CVEs published in September 2010
287 vulnerabilities, 50 critical, 1 exploited.
- mozilla firefox, seamonkey +1 moreThe js_InitRandom function in the JavaScript implementation in Mozilla Firefox 3.5.x before 3.5...5.8 Medium
- mozilla firefoxThe js_InitRandom function in the JavaScript implementation in Mozilla Firefox 3.5.10 through 3.5...5.8 Medium
- ibm lotus sametimeUnspecified vulnerability in the webcontainer implementation in IBM Lotus Sametime Connect 8.5.1...10.0 High
- mozilla firefoxThe Math.random function in the JavaScript implementation in Mozilla Firefox 3.5.10 through 3.5...5.8 Medium
- gnu mailmanMultiple cross-site scripting (XSS) vulnerabilities in GNU Mailman before 2.1.14rc1 allow remote...3.5 Low
- hp 3crevf100-73, 3com officeconnect gigabit vpn firewall software +1 moreCross-site scripting (XSS) vulnerability on the HP 3Com OfficeConnect Gigabit VPN Firewall...4.3 Medium
- microsoft office, windows xp, windows server 2003 +2 more +4 moreThe Uniscribe (aka new Unicode Script Processor) implementation in USP10.DLL in Microsoft Windows...9.3 High
- No product listedUnspecified vulnerability in Microsoft Internet Information Services (IIS) 5.1 on Windows XP SP3,...6.8 Medium
- microsoft internet information servicesBuffer overflow in Microsoft Internet Information Services (IIS) 7.5, when FastCGI is enabled,...9.3 High
- microsoft windows 7, windows server 2003, windows server 2008 +2 more +4 moreThe Print Spooler service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows...9.3 High
- microsoft outlookHeap-based buffer overflow in Microsoft Outlook 2002 SP3, 2003 SP3, and 2007 SP2, when Online...9.3 High
- microsoft windows xp, windows server 2003 +1 moreThe RPC client implementation in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not...9.3 High
- microsoft windows xp, windows server 2003 +1 moreThe Word 97 text converter in the WordPad Text Converters in Microsoft Windows XP SP2 and SP3 and...9.3 High
- microsoft internet information services, internet information server +1 moreStack consumption vulnerability in the ASP implementation in Microsoft Internet Information...4.3 Medium
- microsoft windows xp, windows server 2003 +1 moreThe Client/Server Runtime Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP...6.9 Medium
- microsoft windows 7, windows server 2003, windows server 2008 +2 more +4 moreHeap-based buffer overflow in the Local Security Authority Subsystem Service (LSASS), as used in...9.0 High
- microsoft windows xp, windows server 2003, windows server 2008 +1 more +3 moreThe MPEG-4 codec in the Windows Media codecs in Microsoft Windows XP SP2 and SP3, Server 2003 SP2...9.3 High
- pgp desktopUntrusted search path vulnerability in PGP Desktop 9.9.0 Build 397, 9.10.x, 10.0.0 Build 2732,...9.3 High
- kingsoft antivirusBuffer overflow in kavfm.sys in Kingsoft Antivirus 2010.04.26.648 and earlier allows local users...7.2 High
- samba, canonical ubuntu linux +1 moreStack-based buffer overflow in the (1) sid_parse and (2) dom_sid_parse functions in Samba before...7.5 High
- hp system management homepageUnspecified vulnerability in HP System Management Homepage (SMH) for Linux 6.0 and 6.1 allows...9.0 High
- adobe acrobat, flash player, acrobat reader +2 moreAdobe Flash Player 10.1.82.76 and earlier on Windows, Mac OS X, Linux, and Solaris and 10.1.92.10...9.3 High
- rim blackberry desktop softwareUntrusted search path vulnerability in BlackBerry Desktop Software before 6.0.0.47 allows local...9.3 High
- mailenableThe SMTP service (MESMTPC.exe) in MailEnable 3.x and 4.25 does not properly perform a length...5.0 Medium
- djangoproject djangoCross-site scripting in django4.3 Medium
- scott james remnant mountallmountall.c in mountall before 2.15.2 uses 0666 permissions for the root.rules file, which allows...6.9 Medium
- splunkSplunk 4.0.0 through 4.1.4 allows remote attackers to conduct session hijacking attacks and...4.6 Medium
- splunkThe XML parser in Splunk 4.0.0 through 4.1.4 allows remote authenticated users to obtain...8.8 High
- ibm proventia network mail security system virtual appliance, proventia network mail security system virtual appliance firmware +1 moreCRLF injection vulnerability in load.php in the Local Management Interface (LMI) on the IBM...3.5 Low
- ibm proventia network mail security system virtual appliance, proventia network mail security system virtual appliance firmware +1 moreDirectory traversal vulnerability in sla/index.php in the Local Management Interface (LMI) on the...4.0 Medium
- ibm proventia network mail security system virtual appliance, proventia network mail security system virtual appliance firmware +1 moreMultiple cross-site request forgery (CSRF) vulnerabilities in the Local Management Interface (LMI...6.8 Medium
- ibm proventia network mail security system virtual appliance, proventia network mail security system virtual appliance firmware +1 moreMultiple cross-site scripting (XSS) vulnerabilities in the Local Management Interface (LMI) on...4.3 Medium
- march-hare cvs suite, cvsnt +1 moreperms.cpp in March Hare Software CVSNT 2.0.58, 2.5.01, 2.5.02, 2.5.03 before build 3736, 2.5.04...9.3 High
- ibm filenet content managerOpen redirect vulnerability in IBM Records Manager (RM) 4.5.x before 4.5.1.1-IER-FP001 allows...6.8 Medium
- ibm filenet content managerIBM Records Manager (RM) 4.5.x before 4.5.1.1-IER-FP001 places a session token in the URI, which...5.0 Medium
- ibm filenet content managerIBM Records Manager (RM) 4.5.x before 4.5.1.1-IER-FP001 transmits passwords in cleartext, which...5.0 Medium
- ibm filenet content managerCross-site scripting (XSS) vulnerability in IBM Records Manager (RM) 4.5.x before 4.5.1.1-IER...4.3 Medium
- flockCross-site scripting (XSS) vulnerability in Flock Browser 3.0.0.3989 allows remote attackers to...4.3 Medium
- hp data protector expressUnspecified vulnerability in HP Data Protector Express, and Data Protector Express Single Server...7.2 High
- apache traffic serverApache Traffic Server before 2.0.1, and 2.1.x before 2.1.2-unstable, does not properly choose DNS...4.3 Medium
- futomi access analyzer cgiCross-site scripting (XSS) vulnerability in futomi CGI Cafe Access Analyzer CGI Professional, and...4.3 Medium
- phpmyadminCross-site scripting (XSS) vulnerability in setup/frames/index.inc.php in the setup script in...4.3 Medium
- tigris tortoisesvnUntrusted search path vulnerability in TortoiseSVN 1.6.10, Build 19898 and earlier allows local...9.3 High
- hp proliant g6 lights-out 100 remote managementUnspecified vulnerability on the HP ProLiant G6 Lights-Out 100 Remote Management card with...7.8 High
- todd miller sudoSudo 1.7.0 through 1.7.4p3, when a Runas group is configured, does not properly handle use of the...6.2 Medium
- apple safari, google android, webkitgtk +2 moreWebKit in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2; Android before 2.2; and webkitgtk...9.3 High
- apple safariUse-after-free vulnerability in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2 allows remote...9.3 High
- apple safariUntrusted search path vulnerability in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2 on...6.9 Medium
- cisco wireless lan controller softwareCisco Wireless LAN Controller (WLC) software, possibly 6.0.x or possibly 4.1 through 6.0.x,...5.0 Medium
- cisco wireless lan controller softwareCisco Wireless LAN Controller (WLC) software, possibly 4.2 through 6.0, allows remote...9.0 High
- Show moreLoading…