# CVEs published 2010-06-18

30 CVEs were published on June 18, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-2338](https://cve.now/CVE-2010-2338.md): Multiple SQL injection vulnerabilities in redir.asp in VU Web Visitor Analyst allow remote attackers to execute arbitrary SQL commands via t (no CVSS)
- [CVE-2010-2339](https://cve.now/CVE-2010-2339.md): SQL injection vulnerability in admin/pages.php in Subdreamer CMS 3.x.x allows remote attackers to execute arbitrary SQL commands via the cat (no CVSS)
- [CVE-2010-2340](https://cve.now/CVE-2010-2340.md): SQL injection vulnerability in members.php in Arab Portal 2.2, when magic\_quotes\_gpc is disabled, allows remote attackers to execute arbitra (no CVSS)
- [CVE-2010-2341](https://cve.now/CVE-2010-2341.md): PHP remote file inclusion vulnerability in system/application/views/public/commentform.php in EZPX Photoblog 1.2 beta allows remote attacker (no CVSS)
- [CVE-2010-2329](https://cve.now/CVE-2010-2329.md): Buffer overflow in Rosoft Audio Converter 4.4.4 allows remote attackers to execute arbitrary code via a long playlist entry in a .m3u file. (no CVSS)
- [CVE-2010-2330](https://cve.now/CVE-2010-2330.md): Stack-based buffer overflow in iSharer File Sharing Wizard 1.5.0 allows remote attackers to cause a denial of service (crash) and possibly e (no CVSS)
- [CVE-2010-2331](https://cve.now/CVE-2010-2331.md): Stack-based buffer overflow in iSharer File Sharing Wizard 1.5.0 allows remote attackers to execute arbitrary code via a long HEAD request. (no CVSS)
- [CVE-2010-2332](https://cve.now/CVE-2010-2332.md): Impact Financials, Inc. (no CVSS)
- [CVE-2010-2333](https://cve.now/CVE-2010-2333.md): LiteSpeed Technologies LiteSpeed Web Server 4.0.x before 4.0.15 allows remote attackers to read the source code of scripts via an HTTP reque (no CVSS)
- [CVE-2010-2334](https://cve.now/CVE-2010-2334.md): Directory traversal vulnerability in themes/default/download.php in Yamamah Photo Gallery 1.00, as distributed before 20100618, allows remot (no CVSS)
- [CVE-2010-2335](https://cve.now/CVE-2010-2335.md): SQL injection vulnerability in index.php in Yamamah Photo Gallery 1.00, as distributed before 20100618, allows remote attackers to execute a (no CVSS)
- [CVE-2010-2336](https://cve.now/CVE-2010-2336.md): index.php in Yamamah Photo Gallery 1.00 allows remote attackers to obtain the source code of executable files within the web document root v (no CVSS)
- [CVE-2010-0831](https://cve.now/CVE-2010-0831.md): Directory traversal vulnerability in the extract\_jar function in jartool.c in FastJar 0.98 allows remote attackers to create or overwrite ar (no CVSS)
- [CVE-2010-2322](https://cve.now/CVE-2010-2322.md): Absolute path traversal vulnerability in the extract\_jar function in jartool.c in FastJar 0.98 allows remote attackers to create or overwrit (no CVSS)
- [CVE-2010-2323](https://cve.now/CVE-2010-2323.md): IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11 on z/OS might allow attackers to obtain sensitive information by reading the defa (no CVSS)
- [CVE-2010-2324](https://cve.now/CVE-2010-2324.md): IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11 on z/OS allows attackers to perform unspecified "link injection" actions via unkn (no CVSS)
- [CVE-2010-2325](https://cve.now/CVE-2010-2325.md): Cross-site scripting (XSS) vulnerability in the administrative console in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11 on z/OS (no CVSS)
- [CVE-2010-2326](https://cve.now/CVE-2010-2326.md): IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11, when addNode -trace is used during node federation, allows attackers to obtain s (no CVSS)
- [CVE-2010-2327](https://cve.now/CVE-2010-2327.md): mod\_ibm\_ssl in IBM HTTP Server 6.0 before 6.0.2.43, 6.1 before 6.1.0.33, and 7.0 before 7.0.0.11, as used in IBM WebSphere Application Serve (no CVSS)
- [CVE-2010-2328](https://cve.now/CVE-2010-2328.md): The HTTP Channel in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11 allows remote attackers to cause a denial of service (NullPoi (no CVSS)
- [CVE-2009-4901](https://cve.now/CVE-2009-4901.md): The MSGFunctionDemarshall function in winscard\_svc.c in the PC/SC Smart Card daemon (aka PCSCD) in MUSCLE PCSC-Lite before 1.5.4 might allow (no CVSS)
- [CVE-2009-4902](https://cve.now/CVE-2009-4902.md): Buffer overflow in the MSGFunctionDemarshall function in winscard\_svc.c in the PC/SC Smart Card daemon (aka PCSCD) in MUSCLE PCSC-Lite 1.5.4 (no CVSS)
- [CVE-2010-0284](https://cve.now/CVE-2010-0284.md): Directory traversal vulnerability in the getEntry method in the PortalModuleInstallManager component in a servlet in nps.jar in the Administ (no CVSS)
- [CVE-2010-0407](https://cve.now/CVE-2010-0407.md): Multiple buffer overflows in the MSGFunctionDemarshall function in winscard\_svc.c in the PC/SC Smart Card daemon (aka PCSCD) in MUSCLE PCSC- (no CVSS)
- [CVE-2010-1387](https://cve.now/CVE-2010-1387.md): Use-after-free vulnerability in JavaScriptCore in WebKit in Apple iTunes before 9.2 on Windows, and Apple iOS before 4 on the iPhone and iPo (no CVSS)
- [CVE-2010-1763](https://cve.now/CVE-2010-1763.md): Unspecified vulnerability in WebKit in Apple iTunes before 9.2 on Windows has unknown impact and attack vectors, a different vulnerability t (no CVSS)
- [CVE-2010-1769](https://cve.now/CVE-2010-1769.md): WebKit in Apple iTunes before 9.2 on Windows, and Apple iOS before 4 on the iPhone and iPod touch, accesses out-of-bounds memory during the (no CVSS)
- [CVE-2010-2068](https://cve.now/CVE-2010-2068.md): mod\_proxy\_http.c in mod\_proxy\_http in the Apache HTTP Server 2.2.9 through 2.2.15, 2.3.4-alpha, and 2.3.5-alpha on Windows, NetWare, and OS/ (no CVSS)
- [CVE-2010-2192](https://cve.now/CVE-2010-2192.md): The make\_lockdir\_name function in policy.c in pmount 0.9.18 allow local users to overwrite arbitrary files via a symlink attack on a file in (no CVSS)
- [CVE-2010-2321](https://cve.now/CVE-2010-2321.md): Buffer overflow in Adobe InDesign CS3 10.0 allows user-assisted remote attackers to execute arbitrary code via a crafted .indd file. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-06-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.