CVE-2010-2446

CriticalCVSS 9.8/10Last modified Jun 16, 2026

Description

Rbot Reaction plugin allows command execution

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published
Nov 6, 2019
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2010

CVE-2010-24479.8gitolite before 1.4.1 does not filter src/ or hooks/ from path names.CVE-2010-24483.5znc.cpp in ZNC before 0.092 allows remote authenticated users to cause a denial of service (crash) by requesting traffic statistics when theCVE-2010-24496.5Gource through 0.26 logs to a predictable file name (/tmp/gource-$UID.tmp), enabling attackers to overwrite an arbitrary file via a symlink CVE-2010-24507.5The keygen.sh script in Shibboleth SP 2.0 (located in /usr/local/etc/shibboleth by default) uses OpenSSL to create a DES private key which iCVE-2010-245110.0Multiple format string vulnerabilities in the DCC functionality in KVIrc 3.4 and 4.0 have unspecified impact and remote attack vectors.CVE-2010-24529.3Directory traversal vulnerability in the DCC functionality in KVIrc 3.4 and 4.0 allows remote attackers to overwrite arbitrary files via unkCVE-2010-24534.3Multiple cross-site scripting (XSS) vulnerabilities in Synology Disk Station 2.x before DSM3.0-1337 allow remote attackers to inject arbitraCVE-2010-24544.3Apple Safari does not properly manage the address bar between the request to open a URL and the retrieval of the new document's content, whiCVE-2010-24554.3Opera does not properly manage the address bar between the request to open a URL and the retrieval of the new document's content, which mighCVE-2010-24566.8Multiple directory traversal vulnerabilities in index.php in Linker IMG 1.0 and earlier allow remote attackers to read and execute arbitraryCVE-2010-24574.3Cross-site scripting (XSS) vulnerability in index.php in K-Search allows remote attackers to inject arbitrary web script or HTML via the terCVE-2010-24584.3Cross-site scripting (XSS) vulnerability in video.php in 2daybiz Video Community Portal Script 1.0 allows remote attackers to inject arbitra
CVE-2010-2446: Critical severity, CVSS 9.8 | Vulnix