CVEs published in December 2010
352 vulnerabilities, 92 critical, 4 exploited.
- hp hp-uxHP HP-UX B.11.11, B.11.23, and B.11.31 does not properly support threaded processes, which allows...6.8 Medium
- nordugrid nordugrid-arcUntrusted search path vulnerability in NorduGrid Advanced Resource Connector (ARC) before 0.8.3...6.9 Medium
- redhat spice-activex, enterprise virtualization manager +1 moreRace condition in the SPICE (aka spice-activex) plug-in for Internet Explorer in Red Hat...6.8 Medium
- mrcgiguy freeticketMultiple SQL injection vulnerabilities in contact.php in MRCGIGUY (MCG) FreeTicket 1.0.0, when...6.8 Medium
- phpmyadminerror.php in PhpMyAdmin 3.3.8.1, and other versions before 3.4.0-beta1, allows remote attackers...4.3 Medium
- redhat enterprise mrgThe installation documentation for Red Hat Enterprise Messaging, Realtime and Grid (MRG) 1.3...7.5 High
- dracut project dracut, udev project udev +1 moreplymouth-pretrigger.sh in dracut and udev, when running on Fedora 13 and 14, sets weak...4.0 Medium
- systemtapThe staprun runtime tool in SystemTap 1.3 does not verify that a module to unload was previously...2.1 Low
- systemtapThe staprun runtime tool in SystemTap 1.3 does not properly clear the environment before...7.2 High
- phpDouble free vulnerability in the imap_do_open function in the IMAP extension (ext/imap/php_imap.c...5.0 Medium
- google chrome, xmlsoft libxml2, apache openoffice +14 more +16 moreDouble free vulnerability in libxml2 2.7.8 and other versions, as used in Google Chrome before 8...7.5 High
- google chrome, debian linux +1 moreUse-after-free vulnerability in Google Chrome before 8.0.552.215 allows remote attackers to cause...4.3 Medium
- google chrome, debian linux +1 moreUse-after-free vulnerability in Google Chrome before 8.0.552.215 allows remote attackers to cause...7.5 High
- google chromeGoogle Chrome before 8.0.552.215 does not properly restrict privileged extensions, which allows...4.3 Medium
- google chromeGoogle Chrome before 8.0.552.215 allows remote attackers to cause a denial of service ...9.3 High
- google chromelibvpx, as used in Google Chrome before 8.0.552.215 and possibly other products, allows remote...4.3 Medium
- google chromeGoogle Chrome before 8.0.552.215 does not properly handle HTTP proxy authentication, which allows...5.0 Medium
- google chromeIncomplete blacklist vulnerability in Google Chrome before 8.0.552.215 on Linux and Mac OS X...7.5 High
- google chromeUse-after-free vulnerability in Google Chrome before 8.0.552.215 allows remote attackers to cause...9.3 High
- google chromeGoogle Chrome before 8.0.552.215 does not properly restrict the generation of file dialogs, which...4.3 Medium
- google chromeGoogle Chrome before 8.0.552.215 does not properly handle HTML5 databases, which allows attackers...5.0 Medium
- google chromeGoogle Chrome before 8.0.552.215 does not properly restrict read access to videos derived from...4.3 Medium
- google chromeUnspecified vulnerability in Google Chrome before 8.0.552.215 allows remote attackers to bypass...5.0 Medium
- clamavUnspecified vulnerability in pdf.c in libclamav in ClamAV before 0.96.5 allows remote attackers...7.5 High
- bsdperimeter pfsenseMultiple cross-site scripting (XSS) vulnerabilities in pfSense 2 beta 4 allow remote attackers to...4.3 Medium
- pulsecms pulse cmsDirectory traversal vulnerability in includes/controller.php in Pulse CMS Basic before 1.2.9...6.8 Medium
- clamavOff-by-one error in the icon_cb function in pe_icons.c in libclamav in ClamAV before 0.96.5...7.5 High
- clamavMultiple unspecified vulnerabilities in pdf.c in libclamav in ClamAV before 0.96.5 allow remote...5.0 Medium
- alexej kryukov fontforgeStack-based buffer overflow in FontForge 20100501 allows remote attackers to cause a denial of...6.8 Medium
- wordpressSQL injection vulnerability in the do_trackbacks function in wp-includes/comment.php in WordPress...6.0 Medium
- bsdperimeter pfsenseMultiple cross-site scripting (XSS) vulnerabilities in graph.php in pfSense 1.2.3 and 2 beta 4...4.3 Medium
- openbsd opensshOpenSSH 5.6 and earlier, when J-PAKE is enabled, does not properly validate the public parameters...7.5 High
- opensslOpenSSL before 0.9.8j, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not prevent...4.3 Medium
- vmware esx, esxi, fusion +2 more +4 moreThe VMware Tools update functionality in VMware Workstation 6.5.x before 6.5.5 build 328052 and 7...7.2 High
- vmware fusion, player, server +1 more +3 morevmware-mount in VMware Workstation 7.x before 7.1.2 build 301548 on Linux, VMware Player 3.1.x...7.2 High
- vmware fusion, player, server +1 more +3 moreRace condition in the mounting process in vmware-mount in VMware Workstation 7.x before 7.1.2...6.9 Medium
- vmware movie decoder, player, server +1 more +3 moreThe frame decompression functionality in the VMnc media codec in VMware Movie Decoder before 6.5...9.3 High
- opensslOpenSSL before 1.0.0c, when J-PAKE is enabled, does not properly validate the public parameters...7.5 High
- openssl, canonical ubuntu linux, debian linux +6 more +8 moreOpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is...4.3 Medium
- andy armstrong cgi.pmUnspecified vulnerability in CGI.pm 3.50 and earlier allows remote attackers to inject arbitrary...4.3 Medium
- andy armstrong cgi.pm, cgi-simple +1 moreCRLF injection vulnerability in the header function in (1) CGI.pm before 3.50 and (2) Simple.pm...4.3 Medium
- phpInteger overflow in the NumberFormatter::getSymbol (aka numfmt_get_symbol) function in PHP 5.3.3...5.0 Medium
- apache archivaApache Archiva does not require entry of the administrator's password at the time of modifying a user account6.8 Medium
- linux kernel, canonical ubuntu linux, opensuse +5 more +7 moreThe rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol...7.8 High
- apache archiva, jesse mcconnell redback +1 moreCross-site request forgery (CSRF) vulnerability in Redback before 1.2.4, as used in Apache...6.8 Medium
- linux kernelThe io_submit_one function in fs/aio.c in the Linux kernel before 2.6.23 allows local users to...4.9 Medium
- andy armstrong cgi.pm, cgi-simple +1 moreThe multipart_init function in (1) CGI.pm before 3.50 and (2) Simple.pm in CGI::Simple 1.112 and...4.3 Medium
- ibm websphere commerceIBM WebSphere Commerce Enterprise 7.0 before 7.0.0.2 allows remote attackers to read messages...5.0 Medium
- alberto pittoni alguestMultiple cross-site scripting (XSS) vulnerabilities in index.php in AlGuest 1.1c-patched allow...4.3 Medium
- brunetton littlephpgalleryDirectory traversal vulnerability in gallery.php in Brunetton LittlePhpGallery 1.0.2, when...6.8 Medium
- Show moreLoading…