Total
10666 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2010-2725 | 1 Barnowl | 1 Barnowl | 2010-08-05 | 7.5 HIGH | N/A |
BarnOwl before 1.6.2 does not check the return code of calls to the (1) ZPending and (2) ZReceiveNotice functions in libzephyr, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors. | |||||
CVE-2010-1517 | 1 Gigabyte | 1 Dldrv2 Activex Control | 2010-08-03 | 10.0 HIGH | N/A |
The GIGABYTE Dldrv2 ActiveX control 1.4.206.11 allows remote attackers to (1) download arbitrary programs onto a client system, and execute these programs, via vectors involving the dl method; and (2) download arbitrary programs onto a client system via vectors involving the SetDLInfo method in conjunction with the Bdl method. | |||||
CVE-2010-1518 | 1 Gigabyte | 1 Dldrv2 Activex Control | 2010-08-03 | 10.0 HIGH | N/A |
Array index error in the SetDLInfo method in the GIGABYTE Dldrv2 ActiveX control 1.4.206.11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via the item argument. | |||||
CVE-2009-4921 | 1 Cisco | 1 Asa 5580 | 2010-06-30 | 7.8 HIGH | N/A |
Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allow remote attackers to cause a denial of service (traceback) via malformed TCP packets, aka Bug ID CSCsm84110. | |||||
CVE-2009-4918 | 1 Cisco | 1 Asa 5580 | 2010-06-30 | 7.8 HIGH | N/A |
Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allow remote attackers to cause a denial of service (IKE process hang) via malformed NAT-T packets, aka Bug ID CSCsr74439. | |||||
CVE-2009-4325 | 1 Ibm | 1 Db2 | 2010-06-29 | 6.4 MEDIUM | N/A |
The Client Interfaces component in IBM DB2 8.2 before FP18, 9.1 before FP8, 9.5 before FP5, and 9.7 before FP1 does not validate an unspecified pointer, which allows attackers to overwrite "external memory" via unknown vectors, related to a missing "check for null pointers." | |||||
CVE-2009-4327 | 1 Ibm | 1 Db2 | 2010-06-29 | 5.0 MEDIUM | N/A |
The Common Code Infrastructure component in IBM DB2 9.5 before FP5 and 9.7 before FP1 does not properly validate the size of a memory pool during a creation attempt, which allows attackers to cause a denial of service (memory consumption) via unspecified vectors. | |||||
CVE-2010-2505 | 1 Saschart | 1 Sascam Webcam Server | 2010-06-29 | 5.0 MEDIUM | N/A |
Soft SaschArt SasCAM Webcam Server 2.6.5, 2.7, and earlier allows remote attackers to cause a denial of service (crash) via a large number of requests with a long line, as demonstrated using a long GET request. | |||||
CVE-2010-2327 | 1 Ibm | 2 Websphere Application Server, Z\/os | 2010-06-21 | 4.3 MEDIUM | N/A |
mod_ibm_ssl in IBM HTTP Server 6.0 before 6.0.2.43, 6.1 before 6.1.0.33, and 7.0 before 7.0.0.11, as used in IBM WebSphere Application Server (WAS) on z/OS, does not properly handle a large HTTP request body in uploading over SSL, which might allow remote attackers to cause a denial of service (daemon fail) via an upload. | |||||
CVE-2010-2075 | 1 Unrealircd | 1 Unrealircd | 2010-06-18 | 7.5 HIGH | N/A |
UnrealIRCd 3.2.8.1, as distributed on certain mirror sites from November 2009 through June 2010, contains an externally introduced modification (Trojan Horse) in the DEBUG3_DOLOG_SYSTEM macro, which allows remote attackers to execute arbitrary commands. | |||||
CVE-2010-1379 | 1 Apple | 2 Mac Os X, Mac Os X Server | 2010-06-18 | 5.0 MEDIUM | N/A |
Printer Setup in Apple Mac OS X 10.6 before 10.6.4 does not properly interpret character encoding, which allows remote attackers to cause a denial of service (printing failure) by deploying a printing device that has a Unicode character in its printing-service name. | |||||
CVE-2002-2433 | 1 Novell | 2 Netware, Netware Ftp Server | 2010-06-08 | 4.0 MEDIUM | N/A |
NWFTPD.nlm before 5.03b in the FTP server in Novell NetWare allows remote authenticated users to cause a denial of service (abend) via a crafted ABOR command. | |||||
CVE-2010-1273 | 1 Emweb | 1 Wt | 2010-06-07 | 9.3 HIGH | N/A |
Emweb Wt before 3.1.1 does not validate the UTF-8 encoding of (1) form values and (2) JSignal arguments, which has unspecified impact and remote attack vectors. | |||||
CVE-2009-4788 | 1 Pligg | 1 Pligg Cms | 2010-06-03 | 4.3 MEDIUM | N/A |
Multiple open redirect vulnerabilities in Pligg 1.0.2 and earlier allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the (1) return parameter to pligg/login.php and the (2) HTTP Referer header to user_settings.php. | |||||
CVE-2010-2115 | 1 Solarwinds | 1 Tftp Server | 2010-06-01 | 5.0 MEDIUM | N/A |
SolarWinds TFTP Server 10.4.0.10 allows remote attackers to cause a denial of service (no new connections) via a crafted read request. | |||||
CVE-2010-1567 | 1 Cisco | 1 Pgw 2200 Softswitch | 2010-05-21 | 7.8 HIGH | N/A |
The SIP implementation on the Cisco PGW 2200 Softswitch with software before 9.8(1)S5 allows remote attackers to cause a denial of service (device crash) via a malformed header, aka Bug ID CSCsz13590. | |||||
CVE-2010-1563 | 1 Cisco | 1 Pgw 2200 Softswitch | 2010-05-21 | 7.8 HIGH | N/A |
The SIP implementation on the Cisco PGW 2200 Softswitch with software 9.7(3)S before 9.7(3)S9 and 9.7(3)P before 9.7(3)P9 allows remote attackers to cause a denial of service (device crash) via a malformed header, aka Bug ID CSCsk04588. | |||||
CVE-2010-1562 | 1 Cisco | 1 Pgw 2200 Softswitch | 2010-05-21 | 7.8 HIGH | N/A |
The SIP implementation on the Cisco PGW 2200 Softswitch with software 9.7(3)S before 9.7(3)S9 and 9.7(3)P before 9.7(3)P9 allows remote attackers to cause a denial of service (device crash) via a malformed Contact header, aka Bug ID CSCsj98521. | |||||
CVE-2010-1561 | 1 Cisco | 1 Pgw 2200 Softswitch | 2010-05-21 | 7.8 HIGH | N/A |
The SIP implementation on the Cisco PGW 2200 Softswitch with software 9.7(3)S before 9.7(3)S11 and 9.7(3)P before 9.7(3)P11 allows remote attackers to cause a denial of service (device crash) via a long message, aka Bug ID CSCsk44115. | |||||
CVE-2010-0602 | 1 Cisco | 1 Pgw 2200 Softswitch | 2010-05-21 | 7.8 HIGH | N/A |
The SIP implementation on the Cisco PGW 2200 Softswitch with software before 9.7(3)S11 allows remote attackers to cause a denial of service (device crash) via a malformed packet, aka Bug ID CSCsk32606. |