# CVEs published 2010-11-16

37 CVEs were published on November 16, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-4008](https://cve.now/CVE-2010-4008.md): libxml2 before 2.7.8, as used in Google Chrome before 7.0.517.44, Apple Safari 5.0.2 and earlier, and other products, reads from invalid… (no CVSS)
- [CVE-2010-4011](https://cve.now/CVE-2010-4011.md): Dovecot in Apple Mac OS X 10.6.5 10H574 does not properly manage memory for user names, which allows remote authenticated users to read… (no CVSS)
- [CVE-2010-4215](https://cve.now/CVE-2010-4215.md): UI/Manage.pm in Foswiki 1.1.0 and 1.1.1 allows remote authenticated users to gain privileges by modifying the GROUP and ALLOWTOPICCHANGE… (no CVSS)
- [CVE-2010-4230](https://cve.now/CVE-2010-4230.md): Stack-based buffer overflow in a certain ActiveX control for the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP… (no CVSS)
- [CVE-2010-4231](https://cve.now/CVE-2010-4231.md): Directory traversal vulnerability in the web-based administration interface on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200… (no CVSS)
- [CVE-2010-4232](https://cve.now/CVE-2010-4232.md): The web-based administration interface on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware… (no CVSS)
- [CVE-2010-4233](https://cve.now/CVE-2010-4233.md): The Linux installation on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008 has a… (no CVSS)
- [CVE-2010-4234](https://cve.now/CVE-2010-4234.md): The web server on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008 allows remote… (no CVSS)
- [CVE-2010-4268](https://cve.now/CVE-2010-4268.md): SQL injection vulnerability in the Pulse Infotech Flip Wall (com\_flipwall) component 1.1 for Joomla! allows remote attackers to execute… (no CVSS)
- [CVE-2010-4269](https://cve.now/CVE-2010-4269.md): SQL injection vulnerability in managechat.php in Collabtive 0.65 allows remote attackers to execute arbitrary SQL commands via the… (no CVSS)
- [CVE-2010-4270](https://cve.now/CVE-2010-4270.md): Directory traversal vulnerability in the nBill (com\_netinvoice) component before 2.0.9 standard edition, 2.0.10 lite edition, and 1.2\_10… (no CVSS)
- [CVE-2010-4271](https://cve.now/CVE-2010-4271.md): SQL injection vulnerability in ImpressCMS before 1.2.3 RC2 allows remote attackers to execute arbitrary SQL commands via unspecified… (no CVSS)
- [CVE-2010-4272](https://cve.now/CVE-2010-4272.md): SQL injection vulnerability in the Pulse Infotech Sponsor Wall (com\_sponsorwall) component 1.1 for Joomla! allows remote attackers to… (no CVSS)
- [CVE-2010-4273](https://cve.now/CVE-2010-4273.md): SQL injection vulnerability in imoveis.php in DescargarVista ACC IMoveis 1.1 allows remote attackers to execute arbitrary SQL commands via… (no CVSS)
- [CVE-2010-4274](https://cve.now/CVE-2010-4274.md): reset\_diragent\_keys in the Common agent in IBM Systems Director 6.2.0 has 754 permissions, which allows local users to gain privileges by… (no CVSS)
- [CVE-2010-4010](https://cve.now/CVE-2010-4010.md): Integer signedness error in Apple Type Services (ATS) in Apple Mac OS X 10.5.8 allows remote attackers to execute arbitrary code via a… (no CVSS)
- [CVE-2010-1843](https://cve.now/CVE-2010-1843.md): Networking in Apple Mac OS X 10.6.2 through 10.6.4 allows remote attackers to cause a denial of service (NULL pointer dereference and… (no CVSS)
- [CVE-2010-1844](https://cve.now/CVE-2010-1844.md): Unspecified vulnerability in Image Capture in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to cause a denial of service… (no CVSS)
- [CVE-2010-1845](https://cve.now/CVE-2010-1845.md): ImageIO in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service… (no CVSS)
- [CVE-2010-1846](https://cve.now/CVE-2010-1846.md): Heap-based buffer overflow in Image RAW in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitrary… (no CVSS)
- [CVE-2010-1847](https://cve.now/CVE-2010-1847.md): The kernel in Apple Mac OS X 10.6.x before 10.6.5 does not properly perform memory management associated with terminal devices, which… (no CVSS)
- [CVE-2010-3783](https://cve.now/CVE-2010-3783.md): Password Server in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 does not properly perform replication, which allows remote authenticated… (no CVSS)
- [CVE-2010-3784](https://cve.now/CVE-2010-3784.md): The PMPageFormatCreateWithDataRepresentation API in Printing in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 does not properly handle… (no CVSS)
- [CVE-2010-3785](https://cve.now/CVE-2010-3785.md): Buffer overflow in QuickLook in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause… (no CVSS)
- [CVE-2010-3786](https://cve.now/CVE-2010-3786.md): QuickLook in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory… (no CVSS)
- [CVE-2010-3787](https://cve.now/CVE-2010-3787.md): Heap-based buffer overflow in QuickTime in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause… (no CVSS)
- [CVE-2010-3788](https://cve.now/CVE-2010-3788.md): QuickTime in Apple Mac OS X 10.6.x before 10.6.5 accesses uninitialized memory locations during processing of JP2 image data, which allows… (no CVSS)
- [CVE-2010-3789](https://cve.now/CVE-2010-3789.md): QuickTime in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory… (no CVSS)
- [CVE-2010-3790](https://cve.now/CVE-2010-3790.md): QuickTime in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory… (no CVSS)
- [CVE-2010-3791](https://cve.now/CVE-2010-3791.md): Buffer overflow in QuickTime in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of… (no CVSS)
- [CVE-2010-3792](https://cve.now/CVE-2010-3792.md): Integer signedness error in QuickTime in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a… (no CVSS)
- [CVE-2010-3793](https://cve.now/CVE-2010-3793.md): QuickTime in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory… (no CVSS)
- [CVE-2010-3794](https://cve.now/CVE-2010-3794.md): QuickTime in Apple Mac OS X 10.6.x before 10.6.5 accesses uninitialized memory locations during processing of FlashPix image data, which… (no CVSS)
- [CVE-2010-3795](https://cve.now/CVE-2010-3795.md): QuickTime in Apple Mac OS X 10.6.x before 10.6.5 accesses uninitialized memory locations during processing of GIF image data, which allows… (no CVSS)
- [CVE-2010-3796](https://cve.now/CVE-2010-3796.md): Safari RSS in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 does not block Java applets in an RSS feed, which allows remote attackers to… (no CVSS)
- [CVE-2010-3797](https://cve.now/CVE-2010-3797.md): Cross-site scripting (XSS) vulnerability in Wiki Server in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote authenticated… (no CVSS)
- [CVE-2010-3798](https://cve.now/CVE-2010-3798.md): Heap-based buffer overflow in xar in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2010-11-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.