# CVEs published 2010-08-24

20 CVEs were published on August 24, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-1526](https://cve.now/CVE-2010-1526.md): Multiple integer overflows in libgdiplus 2.6.7, as used in Mono, allow attackers to execute arbitrary code via (1) a crafted TIFF file… (no CVSS)
- [CVE-2010-2947](https://cve.now/CVE-2010-2947.md): Heap-based buffer overflow in the HX\_split function in string.c in libHX before 3.6 allows remote attackers to execute arbitrary code or… (no CVSS)
- [CVE-2010-3055](https://cve.now/CVE-2010-3055.md): The configuration setup script (aka scripts/setup.php) in phpMyAdmin 2.11.x before 2.11.10.1 does not properly restrict key names in its… (no CVSS)
- [CVE-2010-3056](https://cve.now/CVE-2010-3056.md): Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 2.11.x before 2.11.10.1 and 3.x before 3.3.5.1 allow remote attackers to… (no CVSS)
- [CVE-2010-3111](https://cve.now/CVE-2010-3111.md): Google Chrome before 6.0.472.53 does not properly mitigate an unspecified flaw in the Windows kernel, which has unknown impact and attack… (no CVSS)
- [CVE-2010-3112](https://cve.now/CVE-2010-3112.md): Google Chrome before 5.0.375.127 does not properly implement file dialogs, which allows attackers to cause a denial of service (memory… (no CVSS)
- [CVE-2010-3113](https://cve.now/CVE-2010-3113.md): Google Chrome before 5.0.375.127, and webkitgtk before 1.2.5, does not properly handle SVG documents, which allows remote attackers to… (no CVSS)
- [CVE-2010-3114](https://cve.now/CVE-2010-3114.md): The text-editing implementation in Google Chrome before 5.0.375.127, and webkitgtk before 1.2.6, does not check a node type before… (no CVSS)
- [CVE-2010-3115](https://cve.now/CVE-2010-3115.md): Google Chrome before 5.0.375.127, and webkitgtk before 1.2.6, does not properly implement the history feature, which might allow remote… (no CVSS)
- [CVE-2010-3116](https://cve.now/CVE-2010-3116.md): Multiple use-after-free vulnerabilities in WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before… (no CVSS)
- [CVE-2010-3117](https://cve.now/CVE-2010-3117.md): Google Chrome before 5.0.375.127 does not properly implement the notifications feature, which allows remote attackers to cause a denial of… (no CVSS)
- [CVE-2010-3118](https://cve.now/CVE-2010-3118.md): The autosuggest feature in the Omnibox implementation in Google Chrome before 5.0.375.127 does not anticipate entry of passwords, which… (no CVSS)
- [CVE-2010-3119](https://cve.now/CVE-2010-3119.md): Google Chrome before 5.0.375.127 and webkitgtk before 1.2.6 do not properly support the Ruby language, which allows attackers to cause a… (no CVSS)
- [CVE-2010-3120](https://cve.now/CVE-2010-3120.md): Google Chrome before 5.0.375.127 does not properly implement the Geolocation feature, which allows remote attackers to cause a denial of… (no CVSS)
- [CVE-2010-0428](https://cve.now/CVE-2010-0428.md): libspice, as used in QEMU-KVM in the Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2 and qspice 0.3.0… (no CVSS)
- [CVE-2010-0429](https://cve.now/CVE-2010-0429.md): libspice, as used in QEMU-KVM in the Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2 and qspice 0.3.0… (no CVSS)
- [CVE-2010-0431](https://cve.now/CVE-2010-0431.md): QEMU-KVM, as used in the Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2 and KVM 83, does not properly… (no CVSS)
- [CVE-2010-0435](https://cve.now/CVE-2010-0435.md): The Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2, and KVM 83, when the Intel VT-x extension is… (no CVSS)
- [CVE-2010-2784](https://cve.now/CVE-2010-2784.md): The subpage MMIO initialization functionality in the subpage\_register function in exec.c in QEMU-KVM, as used in the Hypervisor (aka… (no CVSS)
- [CVE-2010-2811](https://cve.now/CVE-2010-2811.md): Virtual Desktop Server Manager (VDSM) in Red Hat Enterprise Virtualization (RHEV) 2.2 does not properly accept TCP connections for SSL… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2010-08-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.