CVEs published in October 2010
439 vulnerabilities, 127 critical, 1 exploited.
- adobe shockwave player Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a... 9.3 High
- adobe shockwave player IML32.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code... 9.3 High
- adobe shockwave player dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code... 9.3 High
- adobe shockwave player IML32.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code... 9.3 High
- adobe shockwave player dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code... 9.3 High
- adobe shockwave player dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code... 9.3 High
- adobe shockwave player dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code... 9.3 High
- ibm websphere application server, vmware springsource spring security, acegisecurity acegi-security +2 more Authentication Bypass Using an Alternate Path or Channel in SpringSource Spring Security and Acegi Security 5.0 Medium
- adobe shockwave player Stack-based buffer overflow in dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows... 9.3 High
- adobe acrobat, flash player, acrobat reader +2 more Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and... 9.3 High
- cisco ciscoworks common services, ciscoworks lan management solution, qos policy manager +4 more +6 more Multiple buffer overflows in the authentication functionality in the web-server module in Cisco... 10.0 High
- adobe shockwave player An unspecified function in TextXtra.x32 in Adobe Shockwave Player before 11.5.9.615 does not... 9.3 High
- adobe shockwave player dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows remote attackers to execute... 9.3 High
- ibm tivoli provisioning manager os deployment ** DISPUTED ** The TCP-to-ODBC gateway in IBM Tivoli Provisioning Manager for OS Deployment 7.1.1... 7.5 High
- ibm tivoli access manager for e-business Multiple cross-site scripting (XSS) vulnerabilities in the TAM console in IBM Tivoli Access... 4.3 Medium
- hp storage essentials Unspecified vulnerability in HP Storage Essentials before 6.3.0, when LDAP authentication is... 7.5 High
- hp loadrunner, loadrunner web tours +1 more Unspecified vulnerability in LoadRunner Web Tours 9.10 in HP LoadRunner 9.1 and earlier allows... 7.5 High
- hp palm webos Unspecified vulnerability in the camera application in HP Palm webOS 1.4.1 allows local users to... 5.6 Medium
- hp palm webos Unspecified vulnerability in the service API in HP Palm webOS 1.4.1 allows local users to gain... 6.2 Medium
- hp palm webos Unspecified vulnerability in Doc Viewer in HP Palm webOS 1.4.1 allows remote attackers to execute... 9.3 High
- hp insight control power management Cross-site request forgery (CSRF) vulnerability in HP Insight Control Power Management before 6.2... 6.8 Medium
- hp insight control power management Cross-site scripting (XSS) vulnerability in HP Insight Control Power Management before 6.2 allows... 4.3 Medium
- hp, hp version control repository manager +1 more Cross-site scripting (XSS) vulnerability in HP Version Control Repository Manager (VCRM) before 6... 4.3 Medium
- hp insight control server migration, insight control server migration6.0.1 +1 more Unspecified vulnerability in HP Insight Control Server Migration before 6.2 allows remote... 6.4 Medium
- hp insight control server migration, insight control server migration6.0.1 +1 more Unspecified vulnerability in HP Insight Control Server Migration before 6.2 allows remote... 9.0 High
- hp insight control server migration, insight control server migration6.0.1 +1 more Cross-site scripting (XSS) vulnerability in HP Insight Control Server Migration before 6.2 allows... 4.3 Medium
- hp virtual server environment Unspecified vulnerability in HP Virtual Server Environment before 6.2 allows remote attackers to... 5.0 Medium
- hp insight control virtual machine management Cross-site request forgery (CSRF) vulnerability in HP Insight Control Virtual Machine Management... 6.8 Medium
- hp insight control virtual machine management Unspecified vulnerability in HP Insight Control Virtual Machine Management before 6.2 allows... 5.0 Medium
- hp insight control virtual machine management Cross-site scripting (XSS) vulnerability in HP Insight Control Virtual Machine Management before... 4.3 Medium
- symantec im manager Multiple SQL injection vulnerabilities in the Administrative Interface in the IIS extension in... 7.5 High
- rubyonrails rails Rails activerecord gem has Improper Input Validation vulnerability 6.4 Medium
- mozilla firefox, seamonkey, thunderbird +1 more +3 more Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and... 9.3 High
- usebb rss.php in UseBB before 1.0.11 does not properly handle forum configurations in which a user has... 4.3 Medium
- joomla joomla\! Cross-site scripting (XSS) vulnerability in Joomla! 1.5.x before 1.5.21 and 1.6.x before 1.6.1... 4.3 Medium
- pidgin libpurple in Pidgin before 2.7.4 does not properly validate the return value of the... 4.0 Medium
- tu-braunschweig libsmi Buffer overflow in the smiGetNode function in lib/smi.c in libsmi 0.4.8 allows context-dependent... 7.5 High
- nitrosecurity nitroview esm software ess.pm in NitroSecurity NitroView ESM 8.4.0a, when ESSPMDebug is enabled, allows remote attackers... 6.8 Medium
- monotone monotone before 0.48.1, when configured to allow remote commands, allows remote attackers to... 5.0 Medium
- avatic aardvark topsites php Multiple cross-site scripting (XSS) vulnerabilities in index.php in Aardvark Topsites PHP 5.2.0... 4.3 Medium
- monkeysphere project monkeysphere share/ma/keys_for_user in Monkeysphere 0.31 and 0.32 allows local users to execute arbitrary code... 4.6 Medium
- microsoft windows 7, windows server 2003, windows server 2008 +2 more +4 more Stack-based buffer overflow in the UpdateFrameTitleForDocument method in the CFrameWnd class in... 9.3 High
- robo-ftp Directory traversal vulnerability in the FTP client in Serengeti Systems Incorporated Robo-FTP 3... 9.3 High
- hp operations orchestration Cross-site scripting (XSS) vulnerability in HP Operations Orchestration before 9.0, when Internet... 4.3 Medium
- tibco activematrix businessworks service engine, activematrix service bus, activematrix service grid +1 more +3 more The (1) ActiveMatrix Runtime and (2) ActiveMatrix Administrator components in TIBCO ActiveMatrix... 10.0 High
- adobe robohelp, robohelp server +1 more Multiple cross-site scripting (XSS) vulnerabilities in Adobe RoboHelp 7 and 8, and RoboHelp... 4.3 Medium
- adobe robohelp, robohelp server +1 more Cross-site scripting (XSS) vulnerability in Adobe RoboHelp 7 and 8, and RoboHelp Server 7 and 8,... 4.3 Medium
- realpage module activex control Multiple buffer overflows in the RealPage Module Upload ActiveX control in Realpage.dll 1.0.0.9... 10.0 High
- realpage module activex controls The Upload method in the RealPage Module Upload ActiveX control in Realpage.dll 1.0.0.9 in... 5.0 Medium
- openfabrics enterprise distribution openibd in OpenFabrics Enterprise Distribution (OFED) 1.5.2 allows local users to overwrite... 6.3 Medium
- Show olderLoading…