CVEs published in December 2010
352 vulnerabilities, 92 critical, 4 exploited.
- ibm tivoli storage managerStack-based buffer overflow in the GeneratePassword function in dsmtca (aka the Trusted...7.2 High
- ibm rational clearquestIBM Rational ClearQuest 7.0.x before 7.0.1.11, 7.1.1.x before 7.1.1.4, and 7.1.2.x before 7.1.2.1...6.5 Medium
- ibm rational clearquestThe Web client in IBM Rational ClearQuest 7.1.1.x before 7.1.1.4 and 7.1.2.x before 7.1.2.1...4.0 Medium
- ibm rational clearquestMultiple unspecified vulnerabilities in IBM Rational ClearQuest 7.0.x before 7.0.1.11, 7.1.1.x...10.0 High
- dojofoundation dojo toolkit, ibm rational clearquest +1 moreDojo Toolkit, as used in the Web client in IBM Rational ClearQuest 7.1.1.x before 7.1.1.4 and 7.1...5.0 Medium
- linux kernelThe bcm_connect function in net/can/bcm.c (aka the Broadcast Manager) in the Controller Area...2.1 Low
- linux kernel, vmware esx +1 moredrivers/scsi/bfa/bfa_core.c in the Linux kernel before 2.6.35 does not initialize a certain port...5.5 Medium
- ecava integraxorUntrusted search path vulnerability in Ecava IntegraXor 3.6.4000.0 allows local users to gain...6.9 Medium
- ecava integraxorDirectory traversal vulnerability in Ecava IntegraXor 3.6.4000.0 and earlier allows remote...5.0 Medium
- ecava integraxorStack-based buffer overflow in the save method in the IntegraXor.Project ActiveX control in...10.0 High
- microsoft wmi administrative toolsThe WBEMSingleView.ocx ActiveX control 1.50.1131.0 in Microsoft WMI Administrative Tools 1.1 and...9.3 High
- earl miles viewsCross-site scripting (XSS) vulnerability in the Views module 6.x before 6.x-2.12 for Drupal...4.3 Medium
- earl miles viewsMultiple cross-site scripting (XSS) vulnerabilities in the Views module 6.x before 6.x-2.11 for...4.3 Medium
- earl miles viewsMultiple cross-site request forgery (CSRF) vulnerabilities in the Views UI implementation in the...6.8 Medium
- microsoft wmi administrative toolsThe WMITools ActiveX control in WBEMSingleView.ocx 1.50.1131.0 in Microsoft WMI Administrative...9.3 High
- microsoft internet information servicesHeap-based buffer overflow in the TELNET_STREAM_CONTEXT::OnSendData function in ftpsvc.dll in...10.0 High
- linux kernel, redhat enterprise linux server, enterprise linux workstation +3 more +5 morearch/x86/kvm/x86.c in the Linux kernel before 2.6.36.2 does not initialize certain structure...2.1 Low
- ibm lotus mobile connectThe Connection Manager in IBM Lotus Mobile Connect before 6.1.4 disables the http.device.stanza...5.0 Medium
- ibm lotus mobile connectThe Connection Manager in IBM Lotus Mobile Connect before 6.1.4, when HTTP Access Services (HTTP...4.3 Medium
- ibm lotus mobile connectThe Connection Manager in IBM Lotus Mobile Connect before 6.1.4 does not properly maintain a...4.0 Medium
- ibm lotus mobile connectThe Mobile Network Connections functionality in the Connection Manager in IBM Lotus Mobile...4.3 Medium
- ibm lotus mobile connectThe Connection Manager in IBM Lotus Mobile Connect (LMC) before 6.1.4, when HTTP Access Services ...4.4 Medium
- ibm lotus mobile connectCross-site scripting (XSS) vulnerability in HTTP Access Services (HTTP-AS) in the Connection...4.3 Medium
- ibm enoviaCross-site scripting (XSS) vulnerability in IBM ENOVIA 6 allows remote attackers to inject...4.3 Medium
- vmware esxiThe Update Installer in VMware ESXi 4.1, when a modified sfcb.cfg is present, does not properly...9.3 High
- linux kernel, opensuse, suse linux enterprise real time extension +2 moreThe ACPI subsystem in the Linux kernel before 2.6.36.2 uses 0222 permissions for the debugfs...6.9 Medium
- linux kernelThe install_special_mapping function in mm/mmap.c in the Linux kernel before 2.6.37-rc6 does not...2.1 Low
- jovelstefan embedded-videoCross-site scripting (XSS) vulnerability in lembedded-video.php in the Embedded Video plugin 4.1...4.3 Medium
- hp discovery\&dependency mapping inventoryCross-site scripting (XSS) vulnerability in HP Discovery & Dependency Mapping Inventory (DDMI) 2...4.3 Medium
- hp power managerStack-based buffer overflow in HP Power Manager (HPPM) before 4.3.2 allows remote attackers to...9.3 High
- hp insight management agentsHP Insight Management Agents before 8.6 allows remote attackers to obtain sensitive information...5.0 Medium
- hp insight diagnosticsCross-site scripting (XSS) vulnerability in HP Insight Diagnostics Online Edition before 8.5.1...4.3 Medium
- hp openvmsUnspecified vulnerability in HP OpenVMS 8.3, 8.3-1H1, and 8.4 on the Itanium platform on...5.7 Medium
- microsoft internet explorerUse-after-free vulnerability in the CSharedStyleSheet::Notify function in the Cascading Style...9.3 High
- microsoft windows xp, windows server 2003, windows server 2008 +1 more +3 moreStack-based buffer overflow in the CreateSizedDIBSECTION function in shimgvw.dll in the Windows...9.3 High
- eucalyptusThe password reset feature in the administrator interface for Eucalyptus 2.0.0 and 2.0.1 does not...7.5 High
- intel alert management system, symantec antivirus, endpoint protection +2 moreThe GetStringAMSHandler function in prgxhndl.dll in hndlrsvc.exe in the Intel Alert Handler...5.0 Medium
- ibm websphere service registry and repositoryIBM WebSphere Service Registry and Repository (WSRR) 7.0.0 before FP1 does not properly implement...5.0 Medium
- opera browserOpera before 11.00 on Windows does not properly implement the Insecure Third Party Module warning...9.3 High
- opera browserThe default configuration of Opera before 11.00 enables WebSockets functionality, which has...10.0 High
- opera browserUnspecified vulnerability in the auto-update functionality in Opera before 11.00 allows remote...5.0 Medium
- opera browserOpera before 11.00, when Opera Turbo is used, does not properly present information about...2.6 Low
- opera browserOpera before 11.00, when Opera Turbo is enabled, does not display a page's security indication,...2.6 Low
- opera browserOpera before 11.00 does not properly handle security policies during updates to extensions, which...5.0 Medium
- opera browserUnspecified vulnerability in Opera before 11.00 has unknown impact and attack vectors, related to...10.0 High
- opera browserOpera before 11.00 does not clear WAP WML form fields after manual navigation to a new web site,...5.0 Medium
- opera browserOpera before 11.00 does not properly constrain dialogs to appear on top of rendered documents,...5.0 Medium
- pangramsoft pointter php micro-blogging social networkPointter PHP Micro-Blogging Social Network 1.8 allows remote attackers to bypass authentication...7.5 High
- pangramsoft pointter php content management systemPointter PHP Content Management System 1.0 allows remote attackers to bypass authentication and...7.5 High
- dmasoftlab radius managerMultiple cross-site scripting (XSS) vulnerabilities in Radius Manager 3.8.0 allow remote...3.5 Low
- Show moreLoading…