Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: July 2010

16 records · 1 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2010-2620
    46Plan

    Open&Compact FTP Server (Open-FTPD) 1.2 and earlier allows remote attackers to bypass authentication by sending (1) LIST, (2) RETR, (3) STOR

    CriticalCVSS 9.3WeaponizedEPSS 29%

    open-ftpd · open-ftpdJul 2, 2010

  • CVE-2010-2621
    23Monitor

    The QSslSocketBackendPrivate::transmit function in src_network_ssl_qsslsocket_openssl.cpp in Qt 4.6.3 and earlier allows remote attackers to

    MediumCVSS 5.0Proof of conceptEPSS 10%

    qt · qtJul 2, 2010

  • CVE-2010-2626
    34Monitor

    index.pl in Miyabi CGI Tools SEO Links 1.02 allows remote attackers to execute arbitrary commands via shell metacharacters in the fn command

    HighCVSS 7.5Proof of conceptEPSS 12%

    miyabi-seo · cgi tools seo linksJul 2, 2010

  • CVE-2010-2682
    34Monitor

    Directory traversal vulnerability in the Realtyna Translator (com_realtyna) component 1.0.15 for Joomla! allows remote attackers to read arb

    HighCVSS 7.5Proof of conceptEPSS 13%

    realtyna · com realtynaJul 12, 2010

  • CVE-2010-2227
    41Plan

    Apache Tomcat 5.5.0 through 5.5.29, 6.0.0 through 6.0.27, and 7.0.0 beta does not properly handle an invalid Transfer-Encoding header, which

    MediumCVSS 6.4WeaponizedEPSS 54%

    apache · tomcatJul 13, 2010

  • CVE-2010-0904
    40Plan

    Unspecified vulnerability in Oracle Secure Backup 10.3.0.1 allows remote attackers to affect integrity via unknown vectors.

    MediumCVSS 5.0WeaponizedEPSS 50%

    oracle · secure backupJul 13, 2010

  • CVE-2010-0266
    52Plan

    Microsoft Office Outlook 2002 SP3, 2003 SP3, and 2007 SP1 and SP2 does not properly verify e-mail attachments with a PR_ATTACH_METHOD proper

    CriticalCVSS 9.3WeaponizedEPSS 50%

    microsoft · outlookJul 15, 2010

  • CVE-2010-0814
    44Plan

    The Microsoft Access Wizard Controls in ACCWIZ.dll in Microsoft Office Access 2003 SP3 and 2007 SP1 and SP2 do not properly interact with th

    CriticalCVSS 9.3No exploitEPSS 22%

    microsoft · accessJul 15, 2010

  • CVE-2010-1881
    43Plan

    The FieldList ActiveX control in the Microsoft Access Wizard Controls in ACCWIZ.dll in Microsoft Office Access 2003 SP3 does not properly in

    CriticalCVSS 9.3No exploitEPSS 20%

    microsoft · accessJul 15, 2010

  • CVE-2010-2568
    88Now

    Windows Shell in Microsoft Windows XP SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 allows local users or r

    HighCVSS 7.8KEVWeaponizedEPSS 91%

    microsoft · windows 7Jul 22, 2010

  • CVE-2010-0211
    48Plan

    The slap_modrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the smr_normalize function, which

    CriticalCVSS 9.8Proof of conceptEPSS 28%

    openldap · openldapJul 28, 2010

  • CVE-2010-2703
    61This week

    Stack-based buffer overflow in the execvp_nc function in the ov.dll module in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53, when

    CriticalCVSS 10.0WeaponizedEPSS 71%

    hp · openview network node managerJul 28, 2010

  • CVE-2010-2704
    44Plan

    Buffer overflow in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via a long HTTP

    CriticalCVSS 10.0No exploitEPSS 14%

    hp · openview network node managerJul 28, 2010

  • CVE-2009-4962
    46Plan

    Stack-based buffer overflow in Fat Player 0.6b allows remote attackers to execute arbitrary code via a long string in a .wav file.

    CriticalCVSS 9.3WeaponizedEPSS 31%

    adammo · fat playerJul 28, 2010

  • CVE-2010-1452
    27Monitor

    The (1) mod_cache and (2) mod_dav modules in the Apache HTTP Server 2.2.x before 2.2.16 allow remote attackers to cause a denial of service

    MediumCVSS 5.0No exploitEPSS 21%

    apache · http serverJul 28, 2010

  • CVE-2010-2918
    34Monitor

    PHP remote file inclusion vulnerability in core/include/myMailer.class.php in the Visites (com_joomla-visites) component 1.1 RC2 for Joomla!

    HighCVSS 7.5Proof of conceptEPSS 13%

    joomla · joomla\!Jul 30, 2010