Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2010
September

CVEs published in September 2010

287 vulnerabilities, 50 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

drupalThe upload module in Drupal 5.x before 5.23 and 6.x before 6.18 does not properly support case...CVE-2010-30925.5 MediumSeptember 20, 2010
drupal, peter wolanin openid +1 moreThe OpenID module in Drupal 6.x before 6.18, and the OpenID module 5.x before 5.x-1.4 for Drupal,...CVE-2010-30915.0 MediumSeptember 20, 2010
bzip bzip2, libzip2 +1 moreInteger overflow in the BZ2_decompress function in decompress.c in bzip2 and libbzip2 before 1.0...CVE-2010-0405Fix available5.1 MediumSeptember 20, 2010
squid-cache squidThe string-comparison functions in String.cci in Squid 3.x before 3.1.8 and 3.2.x before 3.2.0.2...CVE-2010-3072Fix availableEPSS 59.9%5.0 MediumSeptember 19, 2010
e-xoopport samsaraSQL injection vulnerability in modules/sections/index.php in E-Xoopport Samsara 3.1 and earlier,...CVE-2010-3467Public exploit6.8 MediumSeptember 17, 2010
netartmedia iboutique.mallCross-site scripting (XSS) vulnerability in index.php in the hosted_signup module in NetArt Media...CVE-2010-34664.3 MediumSeptember 17, 2010
ecommercesoft xse shopping cartMultiple cross-site scripting (XSS) vulnerabilities in XSE Shopping Cart 1.5.2.1 and 1.5.3.0...CVE-2010-34654.3 MediumSeptember 17, 2010
santafoxCross-site request forgery (CSRF) vulnerability in admin/manager_users.class.php in SantaFox 2.02...CVE-2010-34646.8 MediumSeptember 17, 2010
santafoxCross-site scripting (XSS) vulnerability in modules/search/search.class.php in SantaFox 2.02, and...CVE-2010-34634.3 MediumSeptember 17, 2010
mollifyCross-site scripting (XSS) vulnerability in backend/plugin/Registration/index.php in Mollify 1.6,...CVE-2010-3462Public exploit4.3 MediumSeptember 17, 2010
endonesiaSQL injection vulnerability in the Publisher module in eNdonesia 8.4 allows remote attackers to...CVE-2010-3461Public exploit7.5 HighSeptember 17, 2010
gecad axigen mail serverDirectory traversal vulnerability in the HTTP interface in AXIGEN Mail Server 7.4.1 for Windows...CVE-2010-3460Public exploit5.0 MediumSeptember 17, 2010
gecad axigen mail serverCross-site scripting (XSS) vulnerability in the Ajax WebMail interface in AXIGEN Mail Server...CVE-2010-34594.3 MediumSeptember 17, 2010
getsymphony symphonySQL injection vulnerability in lib/toolkit/events/event.section.php in Symphony CMS 2.0.7 and 2.1...CVE-2010-3458Public exploit7.5 HighSeptember 17, 2010
getsymphony symphonyMultiple cross-site scripting (XSS) vulnerabilities in Symphony CMS 2.0.7 and 2.1.1 allow remote...CVE-2010-3457Public exploit4.3 MediumSeptember 17, 2010
energyscripts simple downloadDirectory traversal vulnerability in download.php in EnergyScripts (ES) Simple Download 1.0...CVE-2010-3456Public exploit5.0 MediumSeptember 17, 2010
atutor acheckerCross-site scripting (XSS) vulnerability in index.php in AChecker 1.0 allows remote attackers to...CVE-2010-34554.3 MediumSeptember 17, 2010
hp system management homepageCross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 6.2 allows...CVE-2010-30124.3 MediumSeptember 17, 2010
microsoft groove server, internet explorer, sharepoint foundation +3 more +5 moreThe toStaticHTML function in Microsoft Internet Explorer 8, and the SafeHTML function in...CVE-2010-3324Public exploitEPSS 25.0%4.3 MediumSeptember 17, 2010
arg0 encfsEncFS before 1.7.0 encrypts multiple blocks by means of the CFB cipher mode with the same...CVE-2010-3075Fix available5.0 MediumSeptember 17, 2010
arg0 encfsSSL_Cipher.cpp in EncFS before 1.7.0 uses an improper combination of an AES cipher and a CBC...CVE-2010-3074Fix available2.1 LowSeptember 17, 2010
arg0 encfsSSL_Cipher.cpp in EncFS before 1.7.0 does not properly handle integer data sizes when...CVE-2010-3073Public exploitFix available2.1 LowSeptember 17, 2010
hp system management homepageCRLF injection vulnerability in HP System Management Homepage (SMH) before 6.2 allows remote...CVE-2010-30115.0 MediumSeptember 17, 2010
linux kernel, suse linux enterprise desktop, linux enterprise server +1 more +3 moreThe compat_alloc_user_space functions in include/asm/compat.h files in the Linux kernel before 2...CVE-2010-3081Public exploitFix available7.8 HighSeptember 17, 2010
linux kernel, canonical ubuntu linux, opensuse +3 more +5 moreDouble free vulnerability in the snd_seq_oss_open function in sound/core/seq/oss/seq_oss_init.c...CVE-2010-30807.2 HighSeptember 17, 2010
linux kernel, canonical ubuntu linux, opensuse +3 more +5 moreThe xfs_ioc_fsgetxattr function in fs/xfs/linux-2.6/xfs_ioctl.c in the Linux kernel before 2.6.36...CVE-2010-30785.5 MediumSeptember 17, 2010
intermesh group-officeSQL injection vulnerability in modules/notes/json.php in Intermesh Group-Office 3.5.9 allows...CVE-2010-3428Public exploit7.5 HighSeptember 16, 2010
open-classifieds open classifiedsMultiple cross-site scripting (XSS) vulnerabilities in Open Classifieds 1.7.0.2 allow remote...CVE-2010-34274.3 MediumSeptember 16, 2010
4you-studio com jphoneDirectory traversal vulnerability in jphone.php in the JPhone (com_jphone) component 1.0 Alpha 3...CVE-2010-3426Public exploitEPSS 13.9%7.5 HighSeptember 16, 2010
smartertools smarterstatsCross-site scripting (XSS) vulnerability in UserControls/Popups/frmHelp.aspx in SmarterStats 5.3,...CVE-2010-3425Public exploit4.3 MediumSeptember 16, 2010
invisioncommunity invision power boardCross-site scripting (XSS) vulnerability in admin/sources/classes/bbcode/custom/defaults.php in...CVE-2010-34244.3 MediumSeptember 16, 2010
freka yr verdataSQL injection vulnerability in the Yr Weatherdata module for Drupal 6.x before 6.x-1.6 allows...CVE-2010-34237.5 HighSeptember 16, 2010
solventus com jgenSQL injection vulnerability in the JGen (com_jgen) component 0.9.33 for Joomla! allows remote...CVE-2010-3422Public exploit7.5 HighSeptember 16, 2010
productcartCross-site scripting (XSS) vulnerability in AffiliateLogin.asp in ProductCart 3, 4.1 SP1, and...CVE-2010-34214.3 MediumSeptember 16, 2010
webassist powerstoreCross-site scripting (XSS) vulnerability in Products_Results.php in PowerStore 3.0 allows remote...CVE-2010-34204.3 MediumSeptember 16, 2010
haudenschilt family connections cmsMultiple PHP remote file inclusion vulnerabilities in Haudenschilt Family Connections CMS (FCMS)...CVE-2010-3419Public exploit7.5 HighSeptember 16, 2010
netartmedia car portalMultiple cross-site scripting (XSS) vulnerabilities in NetArt Media Car Portal 2.0 and earlier...CVE-2010-34184.3 MediumSeptember 16, 2010
google chromeGoogle Chrome before 6.0.472.59 does not prompt the user before granting access to the extension...CVE-2010-34175.0 MediumSeptember 16, 2010
google chromeGoogle Chrome before 6.0.472.59 on Linux does not properly implement the Khmer locale, which...CVE-2010-34169.8 CriticalSeptember 16, 2010
google chromeGoogle Chrome before 6.0.472.59 does not properly implement Geolocation, which allows remote...CVE-2010-341510.0 HighSeptember 16, 2010
google chromeGoogle Chrome before 6.0.472.59 on Mac OS X does not properly implement file dialogs, which...CVE-2010-341410.0 HighSeptember 16, 2010
google chromeUnspecified vulnerability in the pop-up blocking functionality in Google Chrome before 6.0.472.59...CVE-2010-34135.0 MediumSeptember 16, 2010
google chromeRace condition in the console implementation in Google Chrome before 6.0.472.59 has unspecified...CVE-2010-34129.3 HighSeptember 16, 2010
google chromeGoogle Chrome before 6.0.472.59 on Linux does not properly handle cursors, which might allow...CVE-2010-34115.0 MediumSeptember 16, 2010
ibm lotus dominoStack-based buffer overflow in the MailCheck821Address function in nnotes.dll in the nrouter.exe...CVE-2010-3407Public exploitEPSS 41.5%9.3 HighSeptember 16, 2010
ibm aixUnspecified vulnerability in sa_snap in the bos.esagent fileset in IBM AIX 5.3 allows local users...CVE-2010-34061.7 LowSeptember 16, 2010
ibm aix, vios +1 moreBuffer overflow in sa_snap in the bos.esagent fileset in IBM AIX 6.1, 5.3, and earlier and VIOS 2...CVE-2010-34056.8 MediumSeptember 16, 2010
eshtery.she7ata eshtery cmsMultiple SQL injection vulnerabilities in eshtery CMS (aka eshtery.com) allow remote attackers to...CVE-2010-3404Public exploit7.5 HighSeptember 16, 2010
qualcomm extensible diagnostic monitorUntrusted search path vulnerability in Qualcomm eXtensible Diagnostic Monitor (QXDM) 03.09.19...CVE-2010-34039.3 HighSeptember 16, 2010
ultraeditUntrusted search path vulnerability in IDM Computer Solutions UltraEdit 16.20.0.1009, 16.10.0...CVE-2010-34029.3 HighSeptember 16, 2010
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open