Vulnerabilities (CVE)

Total 307337 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2010-4817 2 Debian, Pithos Project 2 Debian Linux, Pithos 2024-11-21 3.6 LOW 5.5 MEDIUM
pithos before 0.3.5 allows overwrite of arbitrary files via symlinks.
CVE-2010-4816 1 Openbsd 1 Openbsd 2024-11-21 5.0 MEDIUM 7.5 HIGH
It was found in FreeBSD 8.0, 6.3 and 4.9, and OpenBSD 4.6 that a null pointer dereference in ftpd/popen.c may lead to remote denial of service of the ftpd service.
CVE-2010-4815 1 Coppermine-gallery 1 Coppermine Gallery 2024-11-21 7.5 HIGH 9.8 CRITICAL
Coppermine gallery before 1.4.26 has an input validation vulnerability that allows for code execution.
CVE-2010-4664 3 Consolekit Project, Debian, Redhat 3 Consolekit, Debian Linux, Enterprise Linux 2024-11-21 6.5 MEDIUM 8.8 HIGH
In ConsoleKit before 0.4.2, an intended security policy restriction bypass was found. This flaw allows an authenticated system user to escalate their privileges by initiating a remote VNC session.
CVE-2010-4662 1 Pmwiki 1 Pmwiki 2024-11-21 4.3 MEDIUM 6.1 MEDIUM
PmWiki before 2.2.21 has XSS.
CVE-2010-4661 5 Debian, Fedoraproject, Opensuse and 2 more 5 Debian Linux, Fedora, Opensuse and 2 more 2024-11-21 4.6 MEDIUM 7.8 HIGH
udisks before 1.0.3 allows a local user to load arbitrary Linux kernel modules.
CVE-2010-4660 1 Status 1 Statusnet 2024-11-21 7.5 HIGH 9.8 CRITICAL
Unspecified vulnerability in statusnet through 2010 due to the way addslashes are used in SQL string escapes..
CVE-2010-4659 1 Status 1 Statusnet 2024-11-21 4.3 MEDIUM 6.1 MEDIUM
Cross-site scripting (XSS) vulnerability in statusnet through 2010 in error message contents.
CVE-2010-4658 1 Status 1 Statusnet 2024-11-21 5.0 MEDIUM 5.3 MEDIUM
statusnet through 2010 allows attackers to spoof syslog messages via newline injection attacks.
CVE-2010-4657 3 Debian, Php, Redhat 3 Debian Linux, Php, Enterprise Linux 2024-11-21 5.0 MEDIUM 7.5 HIGH
PHP5 before 5.4.4 allows passing invalid utf-8 strings via the xmlTextWriterWriteAttribute, which are then misparsed by libxml2. This results in memory leak into the resulting output.
CVE-2010-4654 2 Debian, Freedesktop 2 Debian Linux, Poppler 2024-11-21 9.3 HIGH 7.8 HIGH
poppler before 0.16.3 has malformed commands that may cause corruption of the internal stack.
CVE-2010-4653 2 Debian, Freedesktop 2 Debian Linux, Poppler 2024-11-21 4.3 MEDIUM 6.5 MEDIUM
An integer overflow condition in poppler before 0.16.3 can occur when parsing CharCodes for fonts.
CVE-2010-4533 2 Debian, Offlineimap 2 Debian Linux, Offlineimap 2024-11-21 7.5 HIGH 9.8 CRITICAL
offlineimap before 6.3.4 added support for SSL server certificate validation but it is still possible to use SSL v2 protocol, which is a flawed protocol with multiple security deficiencies.
CVE-2010-4532 2 Debian, Offlineimap 2 Debian Linux, Offlineimap 2024-11-21 4.3 MEDIUM 5.9 MEDIUM
offlineimap before 6.3.2 does not check for SSL server certificate validation when "ssl = yes" option is specified which can allow man-in-the-middle attacks.
CVE-2010-4266 1 Vanillaforums 1 Vanilla Forums 2024-11-21 5.8 MEDIUM 6.1 MEDIUM
It was found in vanilla forums before 2.0.10 a potential linkbait vulnerability in dispatcher.
CVE-2010-4264 1 Vanillaforums 1 Vanilla Forums 2024-11-21 4.3 MEDIUM 6.1 MEDIUM
It was found in vanilla forums before 2.0.10 a cross-site scripting vulnerability where a filename could contain arbitrary code to execute on the client side.
CVE-2010-4245 1 Translatehouse 1 Pootle 2024-11-21 4.3 MEDIUM 6.1 MEDIUM
pootle 2.0.5 has XSS via 'match_names' parameter
CVE-2010-4241 1 Tiki 1 Tikiwiki Cms\/groupware 2024-11-21 6.8 MEDIUM 8.8 HIGH
Tiki Wiki CMS Groupware 5.2 has CSRF
CVE-2010-4240 1 Tiki 1 Tikiwiki Cms\/groupware 2024-11-21 4.3 MEDIUM 6.1 MEDIUM
Tiki Wiki CMS Groupware 5.2 has XSS
CVE-2010-4239 1 Tiki 1 Tikiwiki Cms\/groupware 2024-11-21 7.5 HIGH 9.8 CRITICAL
Tiki Wiki CMS Groupware 5.2 has Local File Inclusion