Vulnerabilities (CVE)

Filtered by CWE-20
Total 13251 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2010-3375 1 Qtparted Project 1 Qtparted 2026-06-16 7.5 HIGH 9.8 CRITICAL
qtparted has insecure library loading which may allow arbitrary code execution
CVE-2010-3373 2 Debian, Grsecurity 2 Debian Linux, Paxtest 2026-06-16 2.1 LOW 5.5 MEDIUM
paxtest handles temporary files insecurely
CVE-2010-3359 2 Debian, Gargoyle Project 2 Debian Linux, Gargoyle 2026-06-16 4.4 MEDIUM 4.8 MEDIUM
If LD_LIBRARY_PATH is undefined in gargoyle-free before 2009-08-25, the variable will point to the current directory. This can allow a local user to trick another user into running gargoyle in a directory with a cracked libgarglk.so and gain access to the user's account.
CVE-2010-3350 1 Bareftp 1 Bareftp 2026-06-16 6.9 MEDIUM N/A
bareFTP 0.3.4 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
CVE-2010-3338 1 Microsoft 3 Windows 7, Windows Server 2008, Windows Vista 2026-06-16 7.2 HIGH N/A
The Windows Task Scheduler in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly determine the security context of scheduled tasks, which allows local users to gain privileges via a crafted application, aka "Task Scheduler Vulnerability." NOTE: this might overlap CVE-2010-3888.
CVE-2010-3320 1 Ibm 1 Filenet Content Manager 2026-06-16 6.8 MEDIUM N/A
Open redirect vulnerability in IBM Records Manager (RM) 4.5.x before 4.5.1.1-IER-FP001 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
CVE-2010-3293 1 Mailscanner 1 Mailscanner 2026-06-16 2.1 LOW 5.5 MEDIUM
mailscanner can allow local users to prevent virus signatures from being updated
CVE-2010-3283 1 Hp 1 System Management Homepage 2026-06-16 4.3 MEDIUM N/A
Open redirect vulnerability in HP System Management Homepage (SMH) before 6.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
CVE-2010-3273 1 Zohocorp 1 Manageengine Adselfservice Plus 2026-06-16 5.0 MEDIUM N/A
ZOHO ManageEngine ADSelfService Plus before 4.5 Build 4500 allows remote attackers to reset user passwords, and consequently obtain access to arbitrary user accounts, by providing a user id to accounts/ValidateUser, and then providing a new password to accounts/ResetResult.
CVE-2010-3272 1 Zohocorp 1 Manageengine Adselfservice Plus 2026-06-16 4.3 MEDIUM N/A
accounts/ValidateAnswers in the security-questions implementation in ZOHO ManageEngine ADSelfService Plus before 4.5 Build 4500 makes it easier for remote attackers to reset user passwords, and consequently obtain access to arbitrary user accounts, via a modified (1) Hide_Captcha or (2) quesList parameter in a validateAll action.
CVE-2010-3268 3 Intel, Microsoft, Symantec 4 Intel Alert Management System, Windows 2000, Antivirus and 1 more 2026-06-16 5.0 MEDIUM N/A
The GetStringAMSHandler function in prgxhndl.dll in hndlrsvc.exe in the Intel Alert Handler service (aka Symantec Intel Handler service) in Intel Alert Management System (AMS), as used in Symantec Antivirus Corporate Edition 10.1.4.4010 on Windows 2000 SP4 and Symantec Endpoint Protection before 11.x, does not properly validate the CommandLine field of an AMS request, which allows remote attackers to cause a denial of service (application crash) via a crafted request.
CVE-2010-3247 1 Google 1 Chrome 2026-06-16 4.3 MEDIUM N/A
Google Chrome before 6.0.472.53 does not properly restrict the characters in URLs, which allows remote attackers to spoof the appearance of the URL bar via homographic sequences.
CVE-2010-3242 1 Microsoft 3 Excel, Office, Open Xml File Format Converter 2026-06-16 9.3 HIGH N/A
Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Ghost Record Type Parsing Vulnerability."
CVE-2010-3241 1 Microsoft 3 Excel, Office, Open Xml File Format Converter 2026-06-16 9.3 HIGH N/A
Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate binary file-format information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Out-of-Bounds Memory Write in Parsing Vulnerability."
CVE-2010-3240 1 Microsoft 3 Excel, Excel Viewer, Office Compatibility Pack 2026-06-16 9.3 HIGH N/A
Microsoft Excel 2002 SP3 and 2007 SP2; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Real Time Data Array Record Vulnerability."
CVE-2010-3239 1 Microsoft 1 Excel 2026-06-16 9.3 HIGH N/A
Microsoft Excel 2002 SP3 does not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Extra Out of Boundary Record Parsing Vulnerability."
CVE-2010-3238 1 Microsoft 2 Excel, Office 2026-06-16 9.3 HIGH N/A
Microsoft Excel 2002 SP3 and 2003 SP3, and Office 2004 for Mac, does not properly validate binary file-format information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Negative Future Function Vulnerability."
CVE-2010-3237 1 Microsoft 2 Excel, Office 2026-06-16 9.3 HIGH N/A
Microsoft Excel 2002 SP3 and Office 2004 for Mac do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Merge Cell Record Pointer Vulnerability."
CVE-2010-3236 1 Microsoft 3 Excel, Office, Open Xml File Format Converter 2026-06-16 9.3 HIGH N/A
Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Out Of Bounds Array Vulnerability."
CVE-2010-3235 1 Microsoft 1 Excel 2026-06-16 9.3 HIGH N/A
Microsoft Excel 2002 SP3 does not properly validate formula information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Formula Biff Record Vulnerability."