# CVEs published 2010-07-27 27 CVEs were published on July 27, 2010: 0 critical, 0 high. Days are UTC. - [CVE-2010-0211](https://cve.now/CVE-2010-0211.md): The slap\_modrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the smr\_normalize function, which (no CVSS) - [CVE-2010-0212](https://cve.now/CVE-2010-0212.md): OpenLDAP 2.4.22 allows remote attackers to cause a denial of service (crash) via a modrdn call with a zero-length RDN destination string, wh (no CVSS) - [CVE-2010-0213](https://cve.now/CVE-2010-0213.md): BIND 9.7.1 and 9.7.1-P1, when a recursive validating server has a trust anchor that is configured statically or via DNSSEC Lookaside Validat (no CVSS) - [CVE-2010-0833](https://cve.now/CVE-2010-0833.md): The pam\_lsass library in Likewise Open 5.4 and CIFS 5.4 before build 8046, and 6.0 before build 8234, as used in HP StorageWorks X9000 Netwo (no CVSS) - [CVE-2010-1577](https://cve.now/CVE-2010-1577.md): Directory traversal vulnerability in Cisco Internet Streamer, as used in Cisco Content Delivery System (CDS) 2.2.x, 2.3.x, 2.4.x, and 2.5.x (no CVSS) - [CVE-2010-2337](https://cve.now/CVE-2010-2337.md): Open redirect vulnerability in RSA Federated Identity Manager 4.0 before 4.0.25 and 4.1 before 4.1.26 allows remote attackers to redirect us (no CVSS) - [CVE-2010-2529](https://cve.now/CVE-2010-2529.md): Unspecified vulnerability in ping.c in iputils 20020927, 20070202, 20071127, and 20100214 on Mandriva Linux allows remote attackers to cause (no CVSS) - [CVE-2010-2534](https://cve.now/CVE-2010-2534.md): The NetworkSyncCommandQueue function in network/network\_command.cpp in OpenTTD before 1.0.3 does not properly clear a pointer in a linked li (no CVSS) - [CVE-2010-2703](https://cve.now/CVE-2010-2703.md): Stack-based buffer overflow in the execvp\_nc function in the ov.dll module in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53, when (no CVSS) - [CVE-2010-2704](https://cve.now/CVE-2010-2704.md): Buffer overflow in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via a long HTTP (no CVSS) - [CVE-2009-4958](https://cve.now/CVE-2009-4958.md): SQL injection vulnerability in video.php in EMO Breeder Manager (aka EMO Breader Manager) allows remote attackers to execute arbitrary SQL c (no CVSS) - [CVE-2009-4959](https://cve.now/CVE-2009-4959.md): SQL injection vulnerability in the T3M E-Mail Marketing Tool (t3m) extension 0.2.4 and earlier for TYPO3 allows remote attackers to execute (no CVSS) - [CVE-2009-4960](https://cve.now/CVE-2009-4960.md): Directory traversal vulnerability in modules/backup/download.php in Lanai Core 0.6 allows remote attackers to read arbitrary files via a .. (no CVSS) - [CVE-2009-4961](https://cve.now/CVE-2009-4961.md): Lanai Core 0.6 allows remote attackers to obtain configuration information via a direct request to info.php, which calls the phpinfo functio (no CVSS) - [CVE-2009-4962](https://cve.now/CVE-2009-4962.md): Stack-based buffer overflow in Fat Player 0.6b allows remote attackers to execute arbitrary code via a long string in a .wav file. (no CVSS) - [CVE-2009-4963](https://cve.now/CVE-2009-4963.md): Cross-site scripting (XSS) vulnerability in the Commerce extension before 0.9.9 for TYPO3 allows remote authenticated users to inject arbitr (no CVSS, commerceteam/commerce) - [CVE-2009-4964](https://cve.now/CVE-2009-4964.md): Stack-based buffer overflow in KSP 2006 FINAL allows remote attackers to execute arbitrary code via a long string in a .M3U playlist file. (no CVSS) - [CVE-2009-4965](https://cve.now/CVE-2009-4965.md): SQL injection vulnerability in the AIRware Lexicon (air\_lexicon) extension 0.0.1 for TYPO3 allows remote attackers to execute arbitrary SQL (no CVSS) - [CVE-2009-4966](https://cve.now/CVE-2009-4966.md): SQL injection vulnerability in the AST ZipCodeSearch (ast\_addresszipsearch) extension 0.5.4 for TYPO3 allows remote attackers to execute arb (no CVSS) - [CVE-2009-4967](https://cve.now/CVE-2009-4967.md): SQL injection vulnerability in the Car (car) extension before 0.1.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via (no CVSS) - [CVE-2009-4968](https://cve.now/CVE-2009-4968.md): SQL injection vulnerability in the Event Registration (event\_registr) extension 1.0.0 and earlier for TYPO3 allows remote attackers to execu (no CVSS) - [CVE-2009-4969](https://cve.now/CVE-2009-4969.md): SQL injection vulnerability in the Solidbase Bannermanagement (SBbanner) extension 1.0.1 for TYPO3 allows remote attackers to execute arbitr (no CVSS) - [CVE-2009-4970](https://cve.now/CVE-2009-4970.md): SQL injection vulnerability in the t3m\_affiliate extension 0.5.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via uns (no CVSS) - [CVE-2009-4971](https://cve.now/CVE-2009-4971.md): SQL injection vulnerability in the AJAX Chat (vjchat) extension before 0.3.3 for TYPO3 allows remote attackers to execute arbitrary SQL comm (no CVSS) - [CVE-2009-4972](https://cve.now/CVE-2009-4972.md): Cross-site scripting (XSS) vulnerability in index.php (aka the log in page) in SimpleID before 0.6.5 allows remote attackers to inject arbit (no CVSS) - [CVE-2009-4973](https://cve.now/CVE-2009-4973.md): SQL injection vulnerability in rss.php in TotalCalendar 2.4 allows remote attackers to execute arbitrary SQL commands via the selectedCal pa (no CVSS) - [CVE-2009-4974](https://cve.now/CVE-2009-4974.md): Directory traversal vulnerability in box\_display.php in TotalCalendar 2.4 allows remote attackers to read arbitrary files and possibly have (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2010-07-27 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.