NVD Vulnerability Information Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
CRITICAL
HIGH
MEDIUM
LOW
CWE
In descending order of publication date
In descending order of update date
Number of items displayed

You can search the list of vulnerabilities managed by the NVD (National Vulnerability Database).
Since vulnerability information is often updated before JVN (Japan Vulnerability Note), vulnerabilities that are not listed in JVN may be updated.

If there is a vulnerability related to JVN (Japan Vulnerability Note), the information will be displayed on the detail page.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • CRITICAL
  • HIGH
  • MEDIUM
  • LOW

Update Date:June 21, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
311201 3.3 LOW
apereo phpcas PGTStorage/pgt-file.php in phpCAS before 1.1.3, when proxy mode is enabled, allows local users to overwrite arbitrary files via a symlink attack on an unspecified file. CWE-59
Link Following
CVE-2010-3691 2024-11-21 10:19 2010-10-8 Show GitHub Exploit DB Packet Storm
311202 4.3 MEDIUM
apereo phpcas Multiple cross-site scripting (XSS) vulnerabilities in phpCAS before 1.1.3, when proxy mode is enabled, allow remote attackers to inject arbitrary web script or HTML via (1) a crafted Proxy Granting … CWE-79
Cross-site Scripting
CVE-2010-3690 2024-11-21 10:19 2010-10-8 Show GitHub Exploit DB Packet Storm
311203 6.0 MEDIUM
alvaro_herrera pl\/php The PL/php add-on 1.4 and earlier for PostgreSQL does not properly protect script execution by a different SQL user identity within the same session, which allows remote authenticated users to gain p… CWE-264
Permissions, Privileges, and Access Controls
CVE-2010-3781 2024-11-21 10:19 2010-10-7 Show GitHub Exploit DB Packet Storm
311204 4.0 MEDIUM
dovecot dovecot Dovecot 1.2.x before 1.2.15 allows remote authenticated users to cause a denial of service (master process outage) by simultaneously disconnecting many (1) IMAP or (2) POP3 sessions. NVD-CWE-Other
CVE-2010-3780 2024-11-21 10:19 2010-10-7 Show GitHub Exploit DB Packet Storm
311205 3.5 LOW
dovecot dovecot Dovecot 1.2.x before 1.2.15 and 2.0.x before 2.0.beta2 grants the admin permission to the owner of each mailbox in a non-public namespace, which might allow remote authenticated users to bypass inten… CWE-264
Permissions, Privileges, and Access Controls
CVE-2010-3779 2024-11-21 10:19 2010-10-7 Show GitHub Exploit DB Packet Storm
311206 5.5 MEDIUM
dovecot dovecot plugins/acl/acl-backend-vfile.c in Dovecot 1.2.x before 1.2.15 and 2.0.x before 2.0.5 interprets an ACL entry as a directive to add to the permissions granted by another ACL entry, instead of a direc… CWE-264
Permissions, Privileges, and Access Controls
CVE-2010-3707 2024-11-21 10:19 2010-10-7 Show GitHub Exploit DB Packet Storm
311207 5.5 MEDIUM
dovecot dovecot plugins/acl/acl-backend-vfile.c in Dovecot 1.2.x before 1.2.15 and 2.0.x before 2.0.5 interprets an ACL entry as a directive to add to the permissions granted by another ACL entry, instead of a direc… CWE-264
Permissions, Privileges, and Access Controls
CVE-2010-3706 2024-11-21 10:19 2010-10-7 Show GitHub Exploit DB Packet Storm
311208 9.3 HIGH
adobe acrobat
acrobat_reader
Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vecto… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2010-3658 2024-11-21 10:19 2010-10-7 Show GitHub Exploit DB Packet Storm
311209 4.3 MEDIUM
adobe acrobat
acrobat_reader
Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows attackers to cause a denial of service via unknown vectors, a different vuln… NVD-CWE-noinfo
CVE-2010-3657 2024-11-21 10:19 2010-10-7 Show GitHub Exploit DB Packet Storm
311210 4.3 MEDIUM
adobe acrobat
acrobat_reader
Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows attackers to cause a denial of service via unknown vectors, a different vuln… NVD-CWE-noinfo
CVE-2010-3656 2024-11-21 10:19 2010-10-7 Show GitHub Exploit DB Packet Storm
311211 9.3 HIGH
adobe acrobat
acrobat_reader
Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vecto… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2010-3632 2024-11-21 10:19 2010-10-7 Show GitHub Exploit DB Packet Storm
311212 9.3 HIGH
adobe acrobat
acrobat_reader
Array index error in Adobe Reader and Acrobat 8.x before 8.2.5 and 9.x before 9.4 on Mac OS X allows attackers to execute arbitrary code via unspecified vectors. CWE-20
 Improper Input Validation 
CVE-2010-3631 2024-11-21 10:19 2010-10-7 Show GitHub Exploit DB Packet Storm
311213 9.3 HIGH
adobe acrobat
acrobat_reader
Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows attackers to cause a denial of service or possibly execute arbitrary code vi… NVD-CWE-noinfo
CVE-2010-3630 2024-11-21 10:19 2010-10-7 Show GitHub Exploit DB Packet Storm
311214 9.3 HIGH
adobe acrobat
acrobat_reader
Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows attackers to execute arbitrary code via a crafted image, a different vulnera… CWE-20
 Improper Input Validation 
CVE-2010-3629 2024-11-21 10:19 2010-10-7 Show GitHub Exploit DB Packet Storm
311215 9.3 HIGH
adobe acrobat
acrobat_reader
Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vecto… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2010-3628 2024-11-21 10:19 2010-10-7 Show GitHub Exploit DB Packet Storm
311216 9.3 HIGH
adobe acrobat
acrobat_reader
Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows attackers to execute arbitrary code via unknown vectors. CWE-20
 Improper Input Validation 
CVE-2010-3627 2024-11-21 10:19 2010-10-7 Show GitHub Exploit DB Packet Storm
311217 9.3 HIGH
adobe acrobat
acrobat_reader
Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows attackers to execute arbitrary code via a crafted font, a different vulnerab… CWE-20
 Improper Input Validation 
CVE-2010-3626 2024-11-21 10:19 2010-10-7 Show GitHub Exploit DB Packet Storm
311218 9.3 HIGH
adobe acrobat
acrobat_reader
Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allow attackers to execute arbitrary code via unspecified vectors, related to a "prefix protocol handler vulnera… CWE-94
Code Injection
CVE-2010-3625 2024-11-21 10:19 2010-10-7 Show GitHub Exploit DB Packet Storm
311219 9.3 HIGH
adobe acrobat
acrobat_reader
Unspecified vulnerability in Adobe Reader and Acrobat 8.x before 8.2.5 and 9.x before 9.4 on Mac OS X allows attackers to execute arbitrary code via a crafted image. CWE-20
 Improper Input Validation 
CVE-2010-3624 2024-11-21 10:19 2010-10-7 Show GitHub Exploit DB Packet Storm
311220 9.3 HIGH
adobe acrobat_reader
acrobat
Adobe Reader and Acrobat 8.x before 8.2.5 and 9.x before 9.4 on Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2010-3623 2024-11-21 10:19 2010-10-7 Show GitHub Exploit DB Packet Storm
311221 9.3 HIGH
adobe acrobat
acrobat_reader
Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vecto… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2010-3622 2024-11-21 10:19 2010-10-7 Show GitHub Exploit DB Packet Storm
311222 9.3 HIGH
adobe acrobat
acrobat_reader
Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vecto… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2010-3621 2024-11-21 10:19 2010-10-7 Show GitHub Exploit DB Packet Storm
311223 9.3 HIGH
adobe acrobat
acrobat_reader
Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows attackers to execute arbitrary code via a crafted image, a different vulnera… CWE-20
 Improper Input Validation 
CVE-2010-3620 2024-11-21 10:19 2010-10-7 Show GitHub Exploit DB Packet Storm
311224 9.3 HIGH
adobe acrobat
acrobat_reader
Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vecto… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2010-3619 2024-11-21 10:19 2010-10-7 Show GitHub Exploit DB Packet Storm
311225 4.3 MEDIUM
mantisbt mantisbt Cross-site scripting (XSS) vulnerability in core/summary_api.php in MantisBT before 1.2.3 allows remote attackers to inject arbitrary web script or HTML via the Summary field, a different vector than… CWE-79
Cross-site Scripting
CVE-2010-3763 2024-11-21 10:19 2010-10-6 Show GitHub Exploit DB Packet Storm
311226 4.3 MEDIUM
isc bind ISC BIND before 9.7.2-P2, when DNSSEC validation is enabled, does not properly handle certain bad signatures if multiple trust anchors exist for a single zone, which allows remote attackers to cause … CWE-20
 Improper Input Validation 
CVE-2010-3762 2024-11-21 10:19 2010-10-6 Show GitHub Exploit DB Packet Storm
311227 10.0 HIGH
ibm tivoli_storage_manager_fastback Unspecified vulnerability in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 allows remote attackers to execute arbitrary code via unknown vectors, aka Z… CWE-94
Code Injection
CVE-2010-3761 2024-11-21 10:19 2010-10-6 Show GitHub Exploit DB Packet Storm
311228 7.8 HIGH
ibm tivoli_storage_manager_fastback FastBackMount.exe in the Mount service in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 does not properly handle a certain failure to allocate memory, … CWE-399
 Resource Management Errors
CVE-2010-3760 2024-11-21 10:19 2010-10-6 Show GitHub Exploit DB Packet Storm
311229 10.0 HIGH
ibm tivoli_storage_manager_fastback FastBackMount.exe in the Mount service in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 writes a certain value to a memory location specified by a UDP … CWE-94
Code Injection
CVE-2010-3759 2024-11-21 10:19 2010-10-6 Show GitHub Exploit DB Packet Storm
311230 10.0 HIGH
ibm tivoli_storage_manager_fastback Multiple stack-based buffer overflows in FastBackServer.exe in the Server in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 allow remote attackers to ex… CWE-94
Code Injection
CVE-2010-3758 2024-11-21 10:19 2010-10-6 Show GitHub Exploit DB Packet Storm
311231 10.0 HIGH
ibm tivoli_storage_manager_fastback Format string vulnerability in the _Eventlog function in FastBackServer.exe in the Server in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 allows remot… CWE-78
OS Command 
CVE-2010-3757 2024-11-21 10:19 2010-10-6 Show GitHub Exploit DB Packet Storm
311232 5.0 MEDIUM
ibm tivoli_storage_manager_fastback The _CalcHashValueWithLength function in FastBackServer.exe in the Server in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 does not properly validate a… CWE-20
 Improper Input Validation 
CVE-2010-3756 2024-11-21 10:19 2010-10-6 Show GitHub Exploit DB Packet Storm
311233 5.0 MEDIUM
ibm tivoli_storage_manager_fastback The _DAS_ReadBlockReply function in FastBackServer.exe in the Server in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 allows remote attackers to cause … CWE-399
 Resource Management Errors
CVE-2010-3755 2024-11-21 10:19 2010-10-6 Show GitHub Exploit DB Packet Storm
311234 10.0 HIGH
ibm tivoli_storage_manager_fastback The FXCLI_OraBR_Exec_Command function in FastBackServer.exe in the Server in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 uses values of packet fields… CWE-78
OS Command 
CVE-2010-3754 2024-11-21 10:19 2010-10-6 Show GitHub Exploit DB Packet Storm
311235 6.5 MEDIUM
xelerance openswan programs/pluto/xauth.c in the client in Openswan 2.6.26 through 2.6.28 allows remote authenticated gateways to execute arbitrary commands via shell metacharacters in the cisco_banner (aka server_bann… CWE-78
OS Command 
CVE-2010-3753 2024-11-21 10:19 2010-10-6 Show GitHub Exploit DB Packet Storm
311236 6.5 MEDIUM
xelerance openswan programs/pluto/xauth.c in the client in Openswan 2.6.25 through 2.6.28 allows remote authenticated gateways to execute arbitrary commands via shell metacharacters in (1) cisco_dns_info or (2) cisco_d… CWE-78
OS Command 
CVE-2010-3752 2024-11-21 10:19 2010-10-6 Show GitHub Exploit DB Packet Storm
311237 7.5 HIGH
dustincowell free_simple_cms Multiple PHP remote file inclusion vulnerabilities in themes/default/index.php in Free Simple CMS 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the (1) meta or (2) phpincdir p… CWE-94
Code Injection
CVE-2010-3742 2024-11-21 10:19 2010-10-6 Show GitHub Exploit DB Packet Storm
311238 4.7 MEDIUM
rim blackberry_desktop_software The offline backup mechanism in Research In Motion (RIM) BlackBerry Desktop Software uses single-iteration PBKDF2, which makes it easier for local users to decrypt a .ipd file via a brute-force attac… CWE-310
Cryptographic Issues
CVE-2010-3741 2024-11-21 10:19 2010-10-6 Show GitHub Exploit DB Packet Storm
311239 4.0 MEDIUM
ibm db2 The Net Search Extender (NSE) implementation in the Text Search component in IBM DB2 UDB 9.5 before FP6a does not properly handle an alphanumeric Fuzzy search, which allows remote authenticated users… CWE-399
 Resource Management Errors
CVE-2010-3740 2024-11-21 10:19 2010-10-6 Show GitHub Exploit DB Packet Storm
311240 6.4 MEDIUM
ibm db2_universal_database The audit facility in the Security component in IBM DB2 UDB 9.5 before FP6a uses instance-level audit settings to capture connection (aka CONNECT and AUTHENTICATION) events in certain circumstances i… CWE-287
Improper Authentication
CVE-2010-3739 2024-11-21 10:19 2010-10-6 Show GitHub Exploit DB Packet Storm
311241 5.0 MEDIUM
ibm db2 The Security component in IBM DB2 UDB 9.5 before FP6a logs AUDIT events by using a USERID and an AUTHID value corresponding to the instance owner, instead of a USERID and an AUTHID value correspondin… CWE-264
Permissions, Privileges, and Access Controls
CVE-2010-3738 2024-11-21 10:19 2010-10-6 Show GitHub Exploit DB Packet Storm
311242 3.5 LOW
ibm db2 Memory leak in the Relational Data Services component in IBM DB2 UDB 9.5 before FP6a allows remote authenticated users to cause a denial of service (heap memory consumption) by executing a (1) user-d… CWE-399
 Resource Management Errors
CVE-2010-3737 2024-11-21 10:19 2010-10-6 Show GitHub Exploit DB Packet Storm
311243 4.0 MEDIUM
ibm db2 Memory leak in the Relational Data Services component in IBM DB2 UDB 9.5 before FP6a, when the connection concentrator is enabled, allows remote authenticated users to cause a denial of service (heap… CWE-399
 Resource Management Errors
CVE-2010-3736 2024-11-21 10:19 2010-10-6 Show GitHub Exploit DB Packet Storm
311244 2.1 LOW
ibm db2 The "Query Compiler, Rewrite, Optimizer" component in IBM DB2 UDB 9.5 before FP6a allows remote authenticated users to cause a denial of service (CPU consumption) via a crafted query involving certai… CWE-399
 Resource Management Errors
CVE-2010-3735 2024-11-21 10:19 2010-10-6 Show GitHub Exploit DB Packet Storm
311245 5.0 MEDIUM
ibm db2 The Install component in IBM DB2 UDB 9.5 before FP6a on Linux, UNIX, and Windows enforces an unintended limit on password length, which makes it easier for attackers to obtain access via a brute-forc… CWE-264
Permissions, Privileges, and Access Controls
CVE-2010-3734 2024-11-21 10:19 2010-10-6 Show GitHub Exploit DB Packet Storm
311246 7.2 HIGH
ibm db2 The Engine Utilities component in IBM DB2 UDB 9.5 before FP6a uses world-writable permissions for the sqllib/cfg/db2sprf file, which might allow local users to gain privileges by modifying this file. CWE-264
Permissions, Privileges, and Access Controls
CVE-2010-3733 2024-11-21 10:19 2010-10-6 Show GitHub Exploit DB Packet Storm
311247 3.5 LOW
ibm db2 The DRDA Services component in IBM DB2 UDB 9.5 before FP6a allows remote authenticated users to cause a denial of service (database server ABEND) by using the client CLI on Linux, UNIX, or Windows fo… CWE-20
 Improper Input Validation 
CVE-2010-3732 2024-11-21 10:19 2010-10-6 Show GitHub Exploit DB Packet Storm
311248 10.0 HIGH
ibm db2 Stack-based buffer overflow in the validateUser implementation in the com.ibm.db2.das.core.DasSysCmd function in db2dasrrm in the DB2 Administration Server (DAS) component in IBM DB2 9.1 before FP10,… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2010-3731 2024-11-21 10:19 2010-10-6 Show GitHub Exploit DB Packet Storm
311249 8.8 HIGH
Network
google chrome Google Chrome before 6.0.472.62 does not properly use information about the origin of a document to manage properties, which allows remote attackers to have an unspecified impact via a crafted web si… NVD-CWE-Other
CVE-2010-3730 2024-11-21 10:19 2010-10-6 Show GitHub Exploit DB Packet Storm
311250 9.8 CRITICAL
Network
google chrome The SPDY protocol implementation in Google Chrome before 6.0.472.62 does not properly manage buffers, which might allow remote attackers to execute arbitrary code via unspecified vectors. CWE-190
 Integer Overflow or Wraparound
CVE-2010-3729 2024-11-21 10:19 2010-10-6 Show GitHub Exploit DB Packet Storm