Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: September 2010

21 records · 1 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2010-2883
    83Now

    Stack-based buffer overflow in CoolType.dll in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows

    HighCVSS 7.3KEVWeaponizedEPSS 81%

    adobe · acrobatSep 9, 2010

  • CVE-2010-3007
    40Plan

    Unspecified vulnerability in HP Data Protector Express, and Data Protector Express Single Server Edition (SSE), 3.x before build 56936 and 4

    HighCVSS 7.2WeaponizedEPSS 5%

    hp · data protector expressSep 9, 2010

  • CVE-2010-1807
    55Plan

    WebKit in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2; Android before 2.2; and webkitgtk before 1.2.6; does not properly validate flo

    CriticalCVSS 9.3Proof of conceptEPSS 61%

    apple · safariSep 10, 2010

  • CVE-2010-2884
    42Plan

    Adobe Flash Player 10.1.82.76 and earlier on Windows, Mac OS X, Linux, and Solaris and 10.1.92.10 on Android; authplay.dll in Adobe Reader a

    CriticalCVSS 9.3No exploitEPSS 15%

    adobe · flash playerSep 15, 2010

  • CVE-2010-3069
    33Monitor

    Stack-based buffer overflow in the (1) sid_parse and (2) dom_sid_parse functions in Samba before 3.5.5 allows remote attackers to cause a de

    HighCVSS 7.5No exploitEPSS 10%

    samba · sambaSep 15, 2010

  • CVE-2010-0818
    41Plan

    The MPEG-4 codec in the Windows Media codecs in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server 2008 Gold a

    CriticalCVSS 9.3No exploitEPSS 13%

    microsoft · windows server 2003Sep 15, 2010

  • CVE-2010-0820
    39Monitor

    Heap-based buffer overflow in the Local Security Authority Subsystem Service (LSASS), as used in Active Directory in Microsoft Windows Serve

    HighCVSS 8.8No exploitEPSS 14%

    microsoft · windows 7Sep 15, 2010

  • CVE-2010-1899
    40Plan

    Stack consumption vulnerability in the ASP implementation in Microsoft Internet Information Services (IIS) 5.1, 6.0, 7.0, and 7.5 allows rem

    MediumCVSS 4.3WeaponizedEPSS 57%

    microsoft · internet information serverSep 15, 2010

  • CVE-2010-2563
    42Plan

    The Word 97 text converter in the WordPad Text Converters in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly parse ma

    CriticalCVSS 9.3No exploitEPSS 18%

    microsoft · windows server 2003Sep 15, 2010

  • CVE-2010-2728
    42Plan

    Heap-based buffer overflow in Microsoft Outlook 2002 SP3, 2003 SP3, and 2007 SP2, when Online Mode for an Exchange Server is enabled, allows

    CriticalCVSS 9.3No exploitEPSS 17%

    microsoft · outlookSep 15, 2010

  • CVE-2010-2729
    60This week

    The Print Spooler service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold,

    CriticalCVSS 9.3WeaponizedEPSS 75%

    microsoft · windows 7Sep 15, 2010

  • CVE-2010-2730
    47Plan

    Buffer overflow in Microsoft Internet Information Services (IIS) 7.5, when FastCGI is enabled, allows remote attackers to execute arbitrary

    CriticalCVSS 9.3No exploitEPSS 32%

    microsoft · internet information servicesSep 15, 2010

  • CVE-2010-2731
    40Plan

    Unspecified vulnerability in Microsoft Internet Information Services (IIS) 5.1 on Windows XP SP3, when directory-based Basic Authentication

    MediumCVSS 6.8WeaponizedEPSS 31%

    microsoft · windows xpSep 15, 2010

  • CVE-2010-2738
    43Plan

    The Uniscribe (aka new Unicode Script Processor) implementation in USP10.DLL in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP1

    CriticalCVSS 9.3Proof of conceptEPSS 18%

    microsoft · windows server 2003Sep 15, 2010

  • CVE-2010-3407
    49Plan

    Stack-based buffer overflow in the MailCheck821Address function in nnotes.dll in the nrouter.exe service in the server in IBM Lotus Domino 8

    CriticalCVSS 9.3WeaponizedEPSS 41%

    ibm · lotus dominoSep 16, 2010

  • CVE-2010-3426
    34Monitor

    Directory traversal vulnerability in jphone.php in the JPhone (com_jphone) component 1.0 Alpha 3 for Joomla! allows remote attackers to incl

    HighCVSS 7.5Proof of conceptEPSS 13%

    joomla · joomla\!Sep 16, 2010

  • CVE-2010-3324
    25Monitor

    The toStaticHTML function in Microsoft Internet Explorer 8, and the SafeHTML function in Microsoft Windows SharePoint Services 3.0 SP2, Shar

    MediumCVSS 4.3Proof of conceptEPSS 25%

    microsoft · groove serverSep 17, 2010

  • CVE-2010-3072
    38Monitor

    The string-comparison functions in String.cci in Squid 3.x before 3.1.8 and 3.2.x before 3.2.0.2 allow remote attackers to cause a denial of

    MediumCVSS 5.0No exploitEPSS 59%

    squid-cache · squidSep 20, 2010

  • CVE-2010-3200
    20Monitor

    MSO.dll in Microsoft Word 2003 SP3 11.8326.11.8324 allows remote attackers to cause a denial of service (NULL pointer dereference and multip

    MediumCVSS 4.3No exploitEPSS 10%

    microsoft · wordSep 20, 2010

  • CVE-2010-3332
    45Plan

    Microsoft .NET Framework 1.1 SP1, 2.0 SP1 and SP2, 3.5, 3.5 SP1, 3.5.1, and 4.0, as used for ASP.NET in Microsoft Internet Information Servi

    MediumCVSS 6.4Proof of conceptEPSS 68%

    microsoft · .net frameworkSep 22, 2010

  • CVE-2010-2943
    37Monitor

    The xfs implementation in the Linux kernel before 2.6.35 does not look up inode allocation btrees before reading inode buffers, which allows

    HighCVSS 8.1Proof of conceptEPSS 17%

    linux · linux kernelSep 30, 2010