) init.d/slurm and (2) init.d/slurmdbd scripts in SLURM before 2.1.14 place the . (dot)... 6.9 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 more Multiple integer signedness errors in net/rose/af_rose.c in the Linux kernel before 2.6.36-rc5... 1.9 Low
- linux kernel, canonical ubuntu linux +1 more Buffer overflow in the niu_get_ethtool_tcam_all function in drivers/net/niu.c in the Linux kernel... 7.2 High
- linux kernel, canonical ubuntu linux +1 more fs/jfs/xattr.c in the Linux kernel before 2.6.35.2 does not properly handle a certain legacy... 2.1 Low
- apple mac os x, freebsd, netbsd +2 more Multiple integer signedness errors in smb_subr.c in the netsmb module in the kernel in NetBSD 5.0... 4.9 Medium
- linux kernel, canonical ubuntu linux, suse linux enterprise desktop +1 more +3 more Integer overflow in the ethtool_get_rxnfc function in net/core/ethtool.c in the Linux kernel... 7.2 High
- synology dsm Multiple cross-site scripting (XSS) vulnerabilities in Synology Disk Station 2.x before DSM3.0... 4.3 Medium
- sangoma freepbx Directory traversal vulnerability in page.recordings.php in the System Recordings component in... 6.5 Medium
- vmware player, workstation +1 more The installer in VMware Workstation 7.x before 7.1.2 build 301548 and VMware Player 3.x before 3... 2.1 Low
- libtiff, opensuse +1 more LibTIFF before 3.9.2-5.2.1 in SUSE openSUSE 11.3 allows remote attackers to cause a denial of... 6.8 Medium
- dietrich ayala nusoap Cross-site scripting (XSS) vulnerability in NuSOAP 0.9.5, as used in MantisBT and other products,... 4.3 Medium
- php Format string vulnerability in stream.c in the phar extension in PHP 5.3.x through 5.3.3 allows... 6.8 Medium
- wire plastic design wpquiz Multiple SQL injection vulnerabilities in wpQuiz 2.7 allow remote attackers to execute arbitrary... 7.5 High
- netartmedia real estate portal Cross-site scripting (XSS) vulnerability in AGENTS/index.php in NetArt MEDIA Real Estate Portal 2... 4.3 Medium
- netartmedia real estate portal Multiple directory traversal vulnerabilities in AGENTS/index.php in NetArt MEDIA Real Estate... 6.8 Medium
- alex kellner powermail Cross-site scripting (XSS) vulnerability in the powermail extension 1.5.3 and earlier for TYPO3... 4.3 Medium
- alex kellner powermail powermail extension for TYPO3 vulnerable to SQL Injection 7.5 High
- sourcetreesolutions mojoportal Cross-site request forgery (CSRF) vulnerability in the file manager service (Services/FileService... 6.8 Medium
- sourcetreesolutions mojoportal Cross-site scripting (XSS) vulnerability in ProfileView.aspx in mojoPortal 2.3.4.3 and 2.3.5.1... 4.3 Medium
- invisionpower ibphotohost SQL injection vulnerability in index.php in ibPhotohost 1.1.2 allows remote attackers to execute... 7.5 High
- salvo g. tomaselli weborf Directory traversal vulnerability in the modURL function in instance.c in Weborf before 0.12.3... 5.0 Medium
- dovecot The ACL plugin in Dovecot 1.2.x before 1.2.13 propagates INBOX ACLs to newly created mailboxes in... 6.4 Medium
- pecl-php alternative php cache Cross-site scripting (XSS) vulnerability in apc.php in the Alternative PHP Cache (APC) extension... 4.3 Medium
- hp openview network node manager Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows... 5.0 Medium
- hp system management homepage Unspecified vulnerability in HP System Management Homepage (SMH) before 6.2 allows remote... 4.3 Medium
- hp system management homepage Open redirect vulnerability in HP System Management Homepage (SMH) before 6.2 allows remote... 4.3 Medium
- rsa authentication agent for web Directory traversal vulnerability in RSA Authentication Agent 7.0 before P2 for Web allows remote... 5.0 Medium
- roundup-tracker roundup Roundup Cross-site Scripting (XSS) vulnerability 4.3 Medium
- google chrome Use-after-free vulnerability in WebKit, as used in Google Chrome before 6.0.472.59, allows remote... 9.3 High
- google chrome, apple itunes, safari +2 more Use-after-free vulnerability in WebKit before r65958, as used in Google Chrome before 6.0.472.59,... 9.3 High
- google chrome, canonical ubuntu linux, fedoraproject fedora +2 more +4 more Off-by-one error in the toAlphabetic function in rendering/RenderListMarker.cpp in WebCore in... 8.8 High
- google chrome, canonical ubuntu linux, fedoraproject fedora +2 more +4 more Use-after-free vulnerability in page/Geolocation.cpp in WebCore in WebKit before r59859, as used... 8.8 High
- google chrome Cross-site request forgery (CSRF) vulnerability in loader/DocumentThreadableLoader.cpp in WebCore... 6.8 Medium
- apple itunes, google chrome +1 more Use-after-free vulnerability in WebKit, as used in Apple iTunes before 10.2 on Windows, Apple... 9.3 High
- alcatel-lucent omnivista 4760 server Stack-based buffer overflow in the HTTP proxy service in Alcatel-Lucent OmniVista 4760 server... 5.4 Medium
- alcatel-lucent ccagent, omnitouch contact center +1 more The CCAgent option 9.0.8.4 and earlier in the management server (aka TSA) component in Alcatel... 6.9 Medium
- alcatel-lucent ccagent, omnitouch contact center +1 more The default configuration of the CCAgent option before 9.0.8.4 in the management server (aka TSA)... 7.6 High
- Show olderLoading…