# CVEs published 2010-06-24

13 CVEs were published on June 24, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-0778](https://cve.now/CVE-2010-0778.md): Cross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.33 and 7.0 (no CVSS)
- [CVE-2010-0779](https://cve.now/CVE-2010-0779.md): Cross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.43, 6.1 be (no CVSS)
- [CVE-2010-2223](https://cve.now/CVE-2010-2223.md): Virtual Desktop Server Manager (VDSM) in Red Hat Enterprise Virtualization Hypervisor (aka RHEV-H or rhev-hypervisor) before 5.5-2.2 does no (no CVSS)
- [CVE-2010-2224](https://cve.now/CVE-2010-2224.md): The snapshot merging functionality in Red Hat Enterprise Virtualization Manager (aka RHEV-M) before 2.2 does not properly pass the postzero (no CVSS)
- [CVE-2010-2435](https://cve.now/CVE-2010-2435.md): Weborf HTTP Server 0.12.1 and earlier allows remote attackers to cause a denial of service (crash) via Unicode characters in a Connection HT (no CVSS)
- [CVE-2010-2436](https://cve.now/CVE-2010-2436.md): SQL injection vulnerability in modules/blog/index.php in AneCMS Blog 1.3 and possibly earlier allows remote attackers to execute arbitrary S (no CVSS)
- [CVE-2010-2437](https://cve.now/CVE-2010-2437.md): Cross-site scripting (XSS) vulnerability in class/tools.class.php in AneCMS Blog 1.3 and possibly earlier allows remote attackers to inject (no CVSS)
- [CVE-2010-2438](https://cve.now/CVE-2010-2438.md): SQL injection vulnerability in G.CMS generator allows remote attackers to execute arbitrary SQL commands via the lang parameter to the defau (no CVSS)
- [CVE-2010-2439](https://cve.now/CVE-2010-2439.md): Stack-based buffer overflow in MoreAmp allows remote attackers to execute arbitrary code via a long line in a song list (.maf file). (no CVSS)
- [CVE-2010-2440](https://cve.now/CVE-2010-2440.md): Stack-based buffer overflow in st-wizard.exe in Subtitle Translation Wizard 3.0 allows user-assisted remote attackers to execute arbitrary c (no CVSS)
- [CVE-2010-2441](https://cve.now/CVE-2010-2441.md): WebKit does not properly restrict focus changes, which allows remote attackers to read keystrokes via "cross-domain IFRAME gadgets," a diffe (no CVSS)
- [CVE-2010-2442](https://cve.now/CVE-2010-2442.md): Microsoft Internet Explorer, possibly 8, does not properly restrict focus changes, which allows remote attackers to read keystrokes via "cro (no CVSS)
- [CVE-2010-2443](https://cve.now/CVE-2010-2443.md): The OJPEGReadBufferFill function in tif\_ojpeg.c in LibTIFF before 3.9.3 allows remote attackers to cause a denial of service (NULL pointer d (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-06-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.