# CVEs published 2010-06-23

20 CVEs were published on June 23, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-2433](https://cve.now/CVE-2010-2433.md): Multiple cross-site scripting (XSS) vulnerabilities in content/internalError.jsp in IBM WebSphere ILOG JRules 6.7 allow remote attackers to (no CVSS)
- [CVE-2010-0183](https://cve.now/CVE-2010-0183.md): Use-after-free vulnerability in the nsCycleCollector::MarkRoots function in Mozilla Firefox 3.5.x before 3.5.10 and SeaMonkey before 2.0.5 a (no CVSS)
- [CVE-2010-1196](https://cve.now/CVE-2010-1196.md): Integer overflow in the nsGenericDOMDataNode::SetTextInternal function in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunde (no CVSS)
- [CVE-2010-1197](https://cve.now/CVE-2010-1197.md): Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, does not properly handle situations in which both "C (no CVSS)
- [CVE-2010-1198](https://cve.now/CVE-2010-1198.md): Use-after-free vulnerability in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote attack (no CVSS)
- [CVE-2010-1199](https://cve.now/CVE-2010-1199.md): Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3 (no CVSS)
- [CVE-2010-1200](https://cve.now/CVE-2010-1200.md): Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before (no CVSS)
- [CVE-2010-1201](https://cve.now/CVE-2010-1201.md): Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.10, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 (no CVSS)
- [CVE-2010-1202](https://cve.now/CVE-2010-1202.md): Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird bef (no CVSS)
- [CVE-2010-1203](https://cve.now/CVE-2010-1203.md): The JavaScript engine in Mozilla Firefox 3.6.x before 3.6.4 allow remote attackers to cause a denial of service (memory corruption and appli (no CVSS)
- [CVE-2010-1448](https://cve.now/CVE-2010-1448.md): Cross-site scripting (XSS) vulnerability in lib/LXR/Common.pm in LXR Cross Referencer before 0.9.8 allows remote attackers to inject arbitra (no CVSS)
- [CVE-2010-1625](https://cve.now/CVE-2010-1625.md): Cross-site scripting (XSS) vulnerability in LXR Cross Referencer before 0.9.7 allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2010-2065](https://cve.now/CVE-2010-2065.md): Integer overflow in the TIFFroundup macro in LibTIFF before 3.9.3 allows remote attackers to cause a denial of service (application crash) o (no CVSS)
- [CVE-2010-2067](https://cve.now/CVE-2010-2067.md): Stack-based buffer overflow in the TIFFFetchSubjectDistance function in tif\_dirread.c in LibTIFF before 3.9.4 allows remote attackers to cau (no CVSS)
- [CVE-2010-2225](https://cve.now/CVE-2010-2225.md): Use-after-free vulnerability in the SplObjectStorage unserializer in PHP 5.2.x and 5.3.x through 5.3.2 allows remote attackers to execute ar (no CVSS)
- [CVE-2010-2422](https://cve.now/CVE-2010-2422.md): Cross-site scripting (XSS) vulnerability in PortalTransforms in Plone 2.1 through 3.3.4 before hotfix 20100612 allows remote attackers to in (no CVSS, plone)
- [CVE-2010-2425](https://cve.now/CVE-2010-2425.md): Directory traversal vulnerability in TitanFTPd in South River Technologies Titan FTP Server 8.10.1125, and probably earlier versions, allows (no CVSS)
- [CVE-2010-2426](https://cve.now/CVE-2010-2426.md): Directory traversal vulnerability in TitanFTPd in South River Technologies Titan FTP Server 8.10.1125, and probably earlier versions, allows (no CVSS)
- [CVE-2010-2428](https://cve.now/CVE-2010-2428.md): Cross-site scripting (XSS) vulnerability in admin\_loginok.html in the Administrator web interface in Wing FTP Server for Windows 3.5.0 and e (no CVSS)
- [CVE-2010-2429](https://cve.now/CVE-2010-2429.md): Cross-site scripting (XSS) vulnerability in Splunk 4.0 through 4.1.2, when Internet Explorer is used, allows remote attackers to inject arbi (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-06-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.