Browse CVEs

MEDIUM 5.0 CVE-2010-3899 IBM OmniFind Enterprise Edition 8.x and 9.x performs web crawls with an unlimited recursion depth, which allows remote web servers to cause a denial … Omnifind No fix yet Fix from $1,6002010-11-12 MEDIUM 5.0 CVE-2010-4217 Use-after-free vulnerability in the proxy server in IBM Tivoli Directory Server (TDS) 6.0.0.x before 6.0.0.8-TIV-ITDS-IF0007 and 6.1.x before 6.1.0-T… Tivoli Directory Server Mitigation only Fix from $1,6002010-11-09 MEDIUM 5.0 CVE-2010-4055EPSS 7% Stack consumption vulnerability in solid.exe in IBM solidDB 6.5.0.3 and earlier allows remote attackers to cause a denial of service (memory consumpt… Soliddb after 6.5.0.3 Fix from $1,6002010-10-23 HIGH 9.3 CVE-2010-3180 Use-after-free vulnerability in the nsBarProp function in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x b… Firefox after 3.5.13 Fix from $1,9502010-10-21 MEDIUM 5.0 CVE-2009-5009 Double free vulnerability in OpenConnect before 1.40 might allow remote AnyConnect SSL VPN servers to cause a denial of service (application crash) o… Openconnect after 1.30 Fix from $1,6002010-10-14 HIGH 9.3 CVE-2010-3217EPSS 40% Double free vulnerability in Microsoft Word 2002 SP3 allows remote attackers to execute arbitrary code via a Word document with crafted List Format O… Word Mitigation only Fix from $1,9502010-10-13 MEDIUM 5.0 CVE-2010-3755 The _DAS_ReadBlockReply function in FastBackServer.exe in the Server in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0… Tivoli Storage Manager Fastback Mitigation only Fix from $1,6002010-10-05 HIGH 7.8 CVE-2010-3760 FastBackMount.exe in the Mount service in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 does not prop… Tivoli Storage Manager Fastback Mitigation only Fix from $1,9502010-10-05 HIGH 7.8 CVE-2010-2836 Memory leak in the SSL VPN feature in Cisco IOS 12.4, 15.0, and 15.1, when HTTP port redirection is enabled, allows remote attackers to cause a denia… iOS Patch available Fix from $1,9502010-09-23 HIGH 9.3 CVE-2010-1806EPSS 5% Use-after-free vulnerability in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2 allows remote attackers to execute arbitrary code or cause a denia… Safari Patch available Fix from $1,9502010-09-10 MEDIUM 6.8 CVE-2010-1781 Double free vulnerability in WebKit in Apple iOS before 4.1 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a… Ubuntu Linux 4.1+ Fix from $1,6002010-09-09 MEDIUM 6.8 CVE-2010-1812 Use-after-free vulnerability in WebKit in Apple iOS before 4.1 on the iPhone and iPod touch, and webkitgtk before 1.2.6, allows remote attackers to e… Ubuntu Linux 1.2.6 / 4.1+ Fix from $1,6002010-09-09 MEDIUM 6.8 CVE-2010-1815 Use-after-free vulnerability in WebKit in Apple iOS before 4.1 on the iPhone and iPod touch, and webkitgtk before 1.2.6, allows remote attackers to e… Ubuntu Linux 1.2.6 / 4.1+ Fix from $1,6002010-09-09 HIGH 9.3 CVE-2010-2760 Use-after-free vulnerability in the nsTreeSelection function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.… Firefox after 3.5.11 Fix from $1,9502010-09-09 HIGH 9.3 CVE-2010-2767 The navigator.plugins implementation in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and Se… Firefox after 3.5.11 Fix from $1,9502010-09-09 HIGH 9.3 CVE-2010-3167EPSS 7% The nsTreeContentView function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonke… Firefox after 3.5.11 Fix from $1,9502010-09-09 HIGH 7.8 CVE-2010-2839 SIPD in Cisco Unified Presence 6.x before 6.0(7) and 7.x before 7.0(8) allows remote attackers to cause a denial of service (stack memory corruption … Unified Presence Server Patch available Fix from $1,9502010-08-26 HIGH 7.5 CVE-2010-3058 The Mount service in IBM Tivoli Storage Manager (TSM) FastBack 5.x.x before 5.5.7, and 6.1.0.0, establishes an open UDP port, which might allow remot… Tivoli Storage Manager Fastback Mitigation only Fix from $1,9502010-08-20 MEDIUM 5.0 CVE-2010-2813 functions/imap_general.php in SquirrelMail before 1.4.21 does not properly handle 8-bit characters in passwords, which allows remote attackers to cau… Squirrelmail after 1.4.20 Fix from $1,6002010-08-19 MEDIUM 5.0 CVE-2010-2219 Unspecified vulnerability in Adobe Flash Media Server (FMS) before 3.0.6, and 3.5.x before 3.5.4, allows attackers to cause a denial of service (memo… Flash Media Server after 3.0.5 Fix from $1,6002010-08-11 HIGH 9.3 CVE-2010-1786EPSS 6% Use-after-free vulnerability in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and… Safari after 5.0 Fix from $1,9502010-07-30 HIGH 9.3 CVE-2010-1793EPSS 7% Multiple use-after-free vulnerabilities in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS … Safari after 5.0 Fix from $1,9502010-07-30 HIGH 9.3 CVE-2010-1209EPSS 5% Use-after-free vulnerability in the NodeIterator implementation in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2… Firefox after 2.0.5 Fix from $1,9502010-07-30 HIGH 9.3 CVE-2010-1780EPSS 6% Use-after-free vulnerability in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and… Safari after 5.0 Fix from $1,9502010-07-30 HIGH 10.0 CVE-2010-2755 layout/generic/nsObjectFrame.cpp in Mozilla Firefox 3.6.7 does not properly free memory in the parameter array of a plugin instance, which allows rem… Firefox Mitigation only Fix from $1,9502010-07-30 MEDIUM 5.0 CVE-2010-2534 The NetworkSyncCommandQueue function in network/network_command.cpp in OpenTTD before 1.0.3 does not properly clear a pointer in a linked list, which… Openttd Patch available Fix from $1,6002010-07-28 HIGH 9.3 CVE-2010-1285 Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code via unspecified ma… Acrobat Patch available Fix from $1,9502010-06-30 HIGH 9.3 CVE-2010-2168EPSS 14% Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code via a PDF file wit… Acrobat Patch available Fix from $1,9502010-06-30 HIGH 9.3 CVE-2010-2201EPSS 14% Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code via a PDF file wit… Acrobat Patch available Fix from $1,9502010-06-30 HIGH 7.8 CVE-2009-4914 Memory leak on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote attackers to cause a denial of … Asa 5580 after 8.1 Fix from $1,9502010-06-29