CVEs published October 27, 2010
11 CVEs were published on October 27, 2010: 1 critical, 0 high. 1 is now in CISA KEV.
- Published
- 11
- Critical
- 1
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 10
- Now in CISA KEV
- 1
- Fix available
- 1
Most affected products
- activerecord
- 1
Critical 1
Medium, low and unrated 10
- CVE-2010-2891Buffer overflow in the smiGetNode function in lib/smi.c in libsmi 0.4.8 allows context-dependent attackers to execute arbitrary code via an
- CVE-2010-3711libpurple in Pidgin before 2.7.4 does not properly validate the return value of the purple_base64_decode function, which allows remote authe
- CVE-2010-3712Cross-site scripting (XSS) vulnerability in Joomla! 1.5.x before 1.5.21 and 1.6.x before 1.6.1 allows remote attackers to inject arbitrary w
- CVE-2010-3713rss.php in UseBB before 1.0.11 does not properly handle forum configurations in which a user has the view permission but not the read permis
- CVE-2010-3842Absolute path traversal vulnerability in curl 7.20.0 through 7.21.1, when the --remote-header-name or -J option is used, allows remote serve
- CVE-2010-3933Ruby on Rails 2.3.9 and 3.0.0 does not properly handle nested attributes, which allows remote attackers to modify arbitrary records by changactiverecord
- CVE-2010-4096share/ma/keys_for_user in Monkeysphere 0.31 and 0.32 allows local users to execute arbitrary code via unknown manipulations related to the "
- CVE-2010-4097Multiple cross-site scripting (XSS) vulnerabilities in index.php in Aardvark Topsites PHP 5.2.0 and 5.2.1 allow remote attackers to inject a
- CVE-2010-4098monotone before 0.48.1, when configured to allow remote commands, allows remote attackers to cause a denial of service (crash) via an empty
- CVE-2010-4099ess.pm in NitroSecurity NitroView ESM 8.4.0a, when ESSPMDebug is enabled, allows remote attackers to execute arbitrary commands via shell me