# CVEs published 2010-07-01

17 CVEs were published on July 1, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-2609](https://cve.now/CVE-2010-2609.md): SQL injection vulnerability in show\_search\_result.php in 2daybiz Job Search Engine Script allows remote attackers to execute arbitrary SQL c (no CVSS)
- [CVE-2010-2610](https://cve.now/CVE-2010-2610.md): Multiple SQL injection vulnerabilities in 2daybiz Job Site Script allow remote attackers to execute arbitrary SQL commands via the (1) jid p (no CVSS)
- [CVE-2010-2611](https://cve.now/CVE-2010-2611.md): SQL injection vulnerability in show\_search\_result.php in i-netsolution Job Search Engine allows remote attackers to execute arbitrary SQL co (no CVSS)
- [CVE-2010-2612](https://cve.now/CVE-2010-2612.md): Unspecified vulnerability in the HP OpenVMS Auditing feature in OpenVMS ALPHA 7.3-2, 8.2, and 8.3; and OpenVMS for Integrity Servers 8.3 AND (no CVSS)
- [CVE-2010-2613](https://cve.now/CVE-2010-2613.md): Cross-site scripting (XSS) vulnerability in the JExtensions JE Awd Song (com\_awd\_song) component for Joomla! allows remote attackers to inje (no CVSS)
- [CVE-2010-2614](https://cve.now/CVE-2010-2614.md): SQL injection vulnerability in admin/admin.php in Grafik CMS 1.1.2, and possibly earlier, allows remote attackers to execute arbitrary SQL c (no CVSS)
- [CVE-2010-2615](https://cve.now/CVE-2010-2615.md): Multiple cross-site scripting (XSS) vulnerabilities in admin/admin.php in Grafik CMS 1.1.2, and possibly earlier, allow remote attackers to (no CVSS)
- [CVE-2010-2616](https://cve.now/CVE-2010-2616.md): SQL injection vulnerability in bible.php in PHP Bible Search, probably 0.99, allows remote attackers to execute arbitrary SQL commands via t (no CVSS)
- [CVE-2010-2617](https://cve.now/CVE-2010-2617.md): Cross-site scripting (XSS) vulnerability in bible.php in PHP Bible Search allows remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2010-2618](https://cve.now/CVE-2010-2618.md): PHP remote file inclusion vulnerability in inc/smarty/libs/init.php in AdaptCMS 2.0.0 Beta, when register\_globals is enabled, allows remote (no CVSS)
- [CVE-2010-1522](https://cve.now/CVE-2010-1522.md): Multiple SQL injection vulnerabilities in the BookLibrary Basic (com\_booklibrary) component 1.5.3 before 1.5.3\_2010\_06\_20 for Joomla! allow (no CVSS)
- [CVE-2010-2233](https://cve.now/CVE-2010-2233.md): tif\_getimage.c in LibTIFF 3.9.0 and 3.9.2 on 64-bit platforms, as used in ImageMagick, does not properly perform vertical flips, which allow (no CVSS)
- [CVE-2010-2594](https://cve.now/CVE-2010-2594.md): Multiple cross-site request forgery (CSRF) vulnerabilities in the web management interface in InterSect Alliance Snare Agent 3.2.3 and earli (no CVSS)
- [CVE-2010-2595](https://cve.now/CVE-2010-2595.md): The TIFFYCbCrtoRGB function in LibTIFF 3.9.0 and 3.9.2, as used in ImageMagick, does not properly handle invalid ReferenceBlackWhite values, (no CVSS)
- [CVE-2010-2596](https://cve.now/CVE-2010-2596.md): The OJPEGPostDecode function in tif\_ojpeg.c in LibTIFF 3.9.0 and 3.9.2, as used in tiff2ps, allows remote attackers to cause a denial of ser (no CVSS)
- [CVE-2010-2597](https://cve.now/CVE-2010-2597.md): The TIFFVStripSize function in tif\_strip.c in LibTIFF 3.9.0 and 3.9.2 makes incorrect calls to the TIFFGetField function, which allows remot (no CVSS)
- [CVE-2010-2598](https://cve.now/CVE-2010-2598.md): LibTIFF in Red Hat Enterprise Linux (RHEL) 3 on x86\_64 platforms, as used in tiff2rgba, attempts to process image data even when the require (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-07-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.