Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: June 2010

68 records · 1 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2009-4880
    23Monitor

    Multiple integer overflows in the strfmon implementation in the GNU C Library (aka glibc or libc6) 2.10.1 and earlier allow context-dependen

    MediumCVSS 5.0Proof of conceptEPSS 11%

    gnu · glibcJun 1, 2010

  • CVE-2010-2118
    20Monitor

    Microsoft Internet Explorer 6.0.2900.2180 and 8.0.7600.16385 allows remote attackers to cause a denial of service (resource consumption) via

    MediumCVSS 4.3No exploitEPSS 10%

    microsoft · ieJun 1, 2010

  • CVE-2010-2122
    30Monitor

    Directory traversal vulnerability in the SimpleDownload (com_simpledownload) component before 0.9.6 for Joomla! allows remote attackers to i

    MediumCVSS 6.8Proof of conceptEPSS 11%

    joomla · joomla\!Jun 1, 2010

  • CVE-2010-2128
    35Monitor

    Directory traversal vulnerability in the JE Quotation Form (com_jequoteform) component 1.0b1 for Joomla! allows remote attackers to read arb

    HighCVSS 7.5Proof of conceptEPSS 15%

    joomla · joomla\!Jun 1, 2010

  • CVE-2010-1962
    44Plan

    Unspecified vulnerability in HP StorageWorks Storage Mirroring 5 before 5.2.1.870.0 allows remote attackers to execute arbitrary code via un

    CriticalCVSS 10.0No exploitEPSS 12%

    hp · storageworks storage mirroringJun 7, 2010

  • CVE-2010-2156
    43Plan

    ISC DHCP 4.1 before 4.1.1-P1 and 4.0 before 4.0.2-P1 allows remote attackers to cause a denial of service (server exit) via a zero-length cl

    MediumCVSS 5.0WeaponizedEPSS 76%

    isc · dhcpJun 7, 2010

  • CVE-2010-1850
    31Monitor

    Buffer overflow in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote authenticated users to execute arbitrary code via a COM_FIEL

    MediumCVSS 6.0No exploitEPSS 21%

    mysql · mysqlJun 7, 2010

  • CVE-2010-1297
    86Now

    Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrobat 9.x before 9.3.3,

    HighCVSS 7.8KEVWeaponizedEPSS 82%

    adobe · airJun 8, 2010

  • CVE-2010-0821
    44Plan

    Unspecified vulnerability in Microsoft Office Excel 2002 SP3, 2003 SP3, 2007 SP1 and SP2; Office 2004 for mac; Office 2008 for Mac; Open XML

    CriticalCVSS 9.3No exploitEPSS 24%

    microsoft · excelJun 8, 2010

  • CVE-2010-0822
    58Plan

    Stack-based buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter

    CriticalCVSS 9.3WeaponizedEPSS 70%

    microsoft · excelJun 8, 2010

  • CVE-2010-0823
    43Plan

    Unspecified vulnerability in Microsoft Office Excel 2002 SP3, 2003 SP3, 2007 SP1 and SP2; Office 2004 for mac; Office 2008 for Mac; Open XML

    CriticalCVSS 9.3No exploitEPSS 20%

    microsoft · excelJun 8, 2010

  • CVE-2010-0824
    44Plan

    Unspecified vulnerability in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a

    CriticalCVSS 9.3Proof of conceptEPSS 22%

    microsoft · excelJun 8, 2010

  • CVE-2010-1245
    44Plan

    Unspecified vulnerability in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter f

    CriticalCVSS 9.3Proof of conceptEPSS 22%

    microsoft · excelJun 8, 2010

  • CVE-2010-1246
    44Plan

    Stack-based buffer overflow in Microsoft Office Excel 2002 SP3 allows remote attackers to execute arbitrary code via an Excel file with a ma

    CriticalCVSS 9.3Proof of conceptEPSS 24%

    microsoft · excelJun 8, 2010

  • CVE-2010-1247
    44Plan

    Unspecified vulnerability in Microsoft Office Excel 2002 SP3 allows remote attackers to execute arbitrary code via an Excel file with a malf

    CriticalCVSS 9.3Proof of conceptEPSS 22%

    microsoft · excelJun 8, 2010

  • CVE-2010-1248
    45Plan

    Buffer overflow in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via an Excel fi

    CriticalCVSS 9.3Proof of conceptEPSS 27%

    microsoft · excelJun 8, 2010

  • CVE-2010-1249
    44Plan

    Buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac all

    CriticalCVSS 9.3No exploitEPSS 24%

    microsoft · excelJun 8, 2010

  • CVE-2010-1250
    44Plan

    Heap-based buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter

    CriticalCVSS 9.3No exploitEPSS 23%

    microsoft · excelJun 8, 2010

  • CVE-2010-1251
    43Plan

    Unspecified vulnerability in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a

    CriticalCVSS 9.3No exploitEPSS 21%

    microsoft · excelJun 8, 2010

  • CVE-2010-1252
    43Plan

    Unspecified vulnerability in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a

    CriticalCVSS 9.3No exploitEPSS 21%

    microsoft · excelJun 8, 2010

  • CVE-2010-1253
    45Plan

    Microsoft Office Excel 2002 SP3, 2007 SP1, and SP2; Office 2004 for mac; Office 2008 for Mac; Open XML File Format Converter for Mac; and Of

    CriticalCVSS 9.3No exploitEPSS 25%

    microsoft · excelJun 8, 2010

  • CVE-2010-1256
    42Plan

    Unspecified vulnerability in Microsoft IIS 6.0, 7.0, and 7.5, when Extended Protection for Authentication is enabled, allows remote authenti

    HighCVSS 8.5No exploitEPSS 28%

    microsoft · internet information serverJun 8, 2010

  • CVE-2010-1257
    24Monitor

    Cross-site scripting (XSS) vulnerability in the toStaticHTML API, as used in Microsoft Office InfoPath 2003 SP3, 2007 SP1, and 2007 SP2; Off

    MediumCVSS 4.3No exploitEPSS 22%

    microsoft · office infopathJun 8, 2010

  • CVE-2010-1263
    46Plan

    Windows Shell and WordPad in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold,

    CriticalCVSS 9.3No exploitEPSS 28%

    microsoft · officeJun 8, 2010

  • CVE-2010-1264
    23Monitor

    Unspecified vulnerability in Microsoft Windows SharePoint Services 3.0 SP1 and SP2 allows remote attackers to cause a denial of service (han

    MediumCVSS 4.0No exploitEPSS 23%

    microsoft · sharepoint servicesJun 8, 2010

  • CVE-2010-0811
    45Plan

    Multiple unspecified vulnerabilities in the Microsoft Internet Explorer 8 Developer Tools ActiveX control in Microsoft Windows 2000 SP4, Win

    CriticalCVSS 9.3No exploitEPSS 25%

    microsoft · windows xpJun 8, 2010

  • CVE-2010-1259
    45Plan

    Microsoft Internet Explorer 6 SP1 and SP2, 7, and 8 allows remote attackers to execute arbitrary code by accessing an object that (1) was no

    CriticalCVSS 9.3No exploitEPSS 25%

    microsoft · internet explorerJun 8, 2010

  • CVE-2010-1260
    36Monitor

    The IE8 Developer Toolbar in Microsoft Internet Explorer 8 SP1, SP2, and SP3 allows user-assisted remote attackers to execute arbitrary code

    HighCVSS 7.5No exploitEPSS 19%

    microsoft · internet explorerJun 8, 2010

  • CVE-2010-1261
    44Plan

    The IE8 Developer Toolbar in Microsoft Internet Explorer 8 SP1, SP2, and SP3 allows user-assisted remote attackers to execute arbitrary code

    CriticalCVSS 9.3No exploitEPSS 24%

    microsoft · internet explorerJun 8, 2010

  • CVE-2010-1262
    47Plan

    Microsoft Internet Explorer 6 SP1 and SP2, 7, and 8 allows remote attackers to execute arbitrary code by accessing an object that (1) was no

    CriticalCVSS 9.3No exploitEPSS 33%

    microsoft · internet explorerJun 8, 2010

  • CVE-2010-1879
    43Plan

    Unspecified vulnerability in Quartz.dll for DirectShow; Windows Media Format Runtime 9, 9.5, and 11; Media Encoder 9; and the Asycfilt.dll C

    CriticalCVSS 9.3No exploitEPSS 20%

    microsoft · directxJun 8, 2010

  • CVE-2010-1880
    43Plan

    Unspecified vulnerability in Quartz.dll for DirectShow on Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1, and Server

    CriticalCVSS 9.3No exploitEPSS 21%

    microsoft · directxJun 8, 2010

  • CVE-2010-2259
    35Monitor

    Directory traversal vulnerability in the BF Survey (com_bfsurvey) component for Joomla! allows remote attackers to include and execute arbit

    HighCVSS 7.5Proof of conceptEPSS 18%

    joomla · joomla\!Jun 9, 2010

  • CVE-2010-0395
    40Plan

    OpenOffice.org 2.x and 3.0 before 3.2.1 allows user-assisted remote attackers to bypass Python macro security restrictions and execute arbit

    CriticalCVSS 9.3No exploitEPSS 10%

    canonical · ubuntu linuxJun 9, 2010

  • CVE-2010-1573
    45Plan

    Linksys WAP54Gv3 firmware 3.04.03 and earlier uses a hard-coded username (Gemtek) and password (gemtekswd) for a debug interface for certain

    CriticalCVSS 9.8No exploitEPSS 20%

    linksys · wap54g firmwareJun 9, 2010

  • CVE-2010-1960
    60This week

    Buffer overflow in the error handling functionality in ovwebsnmpsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows re

    CriticalCVSS 10.0WeaponizedEPSS 67%

    hp · openview network node managerJun 9, 2010

  • CVE-2010-1961
    60This week

    Buffer overflow in ovutil.dll in ovwebsnmpsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to exec

    CriticalCVSS 10.0WeaponizedEPSS 67%

    hp · openview network node managerJun 9, 2010

  • CVE-2010-1759
    42Plan

    Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4

    CriticalCVSS 9.3Proof of conceptEPSS 15%

    apple · safariJun 11, 2010

  • CVE-2010-1885
    58Plan

    The MPC::HexToNum function in helpctr.exe in Microsoft Windows Help and Support Center in Windows XP and Windows Server 2003 does not proper

    CriticalCVSS 9.3WeaponizedEPSS 71%

    microsoft · windows 2003 serverJun 15, 2010

  • CVE-2010-2263
    42Plan

    nginx 0.8 before 0.8.40 and 0.7 before 0.7.66, when running on Windows, allows remote attackers to obtain source code or unparsed content of

    MediumCVSS 5.0WeaponizedEPSS 71%

    f5 · nginxJun 15, 2010

  • CVE-2010-2265
    23Monitor

    Cross-site scripting (XSS) vulnerability in the GetServerName function in sysinfo/commonFunc.js in Microsoft Windows Help and Support Center

    MediumCVSS 4.3Proof of conceptEPSS 20%

    microsoft · windows 2003 serverJun 15, 2010

  • CVE-2010-2266
    26Monitor

    nginx 0.8.36 allows remote attackers to cause a denial of service (crash) via certain encoded directory traversal sequences that trigger mem

    MediumCVSS 5.0Proof of conceptEPSS 21%

    f5 · nginxJun 15, 2010

  • CVE-2010-2075
    55Plan

    UnrealIRCd 3.2.8.1, as distributed on certain mirror sites from November 2009 through June 2010, contains an externally introduced modificat

    HighCVSS 7.5WeaponizedEPSS 83%

    unrealircd · unrealircdJun 15, 2010

  • CVE-2010-2171
    39Monitor

    Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of serv

    CriticalCVSS 9.3No exploitEPSS 6%

    adobe · flash playerJun 15, 2010

  • CVE-2010-1932
    40Plan

    Heap-based buffer overflow in XnView 1.97.4 and possibly earlier allows remote attackers to execute arbitrary code via a MultiBitMap (MBM) f

    CriticalCVSS 9.3Proof of conceptEPSS 10%

    xnview · xnviewJun 16, 2010

  • CVE-2010-2305
    43Plan

    Buffer overflow in an ActiveX control in SSHelper.dll for Symantec Sygate Personal Firewall 5.6 build 2808 allows remote attackers to execut

    CriticalCVSS 9.3Proof of conceptEPSS 19%

    symantec · sygate personal firewallJun 16, 2010

  • CVE-2010-2309
    45Plan

    Buffer overflow in the web server for EvoLogical EvoCam 3.6.6 and 3.6.7 allows remote attackers to execute arbitrary code via a long GET req

    HighCVSS 7.5WeaponizedEPSS 50%

    evological · evocamJun 16, 2010

  • CVE-2010-2310
    23Monitor

    SolarWinds TFTP Server 10.4.0.13 allows remote attackers to cause a denial of service (crash) via a long write request.

    MediumCVSS 5.0Proof of conceptEPSS 11%

    solarwinds · tftp serverJun 16, 2010

  • CVE-2010-1411
    31Monitor

    Multiple integer overflows in the Fax3SetupState function in tif_fax3.c in the FAX3 decoder in LibTIFF before 3.9.3, as used in ImageIO in A

    MediumCVSS 6.8Proof of conceptEPSS 12%

    apple · mac os xJun 17, 2010

  • CVE-2010-1964
    50Plan

    Buffer overflow in ovwebsnmpsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary

    HighCVSS 7.5WeaponizedEPSS 66%

    hp · openview network node managerJun 17, 2010

  • CVE-2010-2063
    54Plan

    Buffer overflow in the SMB1 packet chaining implementation in the chain_reply function in process.c in smbd in Samba 3.0.x before 3.3.13 all

    HighCVSS 7.5WeaponizedEPSS 78%

    samba · sambaJun 17, 2010

  • CVE-2010-2068
    25Monitor

    mod_proxy_http.c in mod_proxy_http in the Apache HTTP Server 2.2.9 through 2.2.15, 2.3.4-alpha, and 2.3.5-alpha on Windows, NetWare, and OS/

    MediumCVSS 5.0No exploitEPSS 16%

    apache · http serverJun 18, 2010

  • CVE-2010-2321
    43Plan

    Buffer overflow in Adobe InDesign CS3 10.0 allows user-assisted remote attackers to execute arbitrary code via a crafted .indd file.

    CriticalCVSS 9.3Proof of conceptEPSS 20%

    adobe · indesign cs3Jun 18, 2010

  • CVE-2010-2330
    45Plan

    Stack-based buffer overflow in iSharer File Sharing Wizard 1.5.0 allows remote attackers to cause a denial of service (crash) and possibly e

    CriticalCVSS 9.3Proof of conceptEPSS 27%

    upredsun · isharer file sharing wizardJun 18, 2010

  • CVE-2010-2333
    40Plan

    LiteSpeed Technologies LiteSpeed Web Server 4.0.x before 4.0.15 allows remote attackers to read the source code of scripts via an HTTP reque

    MediumCVSS 5.0WeaponizedEPSS 60%

    litespeedtech · litespeed web serverJun 18, 2010

  • CVE-2010-2343
    48Plan

    Stack-based buffer overflow in D.R.

    CriticalCVSS 9.3WeaponizedEPSS 36%

    dennisre · audio converterJun 21, 2010

  • CVE-2010-1622
    40Plan

    SpringSource Spring Framework 2.5.x before 2.5.6.SEC02, 2.5.7 before 2.5.7.SR01, and 3.0.x before 3.0.3 allows remote attackers to execute a

    MediumCVSS 6.0Proof of conceptEPSS 52%

    springsource · spring frameworkJun 21, 2010

  • CVE-2010-2351
    45Plan

    Stack-based buffer overflow in the CIFS.NLM driver in Netware SMB 1.0 for Novell Netware 6.5 SP8 and earlier allows remote attackers to exec

    CriticalCVSS 10.0Proof of conceptEPSS 15%

    novell · netwareJun 21, 2010

  • CVE-2010-1632
    37Monitor

    Apache Axis2 before 1.5.2, as used in IBM WebSphere Application Server (WAS) 7.0 through 7.0.0.12, IBM Feature Pack for Web Services 6.1.0.9

    HighCVSS 7.5No exploitEPSS 22%

    ibm · websphere application serverJun 22, 2010

  • CVE-2010-2426
    40Plan

    Directory traversal vulnerability in TitanFTPd in South River Technologies Titan FTP Server 8.10.1125, and probably earlier versions, allows

    MediumCVSS 4.0WeaponizedEPSS 12%

    southrivertech · titan ftp serverJun 24, 2010

  • CVE-2010-1199
    40Plan

    Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3

    CriticalCVSS 9.3Proof of conceptEPSS 11%

    mozilla · firefoxJun 24, 2010

  • CVE-2010-2442
    20Monitor

    Microsoft Internet Explorer, possibly 8, does not properly restrict focus changes, which allows remote attackers to read keystrokes via "cro

    MediumCVSS 4.3No exploitEPSS 11%

    microsoft · internet explorerJun 24, 2010

  • CVE-2010-1929
    41Plan

    Multiple stack-based buffer overflows in the jclient._Java_novell_jclient_JClient_defineClass@20 function in jclient.dll in the Tomcat web s

    CriticalCVSS 9.0Proof of conceptEPSS 16%

    novell · imanagerJun 28, 2010

  • CVE-2008-7257
    20Monitor

    CRLF injection vulnerability in +webvpn+/index.html in WebVPN on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software

    MediumCVSS 4.3Proof of conceptEPSS 11%

    cisco · asa 5580Jun 29, 2010

  • CVE-2010-1205
    52Plan

    Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attack

    CriticalCVSS 9.8Proof of conceptEPSS 43%

    libpng · libpngJun 30, 2010

  • CVE-2010-2168
    41Plan

    Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code via a PDF

    CriticalCVSS 9.3Proof of conceptEPSS 14%

    adobe · acrobatJun 30, 2010

  • CVE-2010-2201
    41Plan

    Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code via a PDF

    CriticalCVSS 9.3Proof of conceptEPSS 14%

    adobe · acrobatJun 30, 2010

  • CVE-2010-2204
    41Plan

    Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allows attackers to ca

    CriticalCVSS 9.3Proof of conceptEPSS 13%

    adobe · acrobatJun 30, 2010