CVEs published December 22, 2010
45 CVEs were published on December 22, 2010: 0 critical, 1 high. Browse them by severity, product and exploitation status.
- Published
- 45
- Critical
- 0
- High
- 1
- Medium
- 0
- Low
- 0
- Unrated
- 44
- Now in CISA KEV
- 0
- Fix available
- 0
High 1
Medium, low and unrated 44
- CVE-2010-2644IBM WebSphere Service Registry and Repository (WSRR) 7.0.0 before FP1 does not properly implement access control, which allows remote…
- CVE-2010-3268The GetStringAMSHandler function in prgxhndl.dll in hndlrsvc.exe in the Intel Alert Handler service (aka Symantec Intel Handler service)…
- CVE-2010-3905The password reset feature in the administrator interface for Eucalyptus 2.0.0 and 2.0.1 does not perform authentication, which allows…
- CVE-2010-3970Stack-based buffer overflow in the CreateSizedDIBSECTION function in shimgvw.dll in the Windows Shell graphics processor (aka graphics…
- CVE-2010-3971Use-after-free vulnerability in the CSharedStyleSheet::Notify function in the Cascading Style Sheets (CSS) parser in mshtml.dll, as used…
- CVE-2010-4110Unspecified vulnerability in HP OpenVMS 8.3, 8.3-1H1, and 8.4 on the Itanium platform on Integrity servers allows local users to gain…
- CVE-2010-4111Cross-site scripting (XSS) vulnerability in HP Insight Diagnostics Online Edition before 8.5.1.3712 allows remote attackers to inject…
- CVE-2010-4112HP Insight Management Agents before 8.6 allows remote attackers to obtain sensitive information via an unspecified request that triggers…
- CVE-2010-4113Stack-based buffer overflow in HP Power Manager (HPPM) before 4.3.2 allows remote attackers to execute arbitrary code via a long Login…
- CVE-2010-4114Cross-site scripting (XSS) vulnerability in HP Discovery & Dependency Mapping Inventory (DDMI) 2.5x, 7.5x, and 7.6x allows remote…
- CVE-2010-4277Cross-site scripting (XSS) vulnerability in lembedded-video.php in the Embedded Video plugin 4.1 for WordPress allows remote attackers to…
- CVE-2010-4346The install_special_mapping function in mm/mmap.c in the Linux kernel before 2.6.37-rc6 does not make an expected security_file_mmap…
- CVE-2010-4347The ACPI subsystem in the Linux kernel before 2.6.36.2 uses 0222 permissions for the debugfs custom_method file, which allows local users…
- CVE-2010-4573The Update Installer in VMware ESXi 4.1, when a modified sfcb.cfg is present, does not properly configure the SFCB authentication mode…
- CVE-2010-4589Cross-site scripting (XSS) vulnerability in IBM ENOVIA 6 allows remote attackers to inject arbitrary web script or HTML via vectors…
- CVE-2010-4590Cross-site scripting (XSS) vulnerability in HTTP Access Services (HTTP-AS) in the Connection Manager in IBM Lotus Mobile Connect (LMC)…
- CVE-2010-4591The Connection Manager in IBM Lotus Mobile Connect (LMC) before 6.1.4, when HTTP Access Services (HTTP-AS) is enabled, does not delete…
- CVE-2010-4592The Mobile Network Connections functionality in the Connection Manager in IBM Lotus Mobile Connect before 6.1.4, when HTTP Access Services…
- CVE-2010-4593The Connection Manager in IBM Lotus Mobile Connect before 6.1.4 does not properly maintain a certain reference count, which allows remote…
- CVE-2010-4594The Connection Manager in IBM Lotus Mobile Connect before 6.1.4, when HTTP Access Services (HTTP-AS) is enabled, does not properly process…
- CVE-2010-4595The Connection Manager in IBM Lotus Mobile Connect before 6.1.4 disables the http.device.stanza blacklisting functionality for HTTP Access…
- CVE-2009-2189The ICMPv6 implementation on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware before…
- CVE-2010-0039The Application-Level Gateway (ALG) on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with…
- CVE-2010-1804Unspecified vulnerability in the network bridge functionality on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express…
- CVE-2010-2590Heap-based buffer overflow in the CrystalReports12.CrystalPrintControl.1 ActiveX control in PrintControl.dll 12.3.2.753 in SAP Crystal…
Show all 44 entriesShow fewer entries
- CVE-2010-4275Multiple cross-site scripting (XSS) vulnerabilities in Radius Manager 3.8.0 allow remote authenticated administrators to inject arbitrary…
- CVE-2010-4332Pointter PHP Content Management System 1.0 allows remote attackers to bypass authentication and obtain administrative privileges via…
- CVE-2010-4333Pointter PHP Micro-Blogging Social Network 1.8 allows remote attackers to bypass authentication and obtain administrative privileges via…
- CVE-2010-4579Opera before 11.00 does not properly constrain dialogs to appear on top of rendered documents, which makes it easier for remote attackers…
- CVE-2010-4580Opera before 11.00 does not clear WAP WML form fields after manual navigation to a new web site, which allows remote attackers to obtain…
- CVE-2010-4581Unspecified vulnerability in Opera before 11.00 has unknown impact and attack vectors, related to "a high severity issue."
- CVE-2010-4582Opera before 11.00 does not properly handle security policies during updates to extensions, which might allow remote attackers to bypass…
- CVE-2010-4583Opera before 11.00, when Opera Turbo is enabled, does not display a page's security indication, which makes it easier for remote attackers…
- CVE-2010-4584Opera before 11.00, when Opera Turbo is used, does not properly present information about problematic X.509 certificates on https web…
- CVE-2010-4585Unspecified vulnerability in the auto-update functionality in Opera before 11.00 allows remote attackers to cause a denial of service…
- CVE-2010-4586The default configuration of Opera before 11.00 enables WebSockets functionality, which has unspecified impact and remote attack vectors…
- CVE-2010-4587Opera before 11.00 on Windows does not properly implement the Insecure Third Party Module warning message, which might make it easier for…
- CVE-2010-0114fw_charts.php in the reporting module in the Manager (aka SEPM) component in Symantec Endpoint Protection (SEP) 11.x before 11 RU6 MP2…
- CVE-2010-1676Heap-based buffer overflow in Tor before 0.2.1.28 and 0.2.2.x before 0.2.2.20-alpha allows remote attackers to cause a denial of service…
- CVE-2010-4116Unspecified vulnerability in HP StorageWorks Storage Mirroring 5.x before 5.2.2.1771.2 allows remote attackers to execute arbitrary code…
- CVE-2010-4574The Pickle::Pickle function in base/pickle.cc in Google Chrome before 8.0.552.224 and Chrome OS before 8.0.552.343 on 64-bit Linux…
- CVE-2010-4575The ThemeInstalledInfoBarDelegate::Observe function in browser/extensions/theme_installed_infobar_delegate.cc in Google Chrome before…
- CVE-2010-4576browser/worker_host/message_port_dispatcher.cc in Google Chrome before 8.0.552.224 and Chrome OS before 8.0.552.343 does not properly…
- CVE-2010-4578Google Chrome before 8.0.552.224 and Chrome OS before 8.0.552.343 do not properly perform cursor handling, which allows remote attackers…