Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2010
November

CVEs published in November 2010

289 vulnerabilities, 70 critical, 3 exploited.

Known exploitedIn KEVPublic exploitFix available

ibm omnifindIBM OmniFind Enterprise Edition 8.x and 9.x performs web crawls with an unlimited recursion depth...CVE-2010-3899Public exploit5.0 MediumNovember 12, 2010
ibm omnifindIBM OmniFind Enterprise Edition 8.x and 9.x does not properly restrict the cookie path of...CVE-2010-38985.0 MediumNovember 12, 2010
ibm omnifindESSearchApplication/palette.do in IBM OmniFind Enterprise Edition 8.x and 9.x includes the...CVE-2010-38975.0 MediumNovember 12, 2010
ibm omnifindThe ESSearchApplication directory tree in IBM OmniFind Enterprise Edition 8.x and 9.x does not...CVE-2010-38967.5 HighNovember 12, 2010
ibm omnifindesRunCommand in IBM OmniFind Enterprise Edition before 9.1 allows local users to gain privileges...CVE-2010-3895Public exploit7.2 HighNovember 12, 2010
ibm omnifindStack-based buffer overflow in the Java_com_ibm_es_oss_CryptionNative_ESEncrypt function in /opt...CVE-2010-3894Public exploitEPSS 12.0%9.3 HighNovember 12, 2010
ibm omnifindThe administrator interface in IBM OmniFind Enterprise Edition 8.x and 9.x does not restrict use...CVE-2010-3893Public exploit7.5 HighNovember 12, 2010
ibm omnifindSession fixation vulnerability in the login form in the administrator interface in IBM OmniFind...CVE-2010-38926.8 MediumNovember 12, 2010
mozilla firefoxMozilla Firefox before 3.6 Beta 3 does not properly handle overlong UTF-8 encoding, which makes...CVE-2009-50174.3 MediumNovember 12, 2010
phpInteger overflow in the xml_utf8_decode function in ext/xml/xml.c in PHP before 5.2.11 makes it...CVE-2009-50166.8 MediumNovember 12, 2010
ibm omnifindCross-site request forgery (CSRF) vulnerability in ESAdmin/security.do in the administrator...CVE-2010-3891Public exploit6.8 MediumNovember 12, 2010
ibm omnifindCross-site scripting (XSS) vulnerability in IBM OmniFind Enterprise Edition before 9.1 allows...CVE-2010-38904.3 MediumNovember 12, 2010
php, canonical ubuntu linux +1 moreThe utf8_decode function in PHP before 5.3.4 does not properly handle non-shortest form UTF-8...CVE-2010-3870Public exploitEPSS 11.3%6.8 MediumNovember 12, 2010
ibm websphere mqIBM WebSphere MQ 6.0 before 6.0.2.9 and 7.0 before 7.0.1.1 does not encrypt the username and...CVE-2010-26374.3 MediumNovember 12, 2010
scottmac libmbflThe mb_strcut function in Libmbfl 1.1.0, as used in PHP 5.3.x through 5.3.3, allows context...CVE-2010-4156Public exploitEPSS 12.8%5.0 MediumNovember 10, 2010
microsoft forefront unified access gatewayCross-site scripting (XSS) vulnerability in Signurl.asp in Microsoft Forefront Unified Access...CVE-2010-3936EPSS 18.8%4.3 MediumNovember 10, 2010
adobe flash media serverAdobe Flash Media Server (FMS) 3.0.x before 3.0.7, 3.5.x before 3.5.5, and 4.0.x before 4.0.1...CVE-2010-363510.0 HighNovember 10, 2010
adobe flash media serverUnspecified vulnerability in the edge process in Adobe Flash Media Server (FMS) 3.0.x before 3.0...CVE-2010-36345.0 MediumNovember 10, 2010
adobe flash media serverMemory leak in Adobe Flash Media Server (FMS) 3.0.x before 3.0.7, 3.5.x before 3.5.5, and 4.0.x...CVE-2010-36335.0 MediumNovember 10, 2010
microsoft officeUntrusted search path vulnerability in Microsoft Office 2007 SP2 and 2010 allows local users to...CVE-2010-3337EPSS 10.9%9.3 HighNovember 10, 2010
microsoft office, open xml file format converter +1 moreMicrosoft Office XP SP3, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File...CVE-2010-3336EPSS 23.9%9.3 HighNovember 10, 2010
microsoft office, open xml file format converter +1 moreMicrosoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for...CVE-2010-3335EPSS 23.9%9.3 HighNovember 10, 2010
microsoft office, open xml file format converter +1 moreMicrosoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for...CVE-2010-3334EPSS 25.5%9.3 HighNovember 10, 2010
microsoft office, open xml file format converter +1 moreStack-based buffer overflow in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office...CVE-2010-3333In KEVPublic exploitEPSS 89.4%7.8 HighNovember 10, 2010
microsoft forefront unified access gatewayCross-site scripting (XSS) vulnerability in the mobile portal in Microsoft Forefront Unified...CVE-2010-2734EPSS 14.2%4.3 MediumNovember 10, 2010
microsoft forefront unified access gatewayCross-site scripting (XSS) vulnerability in the Web Monitor in Microsoft Forefront Unified Access...CVE-2010-2733EPSS 14.2%4.3 MediumNovember 10, 2010
microsoft forefront unified access gatewayOpen redirect vulnerability in the web interface in Microsoft Forefront Unified Access Gateway ...CVE-2010-2732EPSS 13.4%5.8 MediumNovember 10, 2010
microsoft office, powerpoint, powerpoint viewer +2 moreInteger underflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3, PowerPoint Viewer SP2, and...CVE-2010-2573EPSS 20.3%9.3 HighNovember 10, 2010
microsoft powerpointBuffer overflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute...CVE-2010-2572In KEVEPSS 58.6%7.8 HighNovember 10, 2010
proftpdMultiple stack-based buffer overflows in the pr_netio_telnet_gets function in netio.c in ProFTPD...CVE-2010-4221Public exploitFix availableEPSS 91.3%10.0 HighNovember 9, 2010
ibm websphere application serverCross-site scripting (XSS) vulnerability in the Integrated Solution Console in the Administrative...CVE-2010-42204.3 MediumNovember 9, 2010
ibm websphere portalCross-site scripting (XSS) vulnerability in SemanticTagService.js in IBM WebSphere Portal 6.1.0.1...CVE-2010-42194.3 MediumNovember 9, 2010
ibm enoviaUnspecified vulnerability in Web Services in IBM ENOVIA 6 has unknown impact and attack vectors,...CVE-2010-421810.0 HighNovember 9, 2010
ibm tivoli directory serverUse-after-free vulnerability in the proxy server in IBM Tivoli Directory Server (TDS) 6.0.0.x...CVE-2010-42175.0 MediumNovember 9, 2010
ibm tivoli directory serverIBM Tivoli Directory Server (TDS) 6.0.0.x before 6.0.0.8-TIV-ITDS-IF0007 does not properly handle...CVE-2010-42165.0 MediumNovember 9, 2010
maharaCross-site scripting (XSS) vulnerability in blocktype/groupviews/theme/raw/groupviews.tpl in...CVE-2010-38714.3 MediumNovember 9, 2010
proftpdMultiple directory traversal vulnerabilities in the mod_site_misc module in ProFTPD before 1.3.3c...CVE-2010-3867Fix available7.1 HighNovember 9, 2010
horde application frameworkCross-site request forgery (CSRF) vulnerability in the Horde Application Framework before 3.3.9...CVE-2010-36946.8 MediumNovember 9, 2010
horde application frameworkCross-site scripting (XSS) vulnerability in util/icon_browser.php in the Horde Application...CVE-2010-3077Public exploit4.3 MediumNovember 9, 2010
cisco intelligent contact managerMultiple stack-based buffer overflows in agent.exe in Setup Manager in Cisco Intelligent Contact...CVE-2010-304010.0 HighNovember 9, 2010
cisco unified communications manager/usr/local/cm/bin/pktCap_protectData in Cisco Unified Communications Manager (aka CUCM, formerly...CVE-2010-3039Public exploit6.8 MediumNovember 9, 2010
ibm websphere commerceMultiple cross-site scripting (XSS) vulnerabilities in sample store pages in IBM WebSphere...CVE-2010-26364.3 MediumNovember 9, 2010
ibm websphere commerceSQL injection vulnerability in IBM WebSphere Commerce 6.0 before 6.0.0.10 allows remote...CVE-2010-26356.5 MediumNovember 9, 2010
ibm websphere application serverThe Web Services Security component in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.13...CVE-2010-07865.0 MediumNovember 9, 2010
ibm websphere application serverCross-site request forgery (CSRF) vulnerability in the Administrative Console in IBM WebSphere...CVE-2010-07856.0 MediumNovember 9, 2010
ibm websphere application serverCross-site scripting (XSS) vulnerability in the Administrative Console in IBM WebSphere...CVE-2010-07844.3 MediumNovember 9, 2010
ibm websphere application serverCross-site scripting (XSS) vulnerability in the Administrative Console in IBM WebSphere...CVE-2010-07834.3 MediumNovember 9, 2010
proftpdThe pr_data_xfer function in ProFTPD before 1.3.2rc3 allows remote authenticated users to cause a...CVE-2008-7265Fix available4.0 MediumNovember 9, 2010
wellsfargo wells fargo mobileThe Wells Fargo Mobile application 1.1 for Android stores a username and password, along with...CVE-2010-42144.3 MediumNovember 8, 2010
bankofamerica bank of americaThe Bank of America application 2.12 for Android stores a security question's answer in cleartext...CVE-2010-42134.3 MediumNovember 8, 2010
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open