CVE-2010-2943

HIGH Year: 2010
CVSS v3 Score
8.1
High
CVSS v2 Score
6.4
Medium
Weakness Type
CWE-200
View all →

Vulnerability Description

The xfs implementation in the Linux kernel before 2.6.35 does not look up inode allocation btrees before reading inode buffers, which allows remote authenticated users to read unlinked files, or read or overwrite disk blocks that are currently assigned to an active file but were previously assigned to an unlinked file, by accessing a stale NFS filehandle.

Related Vulnerabilities

CVE-2013-3023

HIGH
CVSS:8.1(High)

IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.1.2 and 7.2.0 through 7.2.1.4 might allow remote attackers to obtain sensitive information about Tomcat credentials by sniffing the networ...

CWE-2002013

CVE-2014-2029

HIGH
CVSS:8.1(High)

The automatic version check functionality in the tools in Percona Toolkit 2.1 allows man-in-the-middle attackers to obtain sensitive information or execute arbitrary code by leveraging use of HTTP to ...

CWE-2002014

CVE-2015-5152

HIGH
CVSS:8.1(High)

Foreman after 1.1 and before 1.9.0-RC1 does not redirect HTTP requests to HTTPS when the require_ssl setting is set to true, which allows remote attackers to obtain user credentials via a man-in-the-m...

CWE-2002015

CVE-2016-1337

HIGH
CVSS:8.1(High)

Cisco EPC3928 devices allow remote attackers to obtain sensitive configuration and credential information by making requests during the early part of the boot process, related to a "Boot Information D...

CWE-2002016

CVE-2016-1559

HIGH
CVSS:8.1(High)

D-Link DAP-1353 H/W vers. B1 3.15 and earlier, D-Link DAP-2553 H/W ver. A1 1.31 and earlier, and D-Link DAP-3520 H/W ver. A1 1.16 and earlier reveal wireless passwords and administrative usernames and...

CWE-2002016

CVE-2016-1651

HIGH
CVSS:8.1(High)

fxcodec/codec/fx_codec_jpx_opj.cpp in PDFium, as used in Google Chrome before 50.0.2661.75, does not properly implement the sycc420_to_rgb and sycc422_to_rgb functions, which allows remote attackers t...

CWE-2002016