# CVEs published 2010-05-13 28 CVEs were published on May 13, 2010: 0 critical, 0 high. Days are UTC. - [CVE-2010-1939](https://cve.now/CVE-2010-1939.md): Use-after-free vulnerability in Apple Safari 4.0.5 on Windows allows remote attackers to execute arbitrary code by using window.open to crea (no CVSS) - [CVE-2010-1284](https://cve.now/CVE-2010-1284.md): Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary cod (no CVSS) - [CVE-2010-1286](https://cve.now/CVE-2010-1286.md): Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary cod (no CVSS) - [CVE-2010-1287](https://cve.now/CVE-2010-1287.md): Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary cod (no CVSS) - [CVE-2010-1288](https://cve.now/CVE-2010-1288.md): Buffer overflow in Adobe Shockwave Player before 11.5.7.609 might allow attackers to execute arbitrary code via unspecified vectors. (no CVSS) - [CVE-2010-1289](https://cve.now/CVE-2010-1289.md): Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary cod (no CVSS) - [CVE-2010-1290](https://cve.now/CVE-2010-1290.md): Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary cod (no CVSS) - [CVE-2010-1291](https://cve.now/CVE-2010-1291.md): Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary cod (no CVSS) - [CVE-2009-3467](https://cve.now/CVE-2009-3467.md): Cross-site scripting (XSS) vulnerability in an unspecified method in Adobe ColdFusion 8.0, 8.0.1, and 9.0 allows remote attackers to inject (no CVSS) - [CVE-2010-0127](https://cve.now/CVE-2010-0127.md): Adobe Shockwave Player before 11.5.7.609 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS) - [CVE-2010-0128](https://cve.now/CVE-2010-0128.md): Integer signedness error in dirapi.dll in Adobe Shockwave Player before 11.5.7.609 and Adobe Director before 11.5.7.609 allows remote attack (no CVSS) - [CVE-2010-0129](https://cve.now/CVE-2010-0129.md): Multiple integer overflows in Adobe Shockwave Player before 11.5.7.609 allow remote attackers to cause a denial of service (memory corruptio (no CVSS) - [CVE-2010-0130](https://cve.now/CVE-2010-0130.md): Integer overflow in Adobe Shockwave Player before 11.5.7.609 might allow remote attackers to execute arbitrary code via a crafted .dir (aka (no CVSS) - [CVE-2010-0986](https://cve.now/CVE-2010-0986.md): Adobe Shockwave Player before 11.5.7.609 does not properly process asset entries, which allows remote attackers to cause a denial of service (no CVSS) - [CVE-2010-0987](https://cve.now/CVE-2010-0987.md): Heap-based buffer overflow in Adobe Shockwave Player before 11.5.7.609 might allow remote attackers to execute arbitrary code via crafted em (no CVSS) - [CVE-2010-1280](https://cve.now/CVE-2010-1280.md): Adobe Shockwave Player before 11.5.7.609 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS) - [CVE-2010-1281](https://cve.now/CVE-2010-1281.md): iml32.dll in Adobe Shockwave Player before 11.5.7.609 does not validate a certain value from a file before using it in file-pointer calculat (no CVSS) - [CVE-2010-1282](https://cve.now/CVE-2010-1282.md): Adobe Shockwave Player before 11.5.7.609 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a craf (no CVSS) - [CVE-2010-1283](https://cve.now/CVE-2010-1283.md): Adobe Shockwave Player before 11.5.7.609 does not properly parse 3D objects in .dir (aka Director) files, which allows remote attackers to e (no CVSS) - [CVE-2010-1292](https://cve.now/CVE-2010-1292.md): The implementation of pami RIFF chunk parsing in Adobe Shockwave Player before 11.5.7.609 does not validate a certain value from a file befo (no CVSS) - [CVE-2010-1293](https://cve.now/CVE-2010-1293.md): Cross-site scripting (XSS) vulnerability in the Administrator page in Adobe ColdFusion 8.0, 8.0.1, and 9.0 allows remote attackers to inject (no CVSS) - [CVE-2010-1294](https://cve.now/CVE-2010-1294.md): Unspecified vulnerability in Adobe ColdFusion 8.0, 8.0.1, and 9.0 allows local users to obtain sensitive information via unknown vectors. (no CVSS) - [CVE-2010-1550](https://cve.now/CVE-2010-1550.md): Format string vulnerability in ovet\_demandpoll.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers (no CVSS) - [CVE-2010-1551](https://cve.now/CVE-2010-1551.md): Stack-based buffer overflow in the \_OVParseLLA function in ov.dll in netmon.exe in Network Monitor in HP OpenView Network Node Manager (OV N (no CVSS) - [CVE-2010-1552](https://cve.now/CVE-2010-1552.md): Stack-based buffer overflow in the doLoad function in snmpviewer.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow (no CVSS) - [CVE-2010-1553](https://cve.now/CVE-2010-1553.md): Stack-based buffer overflow in getnnmdata.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to e (no CVSS) - [CVE-2010-1554](https://cve.now/CVE-2010-1554.md): Stack-based buffer overflow in getnnmdata.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to e (no CVSS) - [CVE-2010-1555](https://cve.now/CVE-2010-1555.md): Stack-based buffer overflow in getnnmdata.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to e (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2010-05-13 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.