CVEs published in November 2010
289 vulnerabilities, 70 critical, 3 exploited.
- usaaThe USAA application 3.0 for Android stores a mirror image of each visited web page, which might...1.9 Low
- ebay paypalThe PayPal app before 3.0.1 for iOS does not verify that the server hostname matches the domain...2.9 Low
- php, canonical ubuntu linux +1 moreThe ZipArchive::getArchiveComment function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3...4.3 Medium
- php, canonical ubuntu linux +1 morefopen_wrappers.c in PHP 5.3.x through 5.3.3 might allow remote attackers to bypass open_basedir...5.0 Medium
- yahoo yuiCross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.8.0...4.3 Medium
- yahoo yuiCross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.5.0...4.3 Medium
- yahoo yuiCross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.4.0...4.3 Medium
- adobe acrobat, acrobat reader +1 moreThe EScript.api plugin in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.1, and 8.x...9.3 High
- adobe flash playerUnspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on...9.3 High
- adobe flash playerUnspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on...9.3 High
- adobe flash playerUnspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on...9.3 High
- adobe flash playerUnspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on...9.3 High
- adobe flash playerUnspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on...9.3 High
- adobe flash playerUnspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on...9.3 High
- adobe flash playerUnspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on...9.3 High
- adobe flash playerUnspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on...9.3 High
- adobe flash playerUnspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on...9.3 High
- adobe flash playerUnspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on...9.3 High
- adobe flash playerUnspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on...9.3 High
- adobe flash playerUnspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on...9.3 High
- adobe flash playerUnspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on...9.3 High
- adobe flash playerUnspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on...4.3 Medium
- adobe flash playerAn unspecified ActiveX control in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64...9.3 High
- adobe flash playerAdobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and...9.3 High
- google chrome, webkitgtk, fedoraproject fedora +2 moreArray index error in the FEBlend::apply function in WebCore/platform/graphics/filters/FEBlend.cpp...8.8 High
- google chromeGoogle Chrome before 7.0.517.44 does not properly handle the data types of event objects, which...9.8 Critical
- google chrome, webkitgtk, fedoraproject fedora +2 moreWebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products,...9.8 Critical
- google chrome, webmproject libvpx, redhat enterprise linux desktop +2 more +4 moreWebM libvpx (aka the VP8 Codec SDK) before 0.9.5, as used in Google Chrome before 7.0.517.44,...9.8 Critical
- google chromeMultiple integer overflows in Google Chrome before 7.0.517.44 on Linux allow remote attackers to...9.8 Critical
- google chromeUse-after-free vulnerability in Google Chrome before 7.0.517.44 allows remote attackers to cause...9.8 Critical
- google chrome, debian linux +1 moreGoogle Chrome before 7.0.517.44 does not properly perform a cast of an unspecified variable...8.8 High
- google chrome, webkitgtk, fedoraproject fedora +2 moreWebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products,...8.8 High
- google chrome, webkitgtk, fedoraproject fedora +2 moreUse-after-free vulnerability in WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk...9.8 Critical
- gnome tomboyThe (1) tomboy and (2) tomboy-panel scripts in GNOME Tomboy 1.5.2 and earlier place a zero-length...6.9 Medium
- gromacs** DISPUTED ** GMXRC.bash in Gromacs 4.5.1 and earlier places a zero-length directory name in the...4.6 Medium
- gnome gnome-shellgnome-shell in GNOME Shell 2.31.5 places a zero-length directory name in the LD_LIBRARY_PATH,...6.9 Medium
- banshee-project bansheeThe (1) banshee-1 and (2) muinshee scripts in Banshee 1.8.0 and earlier place a zero-length...6.9 Medium
- justsystems ichitaroUnspecified vulnerability in JustSystems Ichitaro and Ichitaro Government allows remote attackers...9.3 High
- justsystems ichitaroUnspecified vulnerability in JustSystems Ichitaro and Ichitaro Government allows remote attackers...9.3 High
- redhat luciThe default configuration of Luci 0.22.4 and earlier in Red Hat Conga uses "[INSERT SECRET HERE]"...6.4 Medium
- pythonpaste pastePaste is vulnerable to Cross-site Scripting via vectors involving a 404 status code4.3 Medium
- nullsoft winampMultiple heap-based buffer overflows in vp6.w5s (aka the VP6 codec) in Winamp before 5.59 Beta...9.3 High
- turbogears turbogears2The URL dispatch mechanism in TurboGears2 (aka tg2) before 2.0.2 exposes controller methods even...7.5 High
- turbogears turbogears2The default quickstart configuration of TurboGears2 (aka tg2) before 2.0.2 has a weak cookie salt...7.5 High
- adobe shockwave playerUse-after-free vulnerability in an unspecified compatibility component in Adobe Shockwave Player...9.3 High
- onlinetechtools.com oasys professionalSQL injection vulnerability in process.asp in OnlineTechTools Online Work Order System (OWOS)...7.5 High
- energineSQL injection vulnerability in index.php in Energine, possibly 2.3.8 and earlier, allows remote...7.5 High
- netsupportsoftware netsupport managerNetSupport Manager (NSM) before 11.00.0005 sends HTTP headers with cleartext fields containing...5.0 Medium
- htmlpurifierHTML Purifier cross-site scripting (XSS) vulnerability4.3 Medium
- gnucashgnc-test-env in GnuCash 2.3.15 and earlier places a zero-length directory name in the...6.9 Medium
- Show moreLoading…