# CVEs published 2010-07-02

14 CVEs were published on July 2, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2004-2769](https://cve.now/CVE-2004-2769.md): Cerberus FTP Server before 4.0.3.0 allows remote authenticated users to list hidden files, even when the "Display hidden files" option is en (no CVSS)
- [CVE-2010-2619](https://cve.now/CVE-2010-2619.md): Citrix XenServer 5.0 Update 2 and earlier, and 5.5 Update 1 and earlier, when using a pvops kernel, allows guest users to cause a denial of (no CVSS)
- [CVE-2010-2620](https://cve.now/CVE-2010-2620.md): Open&Compact FTP Server (Open-FTPD) 1.2 and earlier allows remote attackers to bypass authentication by sending (1) LIST, (2) RETR, (3) STOR (no CVSS)
- [CVE-2010-2621](https://cve.now/CVE-2010-2621.md): The QSslSocketBackendPrivate::transmit function in src\_network\_ssl\_qsslsocket\_openssl.cpp in Qt 4.6.3 and earlier allows remote attackers to (no CVSS)
- [CVE-2010-2622](https://cve.now/CVE-2010-2622.md): SQL injection vulnerability in the Joomanager component, possibly 1.1.1, for Joomla! allows remote attackers to execute arbitrary SQL comman (no CVSS)
- [CVE-2010-2623](https://cve.now/CVE-2010-2623.md): SQL injection vulnerability in pages.php in Internet DM Specialist Bed and Breakfast allows remote attackers to execute arbitrary SQL comman (no CVSS)
- [CVE-2010-2624](https://cve.now/CVE-2010-2624.md): Multiple SQL injection vulnerabilities in iScripts EasySnaps 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) commen (no CVSS)
- [CVE-2010-2625](https://cve.now/CVE-2010-2625.md): Unspecified vulnerability in the Client Service for DPM in Hitachi ServerConductor / Deployment Manager 01-00, 01-01, and 06-00 through 06-0 (no CVSS)
- [CVE-2010-2626](https://cve.now/CVE-2010-2626.md): index.pl in Miyabi CGI Tools SEO Links 1.02 allows remote attackers to execute arbitrary commands via shell metacharacters in the fn command (no CVSS)
- [CVE-2010-2627](https://cve.now/CVE-2010-2627.md): Multiple directory traversal vulnerabilities in the Refractor 2 engine, as used in Battlefield 2 1.50 (1.5.3153-802.0) and earlier, and Batt (no CVSS)
- [CVE-2009-4924](https://cve.now/CVE-2009-4924.md): Dan Pascu python-cjson 1.0.5 does not properly handle a \['/'\] argument to cjson.encode, which makes it easier for remote attackers to conduc (no CVSS, python-cjson)
- [CVE-2010-1666](https://cve.now/CVE-2010-1666.md): Buffer overflow in Dan Pascu python-cjson 1.0.5, when UCS-4 encoding is enabled, allows context-dependent attackers to cause a denial of ser (no CVSS, python-cjson)
- [CVE-2010-2480](https://cve.now/CVE-2010-2480.md): Mako before 0.3.4 relies on the cgi.escape function in the Python standard library for cross-site scripting (XSS) protection, which makes it (no CVSS, mako)
- [CVE-2010-2549](https://cve.now/CVE-2010-2549.md): Use-after-free vulnerability in the kernel-mode drivers in Microsoft Windows Vista SP1 and SP2 and Server 2008 Gold and SP2 allows local use (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-07-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.