CVE-2010-10017 | | | 2025-08-30 | WM Downloader version 3.1.2.2 is vulnerable to a buffer overflow when processing a specially crafted .m3u playlist file. The application fails to properly vali… |
CVE-2010-10016 | | | 2025-08-30 | BS.Player version 2.57 (build 1051) contains a vulnerability in its playlist import functionality. When processing .m3u files, the application fails to properl… |
CVE-2010-20123 | | | 2025-08-21 | Steinberg MyMP3Player version 3.0 (build 3.0.0.67) is vulnerable to a stack-based buffer overflow when parsing .m3u playlist files. The application fails to pr… |
CVE-2010-20122 | | | 2025-08-21 | Xftp FTP Client version up to and including 3.0 (build 0238) contain a stack-based buffer overflow vulnerability triggered by a maliciously crafted PWD respons… |
CVE-2010-20120 | | | 2025-08-21 | Maple versions up to and including 13's Maplet framework allows embedded commands to be executed automatically when a .maplet file is opened. This behavior byp… |
CVE-2010-20115 | | | 2025-08-21 | Arcane Software’s Vermillion FTP Daemon (vftpd) versions up to and including 1.31 contains a memory corruption vulnerability triggered by a malformed FTP PORT… |
CVE-2010-20114 | | | 2025-08-21 | VariCAD EN up to and including version 2010-2.05 is vulnerable to a stack-based buffer overflow when parsing .dwb drawing files. The application fails to prope… |
CVE-2010-20113 | Critical | 9.8 | 2025-08-21 | EasyFTP Server 1.7.0.11 and earlier contains a stack-based buffer overflow vulnerability in its HTTP interface. When processing a GET request to list.html, the… |
CVE-2010-20108 | | | 2025-08-21 | FTPPad <= 1.2.0 contains a stack-based buffer overflow vulnerability in its FTP directory listing parser. When the client connects to an FTP server and receive… |
CVE-2010-20107 | | | 2025-08-21 | A stack-based buffer overflow exists in FTP Synchronizer Professional <= v4.0.73.274. When the client connects to an FTP server and issues a LIST command—typic… |
CVE-2010-20034 | | | 2025-08-21 | Gekko Manager FTP Client <= 0.77 contains a stack-based buffer overflow in its FTP directory listing parser. When processing a server response to a LIST comman… |
CVE-2010-20007 | | | 2025-08-21 | Seagull FTP Client <= v3.3 Build 409 contains a stack-based buffer overflow vulnerability in its FTP directory listing parser. When the client connects to an F… |
CVE-2010-20121 | Critical | 9.8 | 2025-08-21 | EasyFTP Server versions up to 1.7.0.11 contain a stack-based buffer overflow vulnerability in the FTP command parser. When processing the CWD (Change Working D… |
CVE-2010-20119 | | | 2025-08-21 | CommuniCrypt Mail versions up to and including 1.16 contains a stack-based buffer overflow vulnerability in its ANSMTP.dll and AOSMTP.dll ActiveX controls, s… |
CVE-2010-20112 | | | 2025-08-21 | Amlib’s NetOpacs webquery.dll contains a stack-based buffer overflow vulnerability triggered by improper handling of HTTP GET parameters. Specifically, the app… |
CVE-2010-20111 | | | 2025-08-21 | Digital Music Pad v8.2.3.3.4 contains a stack-based buffer overflow vulnerability in its playlist file parser. When opening a .pls file containing an excessive… |
CVE-2010-20109 | | | 2025-08-21 | Barracuda products, confirmed in Spam & Virus Firewall, SSL VPN, and Web Application Firewall versions prior to October 2010, contain a path traversal vulnerab… |
CVE-2010-10015 | | | 2025-08-21 | AOL versions up to and including 9.5 includes an ActiveX control (Phobos.dll) that exposes a method called Import() via the Phobos.Playlist COM object. This me… |
CVE-2010-20010 | | | 2025-08-20 | Foxit PDF Reader before 4.2.0.0928 does not properly bound-check the /Title entry in the PDF Info dictionary. A specially crafted PDF with an overlong Title st… |
CVE-2010-20103 | Critical | 9.8 | 2025-08-20 | A malicious backdoor was embedded in the official ProFTPD 1.3.3c source tarball distributed between November 28 and December 2, 2010. The backdoor implements a… |
CVE-2010-20059 | | | 2025-08-20 | FreeNAS 0.7.2 prior to revision 5543 includes an unauthenticated command‐execution backdoor in its web interface. The exec_raw.php script exposes a cmd paramet… |
CVE-2010-20049 | | | 2025-08-20 | LeapFTP < 3.1.x contains a stack-based buffer overflow vulnerability in its FTP client parser. When the client receives a directory listing containing a filena… |
CVE-2010-20045 | | | 2025-08-20 | FileWrangler <= 5.30 suffers from a stack-based buffer overflow vulnerability when parsing directory listings from an FTP server. A malicious server can send a… |
CVE-2010-20042 | | | 2025-08-20 | Xion Audio Player versions 1.0.126 and prior are vulnerable to a Unicode-based stack buffer overflow triggered by opening a specially crafted .m3u playlist fil… |
CVE-2010-10014 | | | 2025-08-20 | Odin Secure FTP <= 4.1 is vulnerable to a stack-based buffer overflow when parsing directory listings received in response to an FTP LIST command. A malicious… |
CVE-2010-10013 | | | 2025-08-08 | An unauthenticated remote command execution vulnerability exists in AjaXplorer (now known as Pydio Cells) versions prior to 2.6. The flaw resides in the checkI… |
CVE-2010-10012 | | | 2025-07-23 | A path traversal vulnerability exists in httpdasm version 0.92, a lightweight Windows HTTP server, that allows unauthenticated attackers to read arbitrary file… |
CVE-2010-10011 | Medium | 4.3 | 2024-01-12 | A vulnerability, which was classified as problematic, was found in Acritum Femitter Server 1.04. Affected is an unknown function. The manipulation leads to pat… |
CVE-2010-10010 | Low | 3.5 | 2023-06-01 | A vulnerability classified as problematic has been found in Stars Alliance PsychoStats up to 3.2.2a. This affects an unknown part of the file upload/admin/logi… |
CVE-2010-10009 | Medium | 5.5 | 2023-01-18 | A vulnerability was found in frioux ptome. It has been rated as critical. This issue affects some unknown processing. The manipulation leads to sql injection… |
CVE-2010-10007 | Medium | 5.5 | 2023-01-18 | ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in lierdakil click-reminder. It has been rated as critical. This issue affects the function db_query… |
CVE-2010-10006 | Low | 2.6 | 2023-01-18 | A vulnerability, which was classified as problematic, was found in michaelliao jopenid. Affected is the function getAuthentication of the file JOpenId/src/org/… |
CVE-2010-10008 | Low | 3.5 | 2023-01-17 | ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in simplesamlphp simplesamlphp-module-openidprovider up to 0.8.x. It has been declared as problematic… |
CVE-2010-10004 | Low | 3.5 | 2023-01-09 | A vulnerability was found in Information Cards Module on simpleSAMLphp and classified as problematic. This issue affects some unknown processing. The manipulat… |
CVE-2010-10003 | Medium | 5.5 | 2023-01-04 | A vulnerability classified as critical was found in gesellix titlelink on Joomla. Affected by this vulnerability is an unknown functionality of the file plugin… |
CVE-2010-10002 | Low | 3.1 | 2023-01-01 | ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as problematic has been found in SimpleSAMLphp simplesamlphp-module-openid. Affected is an unknown f… |
CVE-2010-10001 | Medium | 5.3 | 2022-03-28 | A vulnerability, which was classified as problematic, was found in Shemes GrabIt up to 1.7.2 Beta 4. This affects the component NZB Date Parser. The manipulati… |
CVE-2010-2496 | Medium | 5.5 | 2021-10-18 | stonith-ng in pacemaker and cluster-glue passed passwords as commandline parameters, making it possible for local attackers to gain access to passwords of the… |
CVE-2010-4816 | High | 7.5 | 2021-06-22 | It was found in FreeBSD 8.0, 6.3 and 4.9, and OpenBSD 4.6 that a null pointer dereference in ftpd/popen.c may lead to remote denial of service of the ftpd serv… |
CVE-2010-4266 | Medium | 6.1 | 2021-06-22 | It was found in vanilla forums before 2.0.10 a potential linkbait vulnerability in dispatcher. |
CVE-2010-4264 | Medium | 6.1 | 2021-06-22 | It was found in vanilla forums before 2.0.10 a cross-site scripting vulnerability where a filename could contain arbitrary code to execute on the client side. |
CVE-2010-3300 | Medium | 5.9 | 2021-06-22 | It was found that all OWASP ESAPI for Java up to version 2.0 RC2 are vulnerable to padding oracle attacks. |
CVE-2010-2525 | High | 7.8 | 2021-06-22 | A flaw was discovered in gfs2 file system’s handling of acls (access control lists). An unprivileged local attacker could exploit this flaw to gain access or e… |
CVE-2010-1435 | Critical | 9.8 | 2021-06-21 | Joomla! Core is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently re… |
CVE-2010-1434 | High | 7.5 | 2021-06-21 | Joomla! Core is prone to a session fixation vulnerability. An attacker may leverage this issue to hijack an arbitrary session and gain access to sensitive info… |
CVE-2010-1433 | Critical | 9.8 | 2021-06-21 | Joomla! Core is prone to a vulnerability that lets attackers upload arbitrary files because the application fails to properly verify user-supplied input. An at… |
CVE-2010-1432 | High | 7.5 | 2021-06-21 | Joomla! Core is prone to an information disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may help in launching f… |
CVE-2010-3843 | High | 7.8 | 2021-05-28 | The GTK version of ettercap uses a global settings file at /tmp/.ettercap_gtk and does not verify ownership of this file. When parsing this file for settings i… |
CVE-2010-4658 | Medium | 5.3 | 2020-02-07 | statusnet through 2010 allows attackers to spoof syslog messages via newline injection attacks. |
CVE-2010-3917 | Medium | 6.5 | 2020-02-06 | Google Chrome before 3.0 does not properly handle XML documents, which allows remote attackers to obtain sensitive information via a crafted web site. |
CVE-2010-5304 | High | 7.5 | 2020-02-05 | A NULL pointer dereference flaw was found in the way LibVNCServer before 0.9.9 handled certain ClientCutText message. A remote attacker could use this flaw to… |
CVE-2010-4815 | Critical | 9.8 | 2020-02-05 | Coppermine gallery before 1.4.26 has an input validation vulnerability that allows for code execution. |
CVE-2010-4662 | Medium | 6.1 | 2020-02-05 | PmWiki before 2.2.21 has XSS. |
CVE-2010-3048 | High | 7.5 | 2020-01-16 | Cisco Unified Personal Communicator 7.0 (1.13056) does not free allocated memory for received data and does not perform validation if memory allocation is succ… |
CVE-2010-3282 | Low | 3.3 | 2020-01-09 | 389 Directory Server before 1.2.7.1 (aka Red Hat Directory Server 8.2) and HP-UX Directory Server before B.08.10.03, when audit logging is enabled, logs the Di… |
CVE-2010-3782 | High | 8.8 | 2020-01-02 | obs-server before 1.7.7 allows logins by 'unconfirmed' accounts due to a bug in the REST api implementation. |
CVE-2010-4659 | Medium | 6.1 | 2019-11-20 | Cross-site scripting (XSS) vulnerability in statusnet through 2010 in error message contents. |
CVE-2010-4660 | Critical | 9.8 | 2019-11-20 | Unspecified vulnerability in statusnet through 2010 due to the way addslashes are used in SQL string escapes.. |
CVE-2010-5108 | High | 7.5 | 2019-11-13 | Trac 0.11.6 does not properly check workflow permissions before modifying a ticket. This can be exploited by an attacker to change the status and resolution of… |
CVE-2010-4817 | Medium | 5.5 | 2019-11-13 | pithos before 0.3.5 allows overwrite of arbitrary files via symlinks. |
CVE-2010-4664 | High | 8.8 | 2019-11-13 | In ConsoleKit before 0.4.2, an intended security policy restriction bypass was found. This flaw allows an authenticated system user to escalate their privilege… |
CVE-2010-4661 | High | 7.8 | 2019-11-13 | udisks before 1.0.3 allows a local user to load arbitrary Linux kernel modules. |
CVE-2010-4657 | High | 7.5 | 2019-11-13 | PHP5 before 5.4.4 allows passing invalid utf-8 strings via the xmlTextWriterWriteAttribute, which are then misparsed by libxml2. This results in memory leak in… |
CVE-2010-4654 | High | 7.8 | 2019-11-13 | poppler before 0.16.3 has malformed commands that may cause corruption of the internal stack. |
CVE-2010-4653 | Medium | 6.5 | 2019-11-13 | An integer overflow condition in poppler before 0.16.3 can occur when parsing CharCodes for fonts. |
CVE-2010-4533 | Critical | 9.8 | 2019-11-13 | offlineimap before 6.3.4 added support for SSL server certificate validation but it is still possible to use SSL v2 protocol, which is a flawed protocol with m… |
CVE-2010-4532 | Medium | 5.9 | 2019-11-13 | offlineimap before 6.3.2 does not check for SSL server certificate validation when "ssl = yes" option is specified which can allow man-in-the-middle attacks. |
CVE-2010-4177 | Medium | 5.5 | 2019-11-12 | mysql-gui-tools (mysql-query-browser and mysql-admin) before 5.0r14+openSUSE-2.3 exposes the password of a user connected to the MySQL server in clear text for… |
CVE-2010-3857 | Medium | 6.1 | 2019-11-12 | JBoss BRMS before 5.1.0 has a XSS vulnerability via asset=UUID parameter. |
CVE-2010-3844 | High | 8.8 | 2019-11-12 | An unchecked sscanf() call in ettercap before 0.7.5 allows an insecure temporary settings file to overflow a static-sized buffer on the stack. |
CVE-2010-3440 | Medium | 5.5 | 2019-11-12 | babiloo 2.0.9 before 2.0.11 creates temporary files with predictable names when downloading and unpacking dictionary files, allowing a local attacker to overwr… |
CVE-2010-3305 | High | 8.8 | 2019-11-12 | Cross-site request forgery (CSRF) vulnerability in pixelpost 1.7.3 could allow remote attackers to change the admin password. |
CVE-2010-3299 | Medium | 6.5 | 2019-11-12 | The encrypt/decrypt functions in Ruby on Rails 2.3 are vulnerable to padding oracle attacks. |
CVE-2010-3292 | Medium | 5.5 | 2019-11-12 | The update{_bad,}_phishing_sites scripts in mailscanner 4.79.11-2 downloads files and trusts them without using encryption (e.g., https) or digital signature c… |
CVE-2010-3095 | Medium | 4.7 | 2019-11-12 | mailscanner before 4.79.11-2.1 might allow local users to overwrite arbitrary files via a symlink attack on certain temporary files. NOTE: this issue exists be… |
CVE-2010-3439 | Medium | 6.5 | 2019-11-12 | It is possible to cause a DoS condition by causing the server to crash in alien-arena 7.33 by supplying various invalid parameters to the download command. |
CVE-2010-3438 | Critical | 9.8 | 2019-11-12 | libpoe-component-irc-perl before v6.32 does not remove carriage returns and line feeds. This can be used to execute arbitrary IRC commands by passing an argume… |
CVE-2010-2488 | High | 7.5 | 2019-11-12 | NULL pointer dereference vulnerability in ZNC before 0.092 caused by traffic stats when there are unauthenticated connections. |
CVE-2010-3359 | Medium | 4.8 | 2019-11-12 | If LD_LIBRARY_PATH is undefined in gargoyle-free before 2009-08-25, the variable will point to the current directory. This can allow a local user to trick anot… |
CVE-2010-2476 | Critical | 9.8 | 2019-11-07 | syscp 1.4.2.1 allows attackers to add arbitrary paths via the documentroot of a domain by appending a colon to it and setting the open basedir path to use that… |
CVE-2010-2450 | High | 7.5 | 2019-11-07 | The keygen.sh script in Shibboleth SP 2.0 (located in /usr/local/etc/shibboleth by default) uses OpenSSL to create a DES private key which is placed in sp-key… |
CVE-2010-2449 | Medium | 6.5 | 2019-11-07 | Gource through 0.26 logs to a predictable file name (/tmp/gource-$UID.tmp), enabling attackers to overwrite an arbitrary file via a symlink attack. |
CVE-2010-2447 | Critical | 9.8 | 2019-11-07 | gitolite before 1.4.1 does not filter src/ or hooks/ from path names. |
CVE-2010-2473 | Medium | 6.5 | 2019-11-07 | Drupal 6.x before 6.16 and 5.x before version 5.22 does not properly block users under certain circumstances. A user with an open session that was blocked coul… |
CVE-2010-2472 | Medium | 4.8 | 2019-11-07 | Locale module and dependent contributed modules in Drupal 6.x before 6.16 and 5.x before version 5.22 do not sanitize the display of language codes, native and… |
CVE-2010-2250 | Medium | 6.1 | 2019-11-07 | Drupal 5.x and 6.x before 6.16 uses a user-supplied value in output during site installation which could allow an attacker to craft a URL and perform a cross-s… |
CVE-2010-2243 | High | 7.5 | 2019-11-07 | A vulnerability exists in kernel/time/clocksource.c in the Linux kernel before 2.6.34 where on non-GENERIC_TIME systems (GENERIC_TIME=n), accessing /sys/device… |
CVE-2010-4178 | Medium | 5.5 | 2019-11-06 | MySQL-GUI-tools (mysql-administrator) leaks passwords into process list after with launch of mysql text console |
CVE-2010-2471 | Medium | 6.1 | 2019-11-06 | Drupal versions 5.x and 6.x has open redirection |
CVE-2010-2446 | Critical | 9.8 | 2019-11-06 | Rbot Reaction plugin allows command execution |
CVE-2010-2247 | High | 7.5 | 2019-11-06 | makepasswd 1.10 default settings generate insecure passwords |
CVE-2010-3674 | Medium | 6.1 | 2019-11-05 | TYPO3 before 4.4.1 allows XSS in the frontend search box. |
CVE-2010-3673 | Medium | 5.3 | 2019-11-05 | TYPO3 before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows information disclosure in the mail header of the HTML mailing API. |
CVE-2010-3672 | Medium | 6.1 | 2019-11-05 | TYPO3 before 4.3.4 and 4.4.x before 4.4.1 allows XSS in the textarea view helper in an extbase extension. |
CVE-2010-3671 | Medium | 6.5 | 2019-11-05 | TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 is open to a session fixation attack which allows remote attackers to hijac… |
CVE-2010-3670 | Medium | 4.8 | 2019-11-05 | TYPO3 before 4.3.4 and 4.4.x before 4.4.1 contains insecure randomness during generation of a hash with the "forgot password" function. |
CVE-2010-2222 | High | 7.5 | 2019-11-05 | The _ger_parse_control function in Red Hat Directory Server 8 and the 389 Directory Server allows attackers to cause a denial of service (NULL pointer derefere… |
CVE-2010-3669 | Medium | 5.4 | 2019-11-04 | TYPO3 before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows XSS and Open Redirection in the frontend login box. |
CVE-2010-3668 | High | 7.5 | 2019-11-04 | TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows Header Injection in the secure download feature jumpurl. |
CVE-2010-3667 | Medium | 5.3 | 2019-11-04 | TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows Spam Abuse in the native form content element. |