2010 CVE Vulnerabilities
5,249 CVEs published in 2010.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2010-0207 | MEDIUM | 5.5 | 0.8% | Oct 30, 2019 | In xpdf, the xref table contains an infinite loop which allows remote attackers to cause a denial of service (applicatio... |
| CVE-2010-0206 | MEDIUM | 5.5 | 1.1% | Oct 30, 2019 | xpdf allows remote attackers to cause a denial of service (NULL pointer dereference and crash) in the way it processes J... |
| CVE-2010-2064 | HIGH | 7.1 | 0.4% | Oct 29, 2019 | rpcbind 0.2.0 allows local users to write to arbitrary files or gain privileges via a symlink attack on (1) /tmp/portmap... |
| CVE-2010-2061 | HIGH | 7.8 | 0.4% | Oct 29, 2019 | rpcbind 0.2.0 does not properly validate (1) /tmp/portmap.xdr and (2) /tmp/rpcbind.xdr, which can be created by an attac... |
| CVE-2010-1678 | HIGH | 7.5 | 2.2% | Oct 29, 2019 | Mapserver 5.2, 5.4 and 5.6 before 5.6.5-2 improperly validates symbol index values during Mapfile parsing. |
| CVE-2010-4237 | MEDIUM | 5.9 | 0.8% | Oct 29, 2019 | Mercurial before 1.6.4 fails to verify the Common Name field of SSL certificates which allows remote attackers who acqui... |
| CVE-2010-3375 | CRITICAL | 9.8 | 2.4% | Oct 29, 2019 | qtparted has insecure library loading which may allow arbitrary code execution |
| CVE-2010-3373 | MEDIUM | 5.5 | 0.4% | Oct 29, 2019 | paxtest handles temporary files insecurely |
| CVE-2010-4245 | MEDIUM | 6.1 | 1.0% | Oct 28, 2019 | pootle 2.0.5 has XSS via 'match_names' parameter |
| CVE-2010-4241 | HIGH | 8.8 | 0.8% | Oct 28, 2019 | Tiki Wiki CMS Groupware 5.2 has CSRF |
| CVE-2010-4240 | MEDIUM | 6.1 | 1.2% | Oct 28, 2019 | Tiki Wiki CMS Groupware 5.2 has XSS |
| CVE-2010-4239 | CRITICAL | 9.8 | 13.4% | Oct 28, 2019 | Tiki Wiki CMS Groupware 5.2 has Local File Inclusion |
| CVE-2010-3293 | MEDIUM | 5.5 | 0.4% | Oct 28, 2019 | mailscanner can allow local users to prevent virus signatures from being updated |
| CVE-2010-5340 | MEDIUM | 6.1 | 0.8% | Oct 11, 2019 | IceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: webmail/ with the parameter password is non-persistent... |
| CVE-2010-5339 | MEDIUM | 6.1 | 0.8% | Oct 11, 2019 | IceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: webmail/basic/ with the parameter _dlg[captcha][uid] i... |
| CVE-2010-5338 | MEDIUM | 6.1 | 0.8% | Oct 11, 2019 | IceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: webmail/basic/ with the parameter _dlg[captcha][action... |
| CVE-2010-5337 | MEDIUM | 6.1 | 0.8% | Oct 11, 2019 | IceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: webmail/basic/ with the parameter _dlg[captcha][contro... |
| CVE-2010-5336 | MEDIUM | 6.1 | 0.8% | Oct 11, 2019 | IceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: admin/login.html with the parameter username is persis... |
| CVE-2010-5335 | HIGH | 7.5 | 2.8% | Oct 11, 2019 | IceWarp Webclient before 10.2.1 has a directory traversal vulnerability. This can result in loss of confidential data of... |
| CVE-2010-5334 | HIGH | 7.5 | 2.6% | Oct 11, 2019 | IceWarp Webclient before 10.2.1 has a directory traversal vulnerability. This can result in loss of confidential data of... |
| CVE-2010-5333 | CRITICAL | 9.8 | 16.0% | Sep 13, 2019 | The web server in Integard Pro and Home before 2.0.0.9037 and 2.2.x before 2.2.0.9037 has a buffer overflow via a long p... |
| CVE-2010-5332 | MEDIUM | 5.6 | 0.4% | Jul 27, 2019 | In the Linux kernel before 2.6.37, an out of bounds array access happened in drivers/net/mlx4/port.c. When searching for... |
| CVE-2010-5331 | HIGH | 7.8 | 0.4% | Jul 27, 2019 | In the Linux kernel before 2.6.34, a range check issue in drivers/gpu/drm/radeon/atombios.c could cause an off by one (b... |
| CVE-2010-5330 | CRITICAL | 9.8 | 34.4% | Jun 11, 2019 | On certain Ubiquiti devices, Command Injection exists via a GET request to stainfo.cgi (aka Show AP info) because the if... |
| CVE-2010-5305 | — | — | 5.7% | Mar 26, 2019 | The potential exists for exposure of the product's password used to restrict unauthorized access to Rockwell PLC5/SLC5/0... |
Check if your code is affected by 2010 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now