# CVEs published 2010-07-08

15 CVEs were published on July 8, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-2668](https://cve.now/CVE-2010-2668.md): Unspecified vulnerability in Adaptive Micro Systems ALPHA Ethernet Adapter II Web-Manager 3.40.2 allows remote attackers to bypass authentic (no CVSS)
- [CVE-2010-2669](https://cve.now/CVE-2010-2669.md): Cross-site scripting (XSS) vulnerability in admin/editors/text/editor-body.php in Orbis CMS 1.0.2 allows remote attackers to inject arbitrar (no CVSS)
- [CVE-2010-2670](https://cve.now/CVE-2010-2670.md): SQL injection vulnerability in recipedetail.php in BrotherScripts Recipe Website allows remote attackers to execute arbitrary SQL commands v (no CVSS)
- [CVE-2010-2671](https://cve.now/CVE-2010-2671.md): Cross-site scripting (XSS) vulnerability in advancedsearch.php in eZ Publish 3.7.0 through 4.2.0 allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2010-2672](https://cve.now/CVE-2010-2672.md): Multiple SQL injection vulnerabilities in eZ Publish 3.7.0 through 4.2.0 allow remote attackers to execute arbitrary SQL commands via the (1 (no CVSS)
- [CVE-2010-2673](https://cve.now/CVE-2010-2673.md): SQL injection vulnerability in profile\_view.php in Devana 1.6.6 and earlier allows remote attackers to execute arbitrary SQL commands via th (no CVSS)
- [CVE-2010-2674](https://cve.now/CVE-2010-2674.md): SQL injection vulnerability in index.php in TSOKA:CMS 1.1, 1.9, and 2.0 allows remote attackers to execute arbitrary SQL commands via the id (no CVSS)
- [CVE-2010-2675](https://cve.now/CVE-2010-2675.md): Cross-site scripting (XSS) vulnerability in index.php in TSOKA:CMS 1.1, 1.9, and 2.0 allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2010-2676](https://cve.now/CVE-2010-2676.md): Multiple directory traversal vulnerabilities in index.php in Open Web Analytics (OWA) 1.2.3 might allow remote attackers to read arbitrary f (no CVSS)
- [CVE-2010-2677](https://cve.now/CVE-2010-2677.md): PHP remote file inclusion vulnerability in mw\_plugin.php in Open Web Analytics (OWA) 1.2.3, when magic\_quotes\_gpc is disabled and register\_g (no CVSS)
- [CVE-2010-2678](https://cve.now/CVE-2010-2678.md): SQL injection vulnerability in xmap (com\_xmap) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemi (no CVSS)
- [CVE-2010-2679](https://cve.now/CVE-2010-2679.md): SQL injection vulnerability in the Weblinks (com\_weblinks) component in Joomla! allows remote attackers to execute arbitrary SQL commands vi (no CVSS)
- [CVE-2010-1574](https://cve.now/CVE-2010-1574.md): IOS 12.2(52)SE and 12.2(52)SE1 on Cisco Industrial Ethernet (IE) 3000 series switches has (1) a community name of public for RO access and ( (no CVSS)
- [CVE-2010-2221](https://cve.now/CVE-2010-2221.md): Multiple buffer overflows in the iSNS implementation in isns.c in (1) Linux SCSI target framework (aka tgt or scsi-target-utils) before 1.0. (no CVSS)
- [CVE-2010-2494](https://cve.now/CVE-2010-2494.md): Multiple buffer underflows in the base64 decoder in base64.c in (1) bogofilter and (2) bogolexer in bogofilter before 1.2.2 allow remote att (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-07-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.