CVEs

385,898 total · page 6845 of 7,718

CVE	Vendor / Product	Risk	CVSS	EPSS	Published	Description
CVE-2010-3362	Last.fm lastfm	0.00	—	0.00	Oct 20, 2010	lastfm 1.5.4 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
CVE-2010-3361	Shrew IKE	0.00	—	0.00	Oct 20, 2010	The (1) iked, (2) ikea, and (3) ikec scripts in Shrew Soft IKE 2.1.5 place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
CVE-2010-3360	Hipo Hipo	0.00	—	0.00	Oct 20, 2010	Hipo 0.6.1 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
CVE-2010-3358	HenPlus HenPlus	0.00	—	0.00	Oct 20, 2010	HenPlus JDBC SQL-Shell 0.9.7 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
CVE-2010-3357	GNOME Foundation gnome-subtitles	0.00	—	0.00	Oct 20, 2010	gnome-subtitles 1.0 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
CVE-2010-3355	Erik Hjortsberg Ember	0.00	—	0.00	Oct 20, 2010	Ember 0.5.7 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
CVE-2010-3354	Apache Stats Dropbox	0.00	—	0.00	Oct 20, 2010	dropboxd in Dropbox 0.7.110 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
CVE-2010-3353	More Cowbell Cowbell	0.00	—	0.00	Oct 20, 2010	Cowbell 0.2.7.1 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
CVE-2010-3351	Nick Copeland Bristol	0.00	—	0.00	Oct 20, 2010	startBristol in Bristol 0.60.5 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
CVE-2010-3350	Bareftp Bareftp	0.00	—	0.00	Oct 20, 2010	bareFTP 0.3.4 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
CVE-2010-3349	Ardour Ardour	0.00	—	0.00	Oct 20, 2010	Ardour 2.8.11 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
CVE-2010-2057	Apache Myfaces	0.00	—	0.03	Oct 20, 2010	shared/util/StateUtils.java in Apache MyFaces 1.1.x before 1.1.8, 1.2.x before 1.2.9, and 2.0.x before 2.0.1 uses an encrypted View State without a Message Authentication Code (MAC), which makes it easier for remote attackers to perform successful modifications of the View State…
CVE-2010-0782	IBM Websphere Mq	0.00	—	0.01	Oct 20, 2010	IBM WebSphere MQ 6.x before 6.0.2.10 and 7.x before 7.0.1.3 allows remote attackers to spoof X.509 certificate authentication, and send or receive channel messages, via a crafted Subject Distinguished Name (DN) value in a certificate.
CVE-2010-3574	Sun Corporation Jdk	0.00	—	0.05	Oct 19, 2010	Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information…
CVE-2010-3573	Sun Corporation Jdk	0.04	—	0.11	Oct 19, 2010	Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the…
CVE-2010-3572	Sun Corporation Jdk	0.00	—	0.05	Oct 19, 2010	Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
CVE-2010-3571	Sun Corporation Jdk	0.01	—	0.09	Oct 19, 2010	Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was…
CVE-2010-3570	Sun Corporation Jdk	0.00	—	0.04	Oct 19, 2010	Unspecified vulnerability in the Deployment Toolkit component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
CVE-2010-3569	Sun Corporation Jdk	0.01	—	0.07	Oct 19, 2010	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous…
CVE-2010-3568	Sun Corporation Jdk	0.00	—	0.05	Oct 19, 2010	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous…
CVE-2010-3567	Sun Corporation Jdk	0.00	—	0.05	Oct 19, 2010	Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October…
CVE-2010-3566	Sun Corporation Jdk	0.00	—	0.06	Oct 19, 2010	Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update and 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October…
CVE-2010-3565	Sun Corporation Jdk	0.00	—	0.06	Oct 19, 2010	Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from…
CVE-2010-3563	Sun Corporation Jdk	0.10	—	0.84	Oct 19, 2010	Unspecified vulnerability in the Deployment component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU.…
CVE-2010-3562	Sun Corporation Jdk	0.01	—	0.07	Oct 19, 2010	Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was…
CVE-2010-3561	Sun Corporation Jdk	0.00	—	0.03	Oct 19, 2010	Unspecified vulnerability in the CORBA component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the…
CVE-2010-3560	Sun Corporation Jdk	0.00	—	0.03	Oct 19, 2010	Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to affect confidentiality via unknown vectors.
CVE-2010-3559	Sun Corporation Jdk	0.01	—	0.10	Oct 19, 2010	Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was…
CVE-2010-3558	Sun Corporation Jdk	0.00	—	0.05	Oct 19, 2010	Unspecified vulnerability in the Java Web Start component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
CVE-2010-3557	Sun Corporation Jdk	0.00	—	0.03	Oct 19, 2010	Unspecified vulnerability in the Swing component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was…
CVE-2010-3556	Sun Corporation Jdk	0.00	—	0.05	Oct 19, 2010	Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
CVE-2010-3555	Sun Corporation Jdk	0.01	—	0.08	Oct 19, 2010	Unspecified vulnerability in the Deployment component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the January 2011 CPU.…
CVE-2010-3554	Sun Corporation Jdk	0.00	—	0.05	Oct 19, 2010	Unspecified vulnerability in the CORBA component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was…
CVE-2010-3553	Sun Corporation Jdk	0.00	—	0.05	Oct 19, 2010	Unspecified vulnerability in the Swing component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was…
CVE-2010-3552	Sun Corporation Jdk	0.09	—	0.81	Oct 19, 2010	Unspecified vulnerability in the New Java Plug-in component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
CVE-2010-3551	Sun Corporation Jdk	0.00	—	0.03	Oct 19, 2010	Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality via unknown vectors.
CVE-2010-3550	Sun Corporation Jdk	0.00	—	0.04	Oct 19, 2010	Unspecified vulnerability in the Java Web Start component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
CVE-2010-3549	Sun Corporation Jdk	0.00	—	0.03	Oct 19, 2010	Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information…
CVE-2010-3548	Sun Corporation Jdk	0.00	—	0.03	Oct 19, 2010	Unspecified vulnerability in the Java Naming and Directory Interface (JNDI) component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality via unknown vectors. NOTE: the previous information was…
CVE-2010-3541	Sun Corporation Jdk	0.00	—	0.03	Oct 19, 2010	Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information…
CVE-2010-3976	Adobe Inc. Flashplayer	0.01	—	0.09	Oct 19, 2010	Untrusted search path vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the…
CVE-2010-3975	Adobe Inc. Flashplayer	0.01	—	0.07	Oct 19, 2010	Untrusted search path vulnerability in Adobe Flash Player 9 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse schannel.dll that is located in the same folder as a file that is processed by Flash.
CVE-2010-3495	Zope Zodb	0.00	—	0.01	Oct 19, 2010	Race condition in ZEO/StorageServer.py in Zope Object Database (ZODB) before 3.10.0 allows remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the accept function having an unexpected return…
CVE-2010-3494	G.rodola Pyftpdlib	0.00	—	0.02	Oct 19, 2010	Race condition in the FTPHandler class in ftpserver.py in pyftpdlib before 0.5.2 allows remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the accept function having an unexpected value of None…
CVE-2010-3493	Python (programming language) Python	0.00	—	0.03	Oct 19, 2010	Multiple race conditions in smtpd.py in the smtpd module in Python 2.6, 2.7, 3.1, and 3.2 alpha allow remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the accept function having an unexpected…
CVE-2010-3492	Python (programming language) Python	0.00	—	0.03	Oct 19, 2010	The asyncore module in Python before 3.2 does not properly handle unsuccessful calls to the accept function, and does not have accompanying documentation describing how daemon applications should handle unsuccessful calls to the accept function, which makes it easier for remote…
CVE-2010-3158	Lhaplus Lhaplus	0.00	—	0.00	Oct 19, 2010	Untrusted search path vulnerability in Lhaplus before 1.58 allows local users to gain privileges via a Trojan horse executable file in the current working directory.
CVE-2010-3157	XacRett XacRett	0.00	—	0.02	Oct 19, 2010	Untrusted search path vulnerability in XacRett before 50 allows attackers to execute arbitrary code via a Trojan horse executable file, related to the explorer.exe filename and use of Windows Explorer.
CVE-2009-5013	G.rodola Pyftpdlib	0.00	—	0.02	Oct 19, 2010	Memory leak in the on_dtp_close function in ftpserver.py in pyftpdlib before 0.5.2 allows remote authenticated users to cause a denial of service (memory consumption) by sending a QUIT command during a data transfer.
CVE-2009-5012	G.rodola Pyftpdlib	0.00	—	0.01	Oct 19, 2010	ftpserver.py in pyftpdlib before 0.5.2 does not require the l permission for the MLST command, which allows remote authenticated users to bypass intended access restrictions and list the root directory via an FTP session.

CVE-2010-3362Oct 20, 2010
Last.fm
lastfm
risk 0.00cvss —epss 0.00
lastfm 1.5.4 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
CVE-2010-3361Oct 20, 2010
Shrew
IKE
risk 0.00cvss —epss 0.00
The (1) iked, (2) ikea, and (3) ikec scripts in Shrew Soft IKE 2.1.5 place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
CVE-2010-3360Oct 20, 2010
Hipo
Hipo
risk 0.00cvss —epss 0.00
Hipo 0.6.1 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
CVE-2010-3358Oct 20, 2010
HenPlus
HenPlus
risk 0.00cvss —epss 0.00
HenPlus JDBC SQL-Shell 0.9.7 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
CVE-2010-3357Oct 20, 2010
GNOME Foundation
gnome-subtitles
risk 0.00cvss —epss 0.00
gnome-subtitles 1.0 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
CVE-2010-3355Oct 20, 2010
Erik Hjortsberg
Ember
risk 0.00cvss —epss 0.00
Ember 0.5.7 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
CVE-2010-3354Oct 20, 2010
Apache Stats
Dropbox
risk 0.00cvss —epss 0.00
dropboxd in Dropbox 0.7.110 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
CVE-2010-3353Oct 20, 2010
More Cowbell
Cowbell
risk 0.00cvss —epss 0.00
Cowbell 0.2.7.1 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
CVE-2010-3351Oct 20, 2010
Nick Copeland
Bristol
risk 0.00cvss —epss 0.00
startBristol in Bristol 0.60.5 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
CVE-2010-3350Oct 20, 2010
Bareftp
Bareftp
risk 0.00cvss —epss 0.00
bareFTP 0.3.4 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
CVE-2010-3349Oct 20, 2010
Ardour
Ardour
risk 0.00cvss —epss 0.00
Ardour 2.8.11 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
CVE-2010-2057Oct 20, 2010
Apache
Myfaces
risk 0.00cvss —epss 0.03
shared/util/StateUtils.java in Apache MyFaces 1.1.x before 1.1.8, 1.2.x before 1.2.9, and 2.0.x before 2.0.1 uses an encrypted View State without a Message Authentication Code (MAC), which makes it easier for remote attackers to perform successful modifications of the View State…
CVE-2010-0782Oct 20, 2010
IBM
Websphere Mq
risk 0.00cvss —epss 0.01
IBM WebSphere MQ 6.x before 6.0.2.10 and 7.x before 7.0.1.3 allows remote attackers to spoof X.509 certificate authentication, and send or receive channel messages, via a crafted Subject Distinguished Name (DN) value in a certificate.
CVE-2010-3574Oct 19, 2010
Sun Corporation
Jdk
risk 0.00cvss —epss 0.05
Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information…
CVE-2010-3573Oct 19, 2010
Sun Corporation
Jdk
risk 0.04cvss —epss 0.11
Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the…
CVE-2010-3572Oct 19, 2010
Sun Corporation
Jdk
risk 0.00cvss —epss 0.05
Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
CVE-2010-3571Oct 19, 2010
Sun Corporation
Jdk
risk 0.01cvss —epss 0.09
Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was…
CVE-2010-3570Oct 19, 2010
Sun Corporation
Jdk
risk 0.00cvss —epss 0.04
Unspecified vulnerability in the Deployment Toolkit component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
CVE-2010-3569Oct 19, 2010
Sun Corporation
Jdk
risk 0.01cvss —epss 0.07
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous…
CVE-2010-3568Oct 19, 2010
Sun Corporation
Jdk
risk 0.00cvss —epss 0.05
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous…
CVE-2010-3567Oct 19, 2010
Sun Corporation
Jdk
risk 0.00cvss —epss 0.05
Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October…
CVE-2010-3566Oct 19, 2010
Sun Corporation
Jdk
risk 0.00cvss —epss 0.06
Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update and 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October…
CVE-2010-3565Oct 19, 2010
Sun Corporation
Jdk
risk 0.00cvss —epss 0.06
Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from…
CVE-2010-3563Oct 19, 2010
Sun Corporation
Jdk
risk 0.10cvss —epss 0.84
Unspecified vulnerability in the Deployment component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU.…
CVE-2010-3562Oct 19, 2010
Sun Corporation
Jdk
risk 0.01cvss —epss 0.07
Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was…
CVE-2010-3561Oct 19, 2010
Sun Corporation
Jdk
risk 0.00cvss —epss 0.03
Unspecified vulnerability in the CORBA component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the…
CVE-2010-3560Oct 19, 2010
Sun Corporation
Jdk
risk 0.00cvss —epss 0.03
Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to affect confidentiality via unknown vectors.
CVE-2010-3559Oct 19, 2010
Sun Corporation
Jdk
risk 0.01cvss —epss 0.10
Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was…
CVE-2010-3558Oct 19, 2010
Sun Corporation
Jdk
risk 0.00cvss —epss 0.05
Unspecified vulnerability in the Java Web Start component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
CVE-2010-3557Oct 19, 2010
Sun Corporation
Jdk
risk 0.00cvss —epss 0.03
Unspecified vulnerability in the Swing component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was…
CVE-2010-3556Oct 19, 2010
Sun Corporation
Jdk
risk 0.00cvss —epss 0.05
Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
CVE-2010-3555Oct 19, 2010
Sun Corporation
Jdk
risk 0.01cvss —epss 0.08
Unspecified vulnerability in the Deployment component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the January 2011 CPU.…
CVE-2010-3554Oct 19, 2010
Sun Corporation
Jdk
risk 0.00cvss —epss 0.05
Unspecified vulnerability in the CORBA component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was…
CVE-2010-3553Oct 19, 2010
Sun Corporation
Jdk
risk 0.00cvss —epss 0.05
Unspecified vulnerability in the Swing component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was…
CVE-2010-3552Oct 19, 2010
Sun Corporation
Jdk
risk 0.09cvss —epss 0.81
Unspecified vulnerability in the New Java Plug-in component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
CVE-2010-3551Oct 19, 2010
Sun Corporation
Jdk
risk 0.00cvss —epss 0.03
Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality via unknown vectors.
CVE-2010-3550Oct 19, 2010
Sun Corporation
Jdk
risk 0.00cvss —epss 0.04
Unspecified vulnerability in the Java Web Start component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
CVE-2010-3549Oct 19, 2010
Sun Corporation
Jdk
risk 0.00cvss —epss 0.03
Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information…
CVE-2010-3548Oct 19, 2010
Sun Corporation
Jdk
risk 0.00cvss —epss 0.03
Unspecified vulnerability in the Java Naming and Directory Interface (JNDI) component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality via unknown vectors. NOTE: the previous information was…
CVE-2010-3541Oct 19, 2010
Sun Corporation
Jdk
risk 0.00cvss —epss 0.03
Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information…
CVE-2010-3976Oct 19, 2010
Adobe Inc.
Flashplayer
risk 0.01cvss —epss 0.09
Untrusted search path vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the…
CVE-2010-3975Oct 19, 2010
Adobe Inc.
Flashplayer
risk 0.01cvss —epss 0.07
Untrusted search path vulnerability in Adobe Flash Player 9 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse schannel.dll that is located in the same folder as a file that is processed by Flash.
CVE-2010-3495Oct 19, 2010
Zope
Zodb
risk 0.00cvss —epss 0.01
Race condition in ZEO/StorageServer.py in Zope Object Database (ZODB) before 3.10.0 allows remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the accept function having an unexpected return…
CVE-2010-3494Oct 19, 2010
G.rodola
Pyftpdlib
risk 0.00cvss —epss 0.02
Race condition in the FTPHandler class in ftpserver.py in pyftpdlib before 0.5.2 allows remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the accept function having an unexpected value of None…
CVE-2010-3493Oct 19, 2010
Python (programming language)
Python
risk 0.00cvss —epss 0.03
Multiple race conditions in smtpd.py in the smtpd module in Python 2.6, 2.7, 3.1, and 3.2 alpha allow remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the accept function having an unexpected…
CVE-2010-3492Oct 19, 2010
Python (programming language)
Python
risk 0.00cvss —epss 0.03
The asyncore module in Python before 3.2 does not properly handle unsuccessful calls to the accept function, and does not have accompanying documentation describing how daemon applications should handle unsuccessful calls to the accept function, which makes it easier for remote…
CVE-2010-3158Oct 19, 2010
Lhaplus
Lhaplus
risk 0.00cvss —epss 0.00
Untrusted search path vulnerability in Lhaplus before 1.58 allows local users to gain privileges via a Trojan horse executable file in the current working directory.
CVE-2010-3157Oct 19, 2010
XacRett
XacRett
risk 0.00cvss —epss 0.02
Untrusted search path vulnerability in XacRett before 50 allows attackers to execute arbitrary code via a Trojan horse executable file, related to the explorer.exe filename and use of Windows Explorer.
CVE-2009-5013Oct 19, 2010
G.rodola
Pyftpdlib
risk 0.00cvss —epss 0.02
Memory leak in the on_dtp_close function in ftpserver.py in pyftpdlib before 0.5.2 allows remote authenticated users to cause a denial of service (memory consumption) by sending a QUIT command during a data transfer.
CVE-2009-5012Oct 19, 2010
G.rodola
Pyftpdlib
risk 0.00cvss —epss 0.01
ftpserver.py in pyftpdlib before 0.5.2 does not require the l permission for the MLST command, which allows remote authenticated users to bypass intended access restrictions and list the root directory via an FTP session.