# CVEs published 2010-07-07

15 CVEs were published on July 7, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-2244](https://cve.now/CVE-2010-2244.md): The AvahiDnsPacket function in avahi-core/socket.c in avahi-daemon in Avahi 0.6.16 and 0.6.25 allows remote attackers to cause a denial of s (no CVSS)
- [CVE-2010-2445](https://cve.now/CVE-2010-2445.md): freeciv 2.2 before 2.2.1 and 2.3 before 2.3.0 allows attackers to read arbitrary files or execute arbitrary commands via a scenario that con (no CVSS)
- [CVE-2010-2654](https://cve.now/CVE-2010-2654.md): Multiple cross-site scripting (XSS) vulnerabilities on the IBM BladeCenter with Advanced Management Module (AMM) firmware build ID BPET48L, (no CVSS)
- [CVE-2010-2655](https://cve.now/CVE-2010-2655.md): Directory traversal vulnerability in private/file\_management.php on the IBM BladeCenter with Advanced Management Module (AMM) firmware build (no CVSS)
- [CVE-2010-2656](https://cve.now/CVE-2010-2656.md): The IBM BladeCenter with Advanced Management Module (AMM) firmware build ID BPET48L, and possibly other versions before 4.7 and 5.0, stores (no CVSS)
- [CVE-2010-2657](https://cve.now/CVE-2010-2657.md): Opera before 10.60 on Windows and Mac OS X does not properly prevent certain double-click operations from running a program located on a web (no CVSS)
- [CVE-2010-2658](https://cve.now/CVE-2010-2658.md): Opera before 10.60 does not properly restrict certain interaction between plug-ins, file inputs, and the clipboard, which allows user-assist (no CVSS)
- [CVE-2010-2659](https://cve.now/CVE-2010-2659.md): Opera before 10.50 on Windows, before 10.52 on Mac OS X, and before 10.60 on UNIX platforms makes widget properties accessible to third-part (no CVSS)
- [CVE-2010-2660](https://cve.now/CVE-2010-2660.md): Opera before 10.54 on Windows and Mac OS X, and before 10.60 on UNIX platforms, does not properly restrict certain uses of homograph charact (no CVSS)
- [CVE-2010-2661](https://cve.now/CVE-2010-2661.md): Opera before 10.54 on Windows and Mac OS X, and before 10.60 on UNIX platforms, does not properly restrict access to the full pathname of a (no CVSS)
- [CVE-2010-2662](https://cve.now/CVE-2010-2662.md): Opera before 10.60 allows remote attackers to bypass the popup blocker via a javascript: URL and a "fake click." (no CVSS)
- [CVE-2010-2663](https://cve.now/CVE-2010-2663.md): Opera before 10.60 allows remote attackers to cause a denial of service (application hang) via an ended event handler that changes the SRC a (no CVSS)
- [CVE-2010-2664](https://cve.now/CVE-2010-2664.md): Opera before 10.60 allows remote attackers to cause a denial of service (application hang) via certain HTML content that has an unclosed SPA (no CVSS)
- [CVE-2010-2665](https://cve.now/CVE-2010-2665.md): Cross-site scripting (XSS) vulnerability in Opera before 10.54 on Windows and Mac OS X, and before 10.11 on UNIX platforms, allows remote at (no CVSS)
- [CVE-2010-2666](https://cve.now/CVE-2010-2666.md): Opera before 10.54 on Windows and Mac OS X does not properly enforce permission requirements for widget filesystem access and directory sele (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-07-07
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.