CVEs published in October 2010
439 vulnerabilities, 127 critical, 1 exploited.
- microsoft excel, excel viewer, office compatibility pack +2 moreMicrosoft Excel 2002 SP3 and 2007 SP2; Excel Viewer SP2; and Office Compatibility Pack for Word,...9.3 High
- microsoft excelMicrosoft Excel 2002 SP3 does not properly validate record information, which allows remote...9.3 High
- microsoft excel, office +1 moreMicrosoft Excel 2002 SP3 and 2003 SP3, and Office 2004 for Mac, does not properly validate binary...9.3 High
- microsoft excel, office +1 moreMicrosoft Excel 2002 SP3 and Office 2004 for Mac do not properly validate record information,...9.3 High
- microsoft excel, office, open xml file format converter +2 moreMicrosoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format...9.3 High
- microsoft excelMicrosoft Excel 2002 SP3 does not properly validate formula information, which allows remote...9.3 High
- microsoft excelMicrosoft Excel 2002 SP3 does not properly validate formula information, which allows remote...9.3 High
- microsoft excelMicrosoft Excel 2002 SP3 and 2003 SP3 does not properly validate record information, which allows...9.3 High
- microsoft excel, excel viewer, office +2 more +4 moreMicrosoft Excel 2003 SP3 and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format...9.3 High
- microsoft excel, office, open xml file format converter +2 moreMicrosoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for...9.3 High
- microsoft excelInteger overflow in Microsoft Excel 2002 SP3 allows remote attackers to execute arbitrary code...9.3 High
- microsoft windows 7, windows server 2008, windows vista +2 moreThe Secure Channel (aka SChannel) security package in Microsoft Windows Vista SP1 and SP2,...7.1 High
- microsoft .net frameworkThe JIT compiler in Microsoft .NET Framework 4.0 on 64-bit platforms does not properly perform...9.3 High
- microsoft windows 7, windows vista +1 moreUse-after-free vulnerability in the Media Player Network Sharing Service in Microsoft Windows...7.6 High
- microsoft windows server 2008The user interface in Microsoft Cluster Service (MSCS) in Microsoft Windows Server 2008 R2 does...7.5 High
- microsoft windows xp, windows server 2003 +1 moreStack-based buffer overflow in the Remote Procedure Call Subsystem (RPCSS) in Microsoft Windows...7.2 High
- microsoft office, word, word viewer +2 moreMicrosoft Word 2002 SP3 and 2003 SP3, Office 2004 for Mac, and Word Viewer do not properly handle...9.3 High
- microsoft office, word +1 moreUnspecified vulnerability in Microsoft Word 2002 SP3 and Office 2004 for Mac allows remote...9.3 High
- microsoft wordArray index vulnerability in Microsoft Word 2002 SP3 allows remote attackers to execute arbitrary...9.3 High
- microsoft wordHeap-based buffer overflow in Microsoft Word 2002 SP3 allows remote attackers to execute...9.3 High
- microsoft wordDouble free vulnerability in Microsoft Word 2002 SP3 allows remote attackers to execute arbitrary...9.3 High
- microsoft office, word +1 moreMicrosoft Word 2002 SP3 and Office 2004 for Mac allow remote attackers to execute arbitrary code...9.3 High
- microsoft office, word +1 moreMicrosoft Word 2002 SP3 and Office 2004 for Mac do not properly handle unspecified return values...9.3 High
- microsoft office, office compatibility pack, office web apps +4 more +6 moreStack-based buffer overflow in Microsoft Word 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004...9.3 High
- microsoft office, word +1 moreArray index error in Microsoft Word 2002 SP3 and Office 2004 for Mac allows remote attackers to...9.3 High
- microsoft office, word +1 moreMicrosoft Word 2002 SP3 and Office 2004 for Mac do not properly check an unspecified boundary...9.3 High
- microsoft office, word +1 moreMicrosoft Word 2002 SP3 and Office 2004 for Mac do not properly handle an uninitialized pointer...9.3 High
- microsoft windows 7, windows server 2003, windows server 2008 +3 more +5 moreHeap-based buffer overflow in Comctl32.dll (aka the common control library) in Microsoft Windows...7.6 High
- microsoft windows media playerMicrosoft Windows Media Player (WMP) 9 through 12 does not properly deallocate objects during a...9.3 High
- microsoft windows 7, windows server 2003, windows server 2008 +3 more +5 moreThe kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows...7.2 High
- microsoft windows xp, windows 2003 server, windows server 2003 +2 moreThe OpenType Font (OTF) format driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2...7.2 High
- microsoft windows xp, windows 2003 server, windows server 2003 +2 moreThe OpenType Font (OTF) format driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2...7.2 High
- microsoft windows 7, windows server 2003, windows server 2008 +3 more +5 moreInteger overflow in the Embedded OpenType (EOT) Font Engine in Microsoft Windows XP SP2 and SP3,...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 6 and 7 on Windows XP and Vista does not prevent script from...2.6 Low
- curlAbsolute path traversal vulnerability in curl 7.20.0 through 7.21.1, when the --remote-header...5.8 Medium
- popplerThe PostScriptFunction::PostScriptFunction function in poppler/Function.cc in the PDF parser in...4.3 Medium
- infradead openconnectUnspecified vulnerability in OpenConnect before 2.23 allows remote AnyConnect SSL VPN servers to...5.0 Medium
- infradead openconnectOpenConnect before 2.26 places the webvpn cookie value in the debugging output, which might allow...5.0 Medium
- infradead openconnectOpenConnect before 2.25 does not properly validate X.509 certificates, which allows man-in-the...6.4 Medium
- christian dywan midoriMidori before 0.2.5, when WebKitGTK+ before 1.1.14 or LibSoup before 2.29.91 is used, does not...5.8 Medium
- gnome epiphanyEpiphany 2.28 and 2.29, when WebKit and LibSoup are used, unconditionally displays a closed-lock...5.8 Medium
- gnu glibcCertain run-time memory protection mechanisms in the GNU C Library (aka glibc or libc6) print...5.0 Medium
- duckcorp bipbip before 0.8.6 allows remote attackers to cause a denial of service (NULL pointer dereference...5.0 Medium
- infradead openconnectDouble free vulnerability in OpenConnect before 1.40 might allow remote AnyConnect SSL VPN...5.0 Medium
- cisco secure desktopCisco Secure Desktop (CSD), when used in conjunction with an AnyConnect SSL VPN server, does not...2.1 Low
- cisco anyconnect ssl vpnThe Cisco trial client on Linux for Cisco AnyConnect SSL VPN allows local users to overwrite...3.3 Low
- redhat enterprise mrglib/MessageStoreImpl.cpp in Red Hat Enterprise MRG before 1.2.2 allows remote authenticated users...4.0 Medium
- david shadoff mednafenThe network-play implementation in Mednafen before 0.8.D might allow remote servers to execute...10.0 High
- apache qpid, redhat enterprise mrg +1 moresys/ssl/SslSocket.cpp in qpidd in Apache Qpid, as used in Red Hat Enterprise MRG before 1.2.2 and...4.3 Medium
- squid-cache squiddns_internal.cc in Squid 3.1.6, when IPv6 DNS resolution is not enabled, accesses an invalid...5.0 Medium
- Show moreLoading…