Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2010
September

CVEs published in September 2010

287 vulnerabilities, 50 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

cisco iosMemory leak in the SSL VPN feature in Cisco IOS 12.4, 15.0, and 15.1, when HTTP port redirection...CVE-2010-28367.8 HighSeptember 23, 2010
cisco ios, ios xe, unified communications manager +2 moreCisco IOS 12.2 through 12.4 and 15.0 through 15.1, Cisco IOS XE 2.5.x and 2.6.x before 2.6.1, and...CVE-2010-28357.8 HighSeptember 23, 2010
cisco ios, ios xe, unified communications manager +2 moreCisco IOS 12.2 through 12.4 and 15.0 through 15.1, Cisco IOS XE 2.5.x and 2.6.x before 2.6.1, and...CVE-2010-28347.8 HighSeptember 23, 2010
cisco ios, ios xe +1 moreUnspecified vulnerability in the NAT for H.225.0 implementation in Cisco IOS 12.1 through 12.4...CVE-2010-28337.8 HighSeptember 23, 2010
cisco ios, ios xe +1 moreUnspecified vulnerability in the NAT for H.323 implementation in Cisco IOS 12.1 through 12.4 and...CVE-2010-28327.8 HighSeptember 23, 2010
cisco ios, ios xe +1 moreUnspecified vulnerability in the NAT for SIP implementation in Cisco IOS 12.1 through 12.4 and 15...CVE-2010-28317.8 HighSeptember 23, 2010
cisco ios, ios xe +1 moreThe IGMPv3 implementation in Cisco IOS 12.2, 12.3, 12.4, and 15.0 and IOS XE 2.5.x before 2.5.2,...CVE-2010-28307.1 HighSeptember 23, 2010
cisco ios, ios xe +1 moreUnspecified vulnerability in the H.323 implementation in Cisco IOS 12.1 through 12.4 and 15.0...CVE-2010-28297.8 HighSeptember 23, 2010
cisco ios, ios xe +1 moreUnspecified vulnerability in the H.323 implementation in Cisco IOS 12.1 through 12.4 and 15.0...CVE-2010-28287.8 HighSeptember 23, 2010
digitalworkroom cms digital workroomCross-site scripting (XSS) vulnerability in netautor/napro4/home/login2.php in CMS Digital...CVE-2010-3489Public exploit4.3 MediumSeptember 22, 2010
houbysoft quickshareDirectory traversal vulnerability in QuickShare 1.0 allows remote attackers to read arbitrary...CVE-2010-34885.0 MediumSeptember 22, 2010
yellosoft pinkyDirectory traversal vulnerability in YelloSoft Pinky 1.0 for Windows allows remote attackers to...CVE-2010-34875.0 MediumSeptember 22, 2010
smartertools smartermailDirectory traversal vulnerability in FileStorageUpload.ashx in SmarterMail 7.1.3876 allows remote...CVE-2010-3486Public exploit5.0 MediumSeptember 22, 2010
lightneasySQL injection vulnerability in common.php in LightNEasy 3.2.1 allows remote attackers to execute...CVE-2010-3485Public exploitFix available7.5 HighSeptember 22, 2010
lightneasySQL injection vulnerability in common.php in LightNEasy 3.2.1 allows remote attackers to execute...CVE-2010-3484Public exploitFix available7.5 HighSeptember 22, 2010
bouzouste primitive cmscms_write.php in Primitive CMS 1.0.9 does not properly restrict access, which allows remote...CVE-2010-3483Public exploit7.5 HighSeptember 22, 2010
bouzouste primitive cmsMultiple SQL injection vulnerabilities in cms_write.php in Primitive CMS 1.0.9 allow remote...CVE-2010-3482Public exploit6.5 MediumSeptember 22, 2010
apphp php microcmsMultiple SQL injection vulnerabilities in login.php in ApPHP PHP MicroCMS 1.0.1, when...CVE-2010-3481Public exploit6.8 MediumSeptember 22, 2010
apphp php microcmsDirectory traversal vulnerability in index.php in ApPHP PHP MicroCMS 1.0.1, when magic_quotes_gpc...CVE-2010-3480Public exploit6.8 MediumSeptember 22, 2010
boutikoneSQL injection vulnerability in list.php in BoutikOne 1.0 allows remote attackers to execute...CVE-2010-3479Public exploit7.5 HighSeptember 22, 2010
e-soft24 banner exchange scriptSQL injection vulnerability in click.php in e-soft24 Banner Exchange Script 1.0 allows remote...CVE-2009-5003Public exploit7.5 HighSeptember 22, 2010
microsoft .net frameworkMicrosoft .NET Framework 1.1 SP1, 2.0 SP1 and SP2, 3.5, 3.5 SP1, 3.5.1, and 4.0, as used for ASP...CVE-2010-3332Public exploitEPSS 68.2%6.4 MediumSeptember 22, 2010
linux kernel, canonical ubuntu linux, suse linux enterprise real time extension +2 moreThe IA32 system call emulation functionality in arch/x86/ia32/ia32entry.S in the Linux kernel...CVE-2010-3301Public exploit7.2 HighSeptember 22, 2010
debian linux, linux kernel, canonical ubuntu linux +2 moreThe tcf_act_police_dump function in net/sched/act_police.c in the actions implementation in the...CVE-2010-34772.1 LowSeptember 21, 2010
apple mac os x, mac os x server +1 moreApple Filing Protocol (AFP) Server in Apple Mac OS X 10.6.x through 10.6.4 does not properly...CVE-2010-18206.8 MediumSeptember 21, 2010
ibm websphere application serverUnspecified vulnerability in the administrative console in IBM WebSphere Application Server (WAS)...CVE-2010-07814.0 MediumSeptember 21, 2010
debian linux, linux kernel, canonical ubuntu linux +5 more +7 moreInteger overflow in the do_io_submit function in fs/aio.c in the Linux kernel before 2.6.36-rc4...CVE-2010-30674.9 MediumSeptember 21, 2010
linux kernel, avaya aura communication manager, aura presence services +10 more +12 moreThe actions implementation in the network queueing functionality in the Linux kernel before 2.6...CVE-2010-29425.5 MediumSeptember 21, 2010
otrsOpen Ticket Request System (OTRS) 2.3.x before 2.3.6 and 2.4.x before 2.4.8 does not properly...CVE-2010-3476Fix available5.0 MediumSeptember 20, 2010
ibm db2IBM DB2 9.7 before FP3 does not properly enforce privilege requirements for execution of entries...CVE-2010-34754.0 MediumSeptember 20, 2010
ibm db2IBM DB2 9.7 before FP3 does not perform the expected drops or invalidations of dependent...CVE-2010-34745.0 MediumSeptember 20, 2010
ibm filenet p8 application engineOpen redirect vulnerability in the Workplace (aka WP) component in IBM FileNet P8 Application...CVE-2010-34735.8 MediumSeptember 20, 2010
ibm filenet p8 application engineMultiple cross-site scripting (XSS) vulnerabilities in the Workplace (aka WP) component in IBM...CVE-2010-34724.3 MediumSeptember 20, 2010
ibm filenet p8 application engineSession fixation vulnerability in the Workplace (aka WP) component in IBM FileNet P8 Application...CVE-2010-34714.3 MediumSeptember 20, 2010
ibm filenet p8 application engineMultiple cross-site scripting (XSS) vulnerabilities in the Workplace (aka WP) component in IBM...CVE-2010-34704.3 MediumSeptember 20, 2010
ibm filenet p8 application engineThe Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 4.0.2.x before 4.0.2...CVE-2009-50026.4 MediumSeptember 20, 2010
ibm filenet p8 application engineThe Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 4.0.2.x before 4.0.2...CVE-2009-50014.0 MediumSeptember 20, 2010
ibm filenet p8 application engineMultiple cross-site scripting (XSS) vulnerabilities in the Workplace (aka WP) component in IBM...CVE-2009-50004.3 MediumSeptember 20, 2010
ibm filenet p8 application engineCross-site scripting (XSS) vulnerability in the Workplace (aka WP) component in IBM FileNet P8...CVE-2009-49994.3 MediumSeptember 20, 2010
ibm filenet p8 application engineThe Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1...CVE-2009-49982.6 LowSeptember 20, 2010
ibm filenet p8 application engineThe Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1...CVE-2008-72612.1 LowSeptember 20, 2010
ibm filenet p8 application engineThe Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1...CVE-2006-72424.0 MediumSeptember 20, 2010
ibm filenet p8 application engineThe Image Viewer component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-002...CVE-2006-72414.0 MediumSeptember 20, 2010
flockCross-site scripting (XSS) vulnerability in Flock Browser 3.x before 3.0.0.4114 allows remote...CVE-2010-32624.3 MediumSeptember 20, 2010
microsoft wordMSO.dll in Microsoft Word 2003 SP3 11.8326.11.8324 allows remote attackers to cause a denial of...CVE-2010-3200EPSS 10.6%4.3 MediumSeptember 20, 2010
otrsMultiple cross-site scripting (XSS) vulnerabilities in Open Ticket Request System (OTRS) 2.3.x...CVE-2010-2080Fix available3.5 LowSeptember 20, 2010
drupal, peter wolanin openid +1 moreThe OpenID module in Drupal 6.x before 6.18, and the OpenID module 5.x before 5.x-1.4 for Drupal,...CVE-2010-36865.0 MediumSeptember 20, 2010
drupal, peter wolanin openid +1 moreThe OpenID module in Drupal 6.x before 6.18, and the OpenID module 5.x before 5.x-1.4 for Drupal,...CVE-2010-36855.0 MediumSeptember 20, 2010
drupalDrupal cross-site scripting vulnerability via actions feature and trigger moduleCVE-2010-3094Fix available2.1 LowSeptember 20, 2010
drupalThe comment module in Drupal 5.x before 5.23 and 6.x before 6.18 allows remote authenticated...CVE-2010-30933.5 LowSeptember 20, 2010
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open