# CVEs published 2010-12-08

14 CVEs were published on December 8, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-3699](https://cve.now/CVE-2010-3699.md): The backend driver in Xen 3.x allows guest OS users to cause a denial of service via a kernel thread leak, which prevents the device and… (no CVSS)
- [CVE-2010-3860](https://cve.now/CVE-2010-3860.md): IcedTea 1.7.x before 1.7.6, 1.8.x before 1.8.3, and 1.9.x before 1.9.2, as based on OpenJDK 6, declares multiple sensitive variables as… (no CVSS)
- [CVE-2010-3920](https://cve.now/CVE-2010-3920.md): The Seiko Epson printer driver installers for LP-S9000 before 4.1.11 and LP-S7100 before 4.1.7, or as downloaded from the vendor between… (no CVSS)
- [CVE-2010-4012](https://cve.now/CVE-2010-4012.md): Race condition in Apple iOS 4.0 through 4.1 for iPhone 3G and later allows physically proximate attackers to bypass the passcode lock by… (no CVSS)
- [CVE-2010-4502](https://cve.now/CVE-2010-4502.md): Integer overflow in KmxSbx.sys 6.2.0.22 in CA Internet Security Suite Plus 2010 allows local users to cause a denial of service (pool… (no CVSS)
- [CVE-2010-4503](https://cve.now/CVE-2010-4503.md): SQL injection vulnerability in indexlight.php in Aigaion 1.3.4 allows remote attackers to execute arbitrary SQL commands via the ID… (no CVSS)
- [CVE-2010-4504](https://cve.now/CVE-2010-4504.md): Multiple cross-site scripting (XSS) vulnerabilities in eSyndiCat Directory 2.3 allow remote attackers to inject arbitrary web script or… (no CVSS)
- [CVE-2010-4505](https://cve.now/CVE-2010-4505.md): Multiple SQL injection vulnerabilities in login.php in Injader 2.4.4, when magic\_quotes\_gpc is disabled, allow remote attackers to execute… (no CVSS)
- [CVE-2010-2793](https://cve.now/CVE-2010-2793.md): Race condition in the SPICE (aka spice-activex) plug-in for Internet Explorer in Red Hat Enterprise Virtualization (RHEV) Manager before… (no CVSS)
- [CVE-2010-3372](https://cve.now/CVE-2010-3372.md): Untrusted search path vulnerability in NorduGrid Advanced Resource Connector (ARC) before 0.8.3 allows local users to gain privileges via… (no CVSS)
- [CVE-2010-4108](https://cve.now/CVE-2010-4108.md): HP HP-UX B.11.11, B.11.23, and B.11.31 does not properly support threaded processes, which allows remote authenticated users to cause a… (no CVSS)
- [CVE-2010-4109](https://cve.now/CVE-2010-4109.md): Cross-site scripting (XSS) vulnerability in the Contacts Application in HP Palm webOS before 2.0 allows remote attackers to inject… (no CVSS)
- [CVE-2010-4500](https://cve.now/CVE-2010-4500.md): Multiple SQL injection vulnerabilities in contact.php in MRCGIGUY (MCG) FreeTicket 1.0.0, when magic\_quotes\_gpc is disabled, allow remote… (no CVSS)
- [CVE-2010-4480](https://cve.now/CVE-2010-4480.md): error.php in PhpMyAdmin 3.3.8.1, and other versions before 3.4.0-beta1, allows remote attackers to conduct cross-site scripting (XSS)… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2010-12-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.