# CVEs published 2010-06-24

13 CVEs were published on June 24, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-0778](https://cve.now/CVE-2010-0778.md): Cross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.33 and… (no CVSS)
- [CVE-2010-0779](https://cve.now/CVE-2010-0779.md): Cross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.43, 6.1… (no CVSS)
- [CVE-2010-2223](https://cve.now/CVE-2010-2223.md): Virtual Desktop Server Manager (VDSM) in Red Hat Enterprise Virtualization Hypervisor (aka RHEV-H or rhev-hypervisor) before 5.5-2.2 does… (no CVSS)
- [CVE-2010-2224](https://cve.now/CVE-2010-2224.md): The snapshot merging functionality in Red Hat Enterprise Virtualization Manager (aka RHEV-M) before 2.2 does not properly pass the… (no CVSS)
- [CVE-2010-2435](https://cve.now/CVE-2010-2435.md): Weborf HTTP Server 0.12.1 and earlier allows remote attackers to cause a denial of service (crash) via Unicode characters in a Connection… (no CVSS)
- [CVE-2010-2436](https://cve.now/CVE-2010-2436.md): SQL injection vulnerability in modules/blog/index.php in AneCMS Blog 1.3 and possibly earlier allows remote attackers to execute arbitrary… (no CVSS)
- [CVE-2010-2437](https://cve.now/CVE-2010-2437.md): Cross-site scripting (XSS) vulnerability in class/tools.class.php in AneCMS Blog 1.3 and possibly earlier allows remote attackers to… (no CVSS)
- [CVE-2010-2438](https://cve.now/CVE-2010-2438.md): SQL injection vulnerability in G.CMS generator allows remote attackers to execute arbitrary SQL commands via the lang parameter to the… (no CVSS)
- [CVE-2010-2439](https://cve.now/CVE-2010-2439.md): Stack-based buffer overflow in MoreAmp allows remote attackers to execute arbitrary code via a long line in a song list (.maf file). (no CVSS)
- [CVE-2010-2440](https://cve.now/CVE-2010-2440.md): Stack-based buffer overflow in st-wizard.exe in Subtitle Translation Wizard 3.0 allows user-assisted remote attackers to execute arbitrary… (no CVSS)
- [CVE-2010-2441](https://cve.now/CVE-2010-2441.md): WebKit does not properly restrict focus changes, which allows remote attackers to read keystrokes via "cross-domain IFRAME gadgets," a… (no CVSS)
- [CVE-2010-2442](https://cve.now/CVE-2010-2442.md): Microsoft Internet Explorer, possibly 8, does not properly restrict focus changes, which allows remote attackers to read keystrokes via… (no CVSS)
- [CVE-2010-2443](https://cve.now/CVE-2010-2443.md): The OJPEGReadBufferFill function in tif\_ojpeg.c in LibTIFF before 3.9.3 allows remote attackers to cause a denial of service (NULL pointer… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2010-06-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.