CVE-2010-2421

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Multiple unspecified vulnerabilities in Opera before 10.54 have unknown impact and attack vectors related to (1) "extremely severe," (2) "highly severe," (3) "moderately severe," and (4) "less severe" issues.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/40250Vendor Advisory
http://www.opera.com/docs/changelogs/mac/1054/Vendor Advisory
http://www.opera.com/docs/changelogs/windows/1054/Vendor Advisory
http://www.securityfocus.com/bid/40973
http://www.vupen.com/english/advisories/2010/1529Patch, Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11352
http://secunia.com/advisories/40250Vendor Advisory
http://www.opera.com/docs/changelogs/mac/1054/Vendor Advisory
http://www.opera.com/docs/changelogs/windows/1054/Vendor Advisory
http://www.securityfocus.com/bid/40973
http://www.vupen.com/english/advisories/2010/1529Patch, Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11352

Timeline

Published: Jun 22, 2010
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2010

CVE-2010-24224.3Cross-site scripting (XSS) vulnerability in PortalTransforms in Plone 2.1 through 3.3.4 before hotfix 20100612 allows remote attackers to in CVE-2010-24256.5Directory traversal vulnerability in TitanFTPd in South River Technologies Titan FTP Server 8.10.1125, and probably earlier versions, allows CVE-2010-24264.0Directory traversal vulnerability in TitanFTPd in South River Technologies Titan FTP Server 8.10.1125, and probably earlier versions, allows CVE-2010-24274.4VMware Studio 2.0 does not properly write to temporary files, which allows local users to gain privileges via unspecified vectors.CVE-2010-24284.3Cross-site scripting (XSS) vulnerability in admin_loginok.html in the Administrator web interface in Wing FTP Server for Windows 3.5.0 and e CVE-2010-24294.3Cross-site scripting (XSS) vulnerability in Splunk 4.0 through 4.1.2, when Internet Explorer is used, allows remote attackers to inject arbi CVE-2010-24312.6The cupsFileOpen function in CUPS before 1.4.4 allows local users, with lp group membership, to overwrite arbitrary files via a symlink atta CVE-2010-24325.0The cupsDoAuthentication function in auth.c in the client in CUPS before 1.4.4, when HAVE_GSSAPI is omitted, does not properly handle a dema CVE-2010-24334.3Multiple cross-site scripting (XSS) vulnerabilities in content/internalError.jsp in IBM WebSphere ILOG JRules 6.7 allow remote attackers to CVE-2010-24349.3Buffer overflow in Arcext.dll 2.16.1 and earlier in pon software Explzh 5.62 and earlier allows remote attackers to execute arbitrary code v CVE-2010-24355.0Weborf HTTP Server 0.12.1 and earlier allows remote attackers to cause a denial of service (crash) via Unicode characters in a Connection HT CVE-2010-24367.5SQL injection vulnerability in modules/blog/index.php in AneCMS Blog 1.3 and possibly earlier allows remote attackers to execute arbitrary S