# CVEs published 2010-06-14

25 CVEs were published on June 14, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-1514](https://cve.now/CVE-2010-1514.md): Unrestricted file upload vulnerability in TomatoCMS 2.0.6 and earlier allows remote authenticated users, with certain privileges, to execute (no CVSS)
- [CVE-2010-1515](https://cve.now/CVE-2010-1515.md): Multiple cross-site scripting (XSS) vulnerabilities in index.php in TomatoCMS 2.0.6 and earlier allow remote attackers to inject arbitrary w (no CVSS)
- [CVE-2010-1937](https://cve.now/CVE-2010-1937.md): Heap-based buffer overflow in httpAdapter.c in httpAdapter in SBLIM SFCB before 1.3.8 might allow remote attackers to execute arbitrary code (no CVSS)
- [CVE-2010-2054](https://cve.now/CVE-2010-2054.md): Integer overflow in httpAdapter.c in httpAdapter in SBLIM SFCB 1.3.4 through 1.3.7, when the configuration sets httpMaxContentLength to a ze (no CVSS)
- [CVE-2010-2267](https://cve.now/CVE-2010-2267.md): Multiple cross-site scripting (XSS) vulnerabilities in Accoria Web Server (aka Rock Web Server) 1.4.7 allow remote attackers to inject arbit (no CVSS)
- [CVE-2010-2268](https://cve.now/CVE-2010-2268.md): Cross-site request forgery (CSRF) vulnerability in authcfg.cgi in Accoria Web Server (aka Rock Web Server) 1.4.7 allows remote attackers to (no CVSS)
- [CVE-2010-2269](https://cve.now/CVE-2010-2269.md): Directory traversal vulnerability in loadstatic.cgi in Accoria Web Server (aka Rock Web Server) 1.4.7 allows remote attackers to read arbitr (no CVSS)
- [CVE-2010-2270](https://cve.now/CVE-2010-2270.md): Accoria Web Server (aka Rock Web Server) 1.4.7 uses a predictable httpmod-sessionid cookie, which makes it easier for remote attackers to hi (no CVSS)
- [CVE-2010-2271](https://cve.now/CVE-2010-2271.md): Format string vulnerability in authcfg.cgi in Accoria Web Server (aka Rock Web Server) 1.4.7 allows remote attackers to have an unspecified (no CVSS)
- [CVE-2010-2272](https://cve.now/CVE-2010-2272.md): Unspecified vulnerability in iframe\_history.html in Dojo 0.4.x before 0.4.4 has unknown impact and remote attack vectors. (no CVSS)
- [CVE-2010-2273](https://cve.now/CVE-2010-2273.md): Multiple cross-site scripting (XSS) vulnerabilities in Dojo 1.0.x before 1.0.3, 1.1.x before 1.1.2, 1.2.x before 1.2.4, 1.3.x before 1.3.3, (no CVSS, dojo)
- [CVE-2010-2274](https://cve.now/CVE-2010-2274.md): Multiple open redirect vulnerabilities in Dojo 1.0.x before 1.0.3, 1.1.x before 1.1.2, 1.2.x before 1.2.4, 1.3.x before 1.3.3, and 1.4.x bef (no CVSS, org.dojotoolkit:dojo)
- [CVE-2010-2275](https://cve.now/CVE-2010-2275.md): Cross-site scripting (XSS) vulnerability in dijit/tests/\_testCommon.js in Dojo Toolkit SDK before 1.4.2 allows remote attackers to inject ar (no CVSS)
- [CVE-2010-2276](https://cve.now/CVE-2010-2276.md): The default configuration of the build process in Dojo 0.4.x before 0.4.4, 1.0.x before 1.0.3, 1.1.x before 1.1.2, 1.2.x before 1.2.4, 1.3.x (no CVSS)
- [CVE-2010-2277](https://cve.now/CVE-2010-2277.md): Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Connections 2.5.x before 2.5.0.2 allow remote attackers to inject arbitrary (no CVSS)
- [CVE-2010-2278](https://cve.now/CVE-2010-2278.md): The bookmarklet pop-up in the Bookmarks component in IBM Lotus Connections 2.5.x before 2.5.0.2 does not properly follow the "force SSL" set (no CVSS)
- [CVE-2010-2279](https://cve.now/CVE-2010-2279.md): The Top Updates implementation in the Homepage component in IBM Lotus Connections 2.5.x before 2.5.0.2, when "forced SSL" is enabled, uses h (no CVSS)
- [CVE-2010-2280](https://cve.now/CVE-2010-2280.md): Open redirect vulnerability in the Mobile component in IBM Lotus Connections 2.5.x before 2.5.0.2 allows remote attackers to redirect users (no CVSS)
- [CVE-2010-2281](https://cve.now/CVE-2010-2281.md): Multiple cross-site scripting (XSS) vulnerabilities in index.php in TomatoCMS 2.0.6 allow remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2010-2282](https://cve.now/CVE-2010-2282.md): Cross-site request forgery (CSRF) vulnerability in TomatoCMS 2.0.6 allows remote attackers to hijack the authentication of administrators fo (no CVSS)
- [CVE-2010-0990](https://cve.now/CVE-2010-0990.md): Stack-based buffer overflow in Creative Software AutoUpdate Engine ActiveX Control 2.0.12.0, as used in Creative Software AutoUpdate 1.40.01 (no CVSS)
- [CVE-2010-1885](https://cve.now/CVE-2010-1885.md): The MPC::HexToNum function in helpctr.exe in Microsoft Windows Help and Support Center in Windows XP and Windows Server 2003 does not proper (no CVSS)
- [CVE-2010-2263](https://cve.now/CVE-2010-2263.md): nginx 0.8 before 0.8.40 and 0.7 before 0.7.66, when running on Windows, allows remote attackers to obtain source code or unparsed content of (no CVSS)
- [CVE-2010-2265](https://cve.now/CVE-2010-2265.md): Cross-site scripting (XSS) vulnerability in the GetServerName function in sysinfo/commonFunc.js in Microsoft Windows Help and Support Center (no CVSS)
- [CVE-2010-2266](https://cve.now/CVE-2010-2266.md): nginx 0.8.36 allows remote attackers to cause a denial of service (crash) via certain encoded directory traversal sequences that trigger mem (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-06-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.