| Max CVSS | 9.3 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2010-2546 | 9.3 |
Multiple heap-based buffer overflows in loaders/load_it.c in libmikmod, possibly 3.1.12, might allow remote attackers to execute arbitrary code via (1) crafted samples or (2) crafted instrument definitions in an Impulse Tracker file, related to panpt
|
13-02-2023 - 03:17 | 05-08-2010 - 13:22 | |
| CVE-2010-2801 | 5.1 |
Integer signedness error in the Quantum decompressor in cabextract before 1.3, when archive test mode is used, allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Qua
|
26-04-2021 - 11:45 | 09-08-2010 - 11:58 | |
| CVE-2002-1323 | 4.6 |
Safe.pm 2.0.7 and earlier, when used in Perl 5.8.0 and earlier, may allow attackers to break out of safe compartments in (1) Safe::reval or (2) Safe::rdo using a redefined @_ variable, which is not reset between successive calls.
|
30-10-2018 - 16:25 | 11-12-2002 - 05:00 | |
| CVE-2010-2251 | 7.5 |
The get1 command, as used by lftpget, in LFTP before 4.0.6 does not properly validate a server-provided filename before determining the destination filename of a download, which allows remote servers to create or overwrite arbitrary files via a Conte
|
10-10-2018 - 19:59 | 06-07-2010 - 17:17 | |
| CVE-2010-2971 | 9.3 |
loaders/load_it.c in libmikmod, possibly 3.1.12, does not properly account for the larger size of name##env relative to name##tick and name##node, which allows remote attackers to trigger a buffer over-read and possibly have unspecified other impact
|
05-01-2018 - 02:29 | 05-08-2010 - 13:22 | |
| CVE-2010-2225 | 7.5 |
Use-after-free vulnerability in the SplObjectStorage unserializer in PHP 5.2.x and 5.3.x through 5.3.2 allows remote attackers to execute arbitrary code or obtain sensitive information via serialized data, related to the PHP unserialize function.
|
17-08-2017 - 01:32 | 24-06-2010 - 12:30 | |
| CVE-2010-1917 | 5.0 |
Stack consumption vulnerability in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to cause a denial of service (PHP crash) via a crafted first argument to the fnmatch function, as demonstrated using a long string.
|
17-08-2017 - 01:32 | 12-05-2010 - 11:46 | |
| CVE-2010-2244 | 4.3 |
The AvahiDnsPacket function in avahi-core/socket.c in avahi-daemon in Avahi 0.6.16 and 0.6.25 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a DNS packet with an invalid checksum followed by a DNS packet
|
07-03-2011 - 05:00 | 08-07-2010 - 12:54 | |
| CVE-2010-3065 | 5.0 |
The default session serializer in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 does not properly handle the PS_UNDEF_MARKER marker, which allows context-dependent attackers to modify arbitrary session variables via a crafted session variable name.
|
10-12-2010 - 06:44 | 20-08-2010 - 20:00 | |
| CVE-2009-0758 | 7.8 |
The originates_from_local_legacy_unicast_socket function in avahi-core/server.c in avahi-daemon 0.6.23 does not account for the network byte order of a port number when processing incoming multicast packets, which allows remote attackers to cause a d
|
12-08-2010 - 14:13 | 03-03-2009 - 16:30 | |
| CVE-2010-2969 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.7.3 and earlier, and 1.9.x before 1.9.3, allow remote attackers to inject arbitrary web script or HTML via crafted content, related to (1) action/LikePages.py, (2) action/chart.py, and
|
05-08-2010 - 13:22 | 05-08-2010 - 13:22 | |
| CVE-2010-2487 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.7.3 and earlier, 1.8.x before 1.8.8, and 1.9.x before 1.9.3 allow remote attackers to inject arbitrary web script or HTML via crafted content, related to (1) Page.py, (2) PageEditor.py
|
05-08-2010 - 13:22 | 05-08-2010 - 13:22 | |
| CVE-2010-2970 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.9.x before 1.9.3 allow remote attackers to inject arbitrary web script or HTML via crafted content, related to (1) action/SlideShow.py, (2) action/anywikidraw.py, and (3) action/langua
|
05-08-2010 - 13:22 | 05-08-2010 - 13:22 |