Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: August 2010

62 records · 3 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2010-2965
    53Plan

    The WDB target agent debug service in Wind River VxWorks 6.x, 5.x, and earlier, as used on the Rockwell Automation 1756-ENBT series A with f

    CriticalCVSS 9.8No exploitEPSS 47%

    rockwellautomation · 1756-enbt\/a firmwareAug 5, 2010

  • CVE-2010-1871
    90Now

    JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, does not properly sanitize inputs for

    HighCVSS 8.8KEVWeaponizedEPSS 83%

    redhat · jboss enterprise application platformAug 5, 2010

  • CVE-2010-2709
    50Plan

    Stack-based buffer overflow in webappmon.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute a

    CriticalCVSS 9.3WeaponizedEPSS 42%

    hp · openview network node managerAug 5, 2010

  • CVE-2010-2862
    42Plan

    Integer overflow in CoolType.dll in Adobe Reader 8.2.3 and 9.3.3, and Acrobat 9.3.3, allows remote attackers to execute arbitrary code via a

    CriticalCVSS 9.3Proof of conceptEPSS 16%

    adobe · acrobat readerAug 5, 2010

  • CVE-2010-0019
    41Plan

    Microsoft Silverlight 3 before 3.0.50611.0 on Windows, and before 3.0.41130.0 on Mac OS X, does not properly handle pointers, which allows r

    CriticalCVSS 9.3No exploitEPSS 14%

    microsoft · silverlightAug 11, 2010

  • CVE-2010-1258
    22Monitor

    Microsoft Internet Explorer 6, 7, and 8 does not properly determine the origin of script code, which allows remote attackers to execute scri

    MediumCVSS 4.3No exploitEPSS 16%

    microsoft · internet explorerAug 11, 2010

  • CVE-2010-1882
    44Plan

    Multiple buffer overflows in the MPEG Layer-3 Audio Codec for Microsoft DirectShow in l3codecx.ax in Microsoft Windows XP SP2 and SP3 and Se

    CriticalCVSS 9.3No exploitEPSS 23%

    microsoft · windows 2003 serverAug 11, 2010

  • CVE-2010-1892
    50Plan

    The TCP/IP stack in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly handle malfo

    HighCVSS 7.8No exploitEPSS 61%

    microsoft · windows 7Aug 11, 2010

  • CVE-2010-1898
    45Plan

    The Common Language Runtime (CLR) in Microsoft .NET Framework 2.0 SP1, 2.0 SP2, 3.5, 3.5 SP1, and 3.5.1, and Microsoft Silverlight 2 and 3 b

    CriticalCVSS 9.3No exploitEPSS 25%

    microsoft · .net frameworkAug 11, 2010

  • CVE-2010-1900
    49Plan

    Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2; Microsoft Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Offi

    CriticalCVSS 9.3Proof of conceptEPSS 39%

    microsoft · wordAug 11, 2010

  • CVE-2010-1901
    43Plan

    Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2; Microsoft Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Offi

    CriticalCVSS 9.3No exploitEPSS 19%

    microsoft · wordAug 11, 2010

  • CVE-2010-1902
    44Plan

    Buffer overflow in Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2; Microsoft Office 2004 and 2008 for Mac; Open XML File Format Conv

    CriticalCVSS 9.3No exploitEPSS 23%

    microsoft · wordAug 11, 2010

  • CVE-2010-1903
    43Plan

    Microsoft Office Word 2002 SP3 and 2003 SP3, and Office Word Viewer, allows remote attackers to execute arbitrary code or cause a denial of

    CriticalCVSS 9.3No exploitEPSS 19%

    microsoft · wordAug 11, 2010

  • CVE-2010-2550
    63This week

    The SMB Server in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R

    CriticalCVSS 10.0WeaponizedEPSS 75%

    microsoft · windows 2003 serverAug 11, 2010

  • CVE-2010-2551
    51Plan

    The SMB Server in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate an in

    HighCVSS 7.8No exploitEPSS 66%

    microsoft · windows 7Aug 11, 2010

  • CVE-2010-2552
    41Plan

    Stack consumption vulnerability in the SMB Server in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows

    HighCVSS 7.8No exploitEPSS 32%

    microsoft · windows 7Aug 11, 2010

  • CVE-2010-2553
    46Plan

    The Cinepak codec in Microsoft Windows XP SP2 and SP3, Windows Vista SP1 and SP2, and Windows 7 does not properly decompress media files, wh

    CriticalCVSS 9.3Proof of conceptEPSS 30%

    microsoft · windows 7Aug 11, 2010

  • CVE-2010-2556
    45Plan

    Microsoft Internet Explorer 6, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code

    CriticalCVSS 9.3No exploitEPSS 27%

    microsoft · internet explorerAug 11, 2010

  • CVE-2010-2557
    45Plan

    Microsoft Internet Explorer 6 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessi

    CriticalCVSS 9.3No exploitEPSS 27%

    microsoft · internet explorerAug 11, 2010

  • CVE-2010-2558
    43Plan

    Race condition in Microsoft Internet Explorer 6, 7, and 8 allows remote attackers to execute arbitrary code or cause a denial of service (me

    CriticalCVSS 9.3No exploitEPSS 21%

    microsoft · internet explorerAug 11, 2010

  • CVE-2010-2559
    45Plan

    Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessi

    CriticalCVSS 9.3No exploitEPSS 27%

    microsoft · internet explorerAug 11, 2010

  • CVE-2010-2560
    44Plan

    Microsoft Internet Explorer 6, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code

    CriticalCVSS 9.3No exploitEPSS 24%

    microsoft · internet explorerAug 11, 2010

  • CVE-2010-2561
    44Plan

    Microsoft XML Core Services (aka MSXML) 3.0 does not properly handle HTTP responses, which allows remote attackers to execute arbitrary code

    CriticalCVSS 9.3Proof of conceptEPSS 24%

    microsoft · xml core servicesAug 11, 2010

  • CVE-2010-2562
    42Plan

    Microsoft Office Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly parse

    CriticalCVSS 9.3No exploitEPSS 17%

    microsoft · excelAug 11, 2010

  • CVE-2010-2564
    44Plan

    Buffer overflow in Microsoft Windows Movie Maker (WMM) 2.1, 2.6, and 6.0 allows remote attackers to execute arbitrary code or cause a denial

    CriticalCVSS 9.3No exploitEPSS 22%

    microsoft · windows movie makerAug 11, 2010

  • CVE-2010-2566
    42Plan

    The Secure Channel (aka SChannel) security package in Microsoft Windows XP SP2 and SP3, and Windows Server 2003 SP2, does not properly valid

    CriticalCVSS 9.3No exploitEPSS 15%

    microsoft · windows 2003 serverAug 11, 2010

  • CVE-2010-2861
    99Now

    Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow remote attackers to re

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    adobe · coldfusionAug 11, 2010

  • CVE-2010-1797
    46Plan

    Multiple stack-based buffer overflows in the cff_decoder_parse_charstrings function in the CFF Type2 CharStrings interpreter in cff/cffgload

    CriticalCVSS 9.3Proof of conceptEPSS 30%

    apple · iphone osAug 16, 2010

  • CVE-2010-1799
    47Plan

    Stack-based buffer overflow in the error-logging functionality in Apple QuickTime before 7.6.7 on Windows allows remote attackers to execute

    CriticalCVSS 9.3WeaponizedEPSS 33%

    apple · quicktimeAug 16, 2010

  • CVE-2010-1870
    48Plan

    The OGNL extensive expression evaluation capability in XWork in Struts 2.0.0 through 2.1.8.1, as used in Atlassian Fisheye, Crucible, and po

    MediumCVSS 5.0WeaponizedEPSS 92%

    apache · strutsAug 17, 2010

  • CVE-2010-2710
    43Plan

    Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via u

    CriticalCVSS 10.0No exploitEPSS 10%

    hp · openview network node managerAug 20, 2010

  • CVE-2010-1527
    48Plan

    Stack-based buffer overflow in Novell iPrint Client before 5.44 allows remote attackers to execute arbitrary code via a long call-back-url p

    CriticalCVSS 9.3WeaponizedEPSS 35%

    novell · iprintAug 23, 2010

  • CVE-2010-3106
    48Plan

    The ienipp.ocx ActiveX control in the browser plugin in Novell iPrint Client before 5.42 does not properly validate the debug parameter, whi

    CriticalCVSS 9.3WeaponizedEPSS 37%

    novell · iprintAug 23, 2010

  • CVE-2010-3055
    34Monitor

    The configuration setup script (aka scripts/setup.php) in phpMyAdmin 2.11.x before 2.11.10.1 does not properly restrict key names in its out

    HighCVSS 7.5No exploitEPSS 14%

    phpmyadmin · phpmyadminAug 24, 2010

  • CVE-2009-4988
    60This week

    Stack-based buffer overflow in NT_Naming_Service.exe in SAP Business One 2005 A 6.80.123 and 6.80.320 allows remote attackers to execute arb

    CriticalCVSS 10.0WeaponizedEPSS 65%

    sap · business one 2005-aAug 25, 2010

  • CVE-2010-3124
    41Plan

    Untrusted search path vulnerability in bin/winvlc.c in VLC Media Player 1.1.3 and earlier allows local users, and possibly remote attackers,

    CriticalCVSS 9.3Proof of conceptEPSS 12%

    videolan · vlc media playerAug 26, 2010

  • CVE-2010-3127
    41Plan

    Untrusted search path vulnerability in Adobe PhotoShop CS2 through CS5 allows local users, and possibly remote attackers, to execute arbitra

    CriticalCVSS 9.3Proof of conceptEPSS 13%

    adobe · photoshopAug 26, 2010

  • CVE-2010-3131
    44Plan

    Untrusted search path vulnerability in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3

    CriticalCVSS 9.3Proof of conceptEPSS 22%

    mozilla · firefoxAug 26, 2010

  • CVE-2010-3132
    41Plan

    Untrusted search path vulnerability in Adobe Dreamweaver CS5 11.0 build 4916, build 4909, and probably other versions, allows local users, a

    CriticalCVSS 9.3Proof of conceptEPSS 14%

    adobe · dreamweaverAug 26, 2010

  • CVE-2010-2866
    41Plan

    Integer signedness error in the DIRAPI module in Adobe Shockwave Player before 11.5.8.612 allows remote attackers to cause a denial of servi

    CriticalCVSS 9.3Proof of conceptEPSS 13%

    adobe · shockwave playerAug 26, 2010

  • CVE-2010-3138
    45Plan

    Untrusted search path vulnerability in the Indeo Codec in iac25_32.ax in Microsoft Windows XP SP3 allows local users to gain privileges via

    CriticalCVSS 9.3Proof of conceptEPSS 27%

    microsoft · windows media playerAug 27, 2010

  • CVE-2010-3139
    44Plan

    Untrusted search path vulnerability in Microsoft Windows Progman Group Converter (grpconv.exe) allows local users, and possibly remote attac

    CriticalCVSS 9.3Proof of conceptEPSS 23%

    microsoft · windowsAug 27, 2010

  • CVE-2010-3140
    42Plan

    Untrusted search path vulnerability in Microsoft Windows Internet Communication Settings on Windows XP SP3 allows local users, and possibly

    CriticalCVSS 9.3Proof of conceptEPSS 15%

    microsoft · windows xpAug 27, 2010

  • CVE-2010-3141
    42Plan

    Untrusted search path vulnerability in Microsoft PowerPoint 2010 allows local users, and possibly remote attackers, to execute arbitrary cod

    CriticalCVSS 9.3Proof of conceptEPSS 15%

    microsoft · powerpointAug 27, 2010

  • CVE-2010-3142
    42Plan

    Untrusted search path vulnerability in Microsoft Office PowerPoint 2007 allows local users, and possibly remote attackers, to execute arbitr

    CriticalCVSS 9.3Proof of conceptEPSS 16%

    microsoft · powerpointAug 27, 2010

  • CVE-2010-3143
    43Plan

    Untrusted search path vulnerability in Microsoft Windows Contacts allows local users, and possibly remote attackers, to execute arbitrary co

    CriticalCVSS 9.3Proof of conceptEPSS 20%

    microsoft · windowsAug 27, 2010

  • CVE-2010-3144
    41Plan

    Untrusted search path vulnerability in the Internet Connection Signup Wizard in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows

    CriticalCVSS 9.3Proof of conceptEPSS 13%

    microsoft · windows server 2003Aug 27, 2010

  • CVE-2010-3145
    40Plan

    Untrusted search path vulnerability in the BitLocker Drive Encryption API, as used in sdclt.exe in Backup Manager in Microsoft Windows Vista

    CriticalCVSS 9.3Proof of conceptEPSS 10%

    microsoft · windows vistaAug 27, 2010

  • CVE-2010-3146
    41Plan

    Multiple untrusted search path vulnerabilities in Microsoft Groove 2007 SP2 allow local users to gain privileges via a Trojan horse (1) mso.

    CriticalCVSS 9.3Proof of conceptEPSS 13%

    microsoft · grooveAug 27, 2010

  • CVE-2010-3147
    43Plan

    Untrusted search path vulnerability in wab.exe 6.00.2900.5512 in Windows Address Book in Microsoft Windows XP SP2 and SP3, Windows Server 20

    CriticalCVSS 9.3Proof of conceptEPSS 18%

    microsoft · outlook expressAug 27, 2010

  • CVE-2010-3148
    41Plan

    Untrusted search path vulnerability in Microsoft Visio 2003 SP3 allows local users to gain privileges via a Trojan horse mfc71enu.dll file i

    CriticalCVSS 9.3Proof of conceptEPSS 13%

    microsoft · visioAug 27, 2010

  • CVE-2010-3149
    41Plan

    Untrusted search path vulnerability in Adobe Device Central CS5 3.0.0(376), 3.0.1.0 (3027), and probably other versions allows local users,

    CriticalCVSS 9.3Proof of conceptEPSS 13%

    adobe · device central cs5Aug 27, 2010

  • CVE-2010-3150
    42Plan

    Untrusted search path vulnerability in Adobe Premier Pro CS4 4.0.0 (314 (MC: 160820)) allows local users, and possibly remote attackers, to

    CriticalCVSS 9.3Proof of conceptEPSS 15%

    adobe · premier pro cs4Aug 27, 2010

  • CVE-2010-3151
    42Plan

    Untrusted search path vulnerability in Adobe On Location CS4 Build 315 allows local users, and possibly remote attackers, to execute arbitra

    CriticalCVSS 9.3Proof of conceptEPSS 15%

    adobe · onlocation cs4Aug 27, 2010

  • CVE-2010-3152
    42Plan

    Untrusted search path vulnerability in Adobe Illustrator CS4 14.0.0, CS5 15.0.1 and earlier, and possibly other versions allows local users,

    CriticalCVSS 9.3Proof of conceptEPSS 16%

    adobe · illustratorAug 27, 2010

  • CVE-2010-3153
    41Plan

    Untrusted search path vulnerability in Adobe InDesign CS4 6.0, InDesign CS5 7.0.2 and earlier, Adobe InDesign Server CS5 7.0.2 and earlier,

    CriticalCVSS 9.3Proof of conceptEPSS 13%

    adobe · indesign cs4Aug 27, 2010

  • CVE-2010-3154
    40Plan

    Untrusted search path vulnerability in Adobe Extension Manager CS5 5.0.298 allows local users, and possibly remote attackers, to execute arb

    CriticalCVSS 9.3Proof of conceptEPSS 11%

    adobe · extension manager cs5Aug 27, 2010

  • CVE-2010-3155
    41Plan

    Untrusted search path vulnerability in Adobe ExtendScript Toolkit (ESTK) CS5 3.5.0.52 allows local users, and possibly remote attackers, to

    CriticalCVSS 9.3Proof of conceptEPSS 12%

    adobe · extendedscript toolkit cs5Aug 27, 2010

  • CVE-2010-3187
    46Plan

    Buffer overflow in ftpd in IBM AIX 5.3 and earlier allows remote attackers to execute arbitrary code via a long NLST command.

    CriticalCVSS 10.0Proof of conceptEPSS 20%

    ibm · aixAug 30, 2010

  • CVE-2010-3035
    62This week

    Cisco IOS XR 3.4.0 through 3.9.1, when BGP is enabled, does not properly handle unrecognized transitive attributes, which allows remote atta

    HighCVSS 7.5KEVWeaponizedEPSS 5%

    cisco · ios xrAug 30, 2010

  • CVE-2010-1818
    50Plan

    The IPersistPropertyBag2::Read function in QTPlugin.ocx in Apple QuickTime 6.x, 7.x before 7.6.8, and other versions allows remote attackers

    CriticalCVSS 9.3WeaponizedEPSS 42%

    apple · quicktimeAug 31, 2010

  • CVE-2010-3189
    49Plan

    The extSetOwner function in the UfProxyBrowserCtrl ActiveX control (UfPBCtrl.dll) in Trend Micro Internet Security Pro 2010 allows remote at

    CriticalCVSS 9.3WeaponizedEPSS 39%

    trendmicro · internet securityAug 31, 2010