# CVEs published 2010-10-25

16 CVEs were published on October 25, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-3156](https://cve.now/CVE-2010-3156.md): Untrusted search path vulnerability in K2 K2Editor before 1.5.9 allows local users to gain privileges via a Trojan horse executable file… (no CVSS)
- [CVE-2010-3159](https://cve.now/CVE-2010-3159.md): Untrusted search path vulnerability in Explzh 5.67 and earlier allows local users to gain privileges via a Trojan horse executable file in… (no CVSS)
- [CVE-2010-3160](https://cve.now/CVE-2010-3160.md): Untrusted search path vulnerability in Archive Decoder 1.23 and earlier allows local users to gain privileges via a Trojan horse… (no CVSS)
- [CVE-2010-3161](https://cve.now/CVE-2010-3161.md): Untrusted search path vulnerability in TeraPad before 1.00 allows local users to gain privileges via a Trojan horse DLL in the current… (no CVSS)
- [CVE-2010-3162](https://cve.now/CVE-2010-3162.md): Untrusted search path vulnerability in Apsaly before 3.74 allows local users to gain privileges via a Trojan horse executable file in the… (no CVSS)
- [CVE-2010-3163](https://cve.now/CVE-2010-3163.md): Untrusted search path vulnerability in Fenrir Sleipnir before 2.9.5 and Grani before 4.4 allows local users to gain privileges via a… (no CVSS)
- [CVE-2010-3164](https://cve.now/CVE-2010-3164.md): Untrusted search path vulnerability in Fenrir Sleipnir 2.9.4 and earlier and Grani 4.3 and earlier allows local users to gain privileges… (no CVSS)
- [CVE-2010-3165](https://cve.now/CVE-2010-3165.md): Untrusted search path vulnerability in Yokka NoEditor 1.33.1.1 and earlier, OuiEditor 1.6.1.1 and earlier, UnEditor 1.10.1.2 and earlier… (no CVSS)
- [CVE-2010-3710](https://cve.now/CVE-2010-3710.md): Stack consumption vulnerability in the filter\_var function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3, when FILTER\_VALIDATE\_EMAIL… (no CVSS)
- [CVE-2010-3714](https://cve.now/CVE-2010-3714.md): The jumpUrl (aka access tracking) implementation in tslib/class.tslib\_fe.php in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x… (no CVSS, typo3/cms)
- [CVE-2010-3715](https://cve.now/CVE-2010-3715.md): Multiple cross-site scripting (XSS) vulnerabilities in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 allow remote… (no CVSS, typo3/cms-backend)
- [CVE-2010-3716](https://cve.now/CVE-2010-3716.md): The be\_user\_creation task in TYPO3 4.2.x before 4.2.15 and 4.3.x before 4.3.7 allows remote authenticated users to gain privileges via a… (no CVSS)
- [CVE-2010-3717](https://cve.now/CVE-2010-3717.md): The t3lib\_div::validEmail function in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 does not properly restrict… (no CVSS)
- [CVE-2010-4068](https://cve.now/CVE-2010-4068.md): Unspecified vulnerability in the Extension Manager in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 allows remote… (no CVSS)
- [CVE-2010-4069](https://cve.now/CVE-2010-4069.md): Stack-based buffer overflow in IBM Informix Dynamic Server (IDS) 7.x through 7.31, 9.x through 9.40, 10.00 before 10.00.xC10, 11.10 before… (no CVSS)
- [CVE-2010-4070](https://cve.now/CVE-2010-4070.md): Integer overflow in librpc.dll in portmap.exe (aka the ISM Portmapper service) in ISM before 2.20.TC1.117 in IBM Informix Dynamic Server… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2010-10-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.