CVEs published September 28, 2010
6 CVEs were published on September 28, 2010: 0 critical, 0 high.
- Published
- 6
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 6
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 6
- CVE-2010-0405Integer overflow in the BZ2_decompress function in decompress.c in bzip2 and libbzip2 before 1.0.6 allows context-dependent attackers to cau
- CVE-2010-2950Format string vulnerability in stream.c in the phar extension in PHP 5.3.x through 5.3.3 allows context-dependent attackers to obtain sensit
- CVE-2010-3070Cross-site scripting (XSS) vulnerability in NuSOAP 0.9.5, as used in MantisBT and other products, allows remote attackers to inject arbitrar
- CVE-2010-3087LibTIFF before 3.9.2-5.2.1 in SUSE openSUSE 11.3 allows remote attackers to cause a denial of service (memory corruption) or possibly execut
- CVE-2010-3277The installer in VMware Workstation 7.x before 7.1.2 build 301548 and VMware Player 3.x before 3.1.2 build 301548 renders an index.htm file
- CVE-2010-3490Directory traversal vulnerability in page.recordings.php in the System Recordings component in the configuration interface in FreePBX 2.8.0