# CVEs published 2010-06-16

14 CVEs were published on June 16, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-1932](https://cve.now/CVE-2010-1932.md): Heap-based buffer overflow in XnView 1.97.4 and possibly earlier allows remote attackers to execute arbitrary code via a MultiBitMap (MBM) f (no CVSS)
- [CVE-2010-2070](https://cve.now/CVE-2010-2070.md): arch/ia64/xen/faults.c in Xen 3.4 and 4.0 in Linux kernel 2.6.18, and possibly other kernel versions, when running on IA-64 architectures, a (no CVSS)
- [CVE-2010-2071](https://cve.now/CVE-2010-2071.md): The btrfs\_xattr\_set\_acl function in fs/btrfs/acl.c in btrfs in the Linux kernel 2.6.34 and earlier does not check file ownership before sett (no CVSS)
- [CVE-2010-2072](https://cve.now/CVE-2010-2072.md): Pyftpd 0.8.4 creates log files with predictable names in a temporary directory, which allows local users to cause a denial of service and ob (no CVSS)
- [CVE-2010-2073](https://cve.now/CVE-2010-2073.md): auth\_db\_config.py in Pyftpd 0.8.4 contains hard-coded usernames and passwords for the (1) test, (2) user, and (3) roxon accounts, which allo (no CVSS)
- [CVE-2010-2074](https://cve.now/CVE-2010-2074.md): istream.c in w3m 0.5.2 and possibly other versions, when ssl\_verify\_server is enabled, does not properly handle a '\\0' character in a domain (no CVSS)
- [CVE-2010-2305](https://cve.now/CVE-2010-2305.md): Buffer overflow in an ActiveX control in SSHelper.dll for Symantec Sygate Personal Firewall 5.6 build 2808 allows remote attackers to execut (no CVSS)
- [CVE-2010-2306](https://cve.now/CVE-2010-2306.md): The default installation of Sourcefire 3D Sensor 1000, 2000, and 9900; and Defense Center 1000; uses the same static, private SSL keys for m (no CVSS)
- [CVE-2010-2307](https://cve.now/CVE-2010-2307.md): Multiple directory traversal vulnerabilities in the web server for Motorola SURFBoard cable modem SBV6120E running firmware SBV6X2X-1.0.0.5- (no CVSS)
- [CVE-2010-2308](https://cve.now/CVE-2010-2308.md): Unspecified vulnerability in the filter driver (savonaccessfilter.sys) in Sophos Anti-Virus before 7.6.20 allows local users to gain privile (no CVSS)
- [CVE-2010-2309](https://cve.now/CVE-2010-2309.md): Buffer overflow in the web server for EvoLogical EvoCam 3.6.6 and 3.6.7 allows remote attackers to execute arbitrary code via a long GET req (no CVSS)
- [CVE-2010-2310](https://cve.now/CVE-2010-2310.md): SolarWinds TFTP Server 10.4.0.13 allows remote attackers to cause a denial of service (crash) via a long write request. (no CVSS)
- [CVE-2010-2311](https://cve.now/CVE-2010-2311.md): Stack-based buffer overflow in Power Tab Editor 1.7 build 80 allows user-assisted remote attackers to execute arbitrary code via a .ptb file (no CVSS)
- [CVE-2010-2312](https://cve.now/CVE-2010-2312.md): SQL injection vulnerability in index.php in HauntmAx Haunted House Directory Listing CMS allows remote attackers to execute arbitrary SQL co (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-06-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.