# CVEs published 2010-07-30

40 CVEs were published on July 30, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-1207](https://cve.now/CVE-2010-1207.md): Mozilla Firefox before 3.6.7 and Thunderbird before 3.1.1 do not properly implement read restrictions for CANVAS elements, which allows remo (no CVSS)
- [CVE-2010-1208](https://cve.now/CVE-2010-1208.md): Use-after-free vulnerability in the attribute-cloning functionality in the DOM implementation in Mozilla Firefox 3.5.x before 3.5.11 and 3.6 (no CVSS)
- [CVE-2010-1209](https://cve.now/CVE-2010-1209.md): Use-after-free vulnerability in the NodeIterator implementation in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey (no CVSS)
- [CVE-2010-1210](https://cve.now/CVE-2010-1210.md): intl/uconv/util/nsUnicodeDecodeHelper.cpp in Mozilla Firefox before 3.6.7 and Thunderbird before 3.1.1 inserts a U+FFFD sequence into text i (no CVSS)
- [CVE-2010-1211](https://cve.now/CVE-2010-1211.md): Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x (no CVSS)
- [CVE-2010-1212](https://cve.now/CVE-2010-1212.md): js/src/jstracer.cpp in the browser engine in Mozilla Firefox 3.6.x before 3.6.7 and Thunderbird 3.1.x before 3.1.1 allows remote attackers t (no CVSS)
- [CVE-2010-1213](https://cve.now/CVE-2010-1213.md): The importScripts Web Worker method in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x (no CVSS)
- [CVE-2010-1214](https://cve.now/CVE-2010-1214.md): Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to execu (no CVSS)
- [CVE-2010-1215](https://cve.now/CVE-2010-1215.md): Mozilla Firefox 3.6.x before 3.6.7 and Thunderbird 3.1.x before 3.1.1 do not properly implement access to a content object through a SafeJSO (no CVSS)
- [CVE-2010-1778](https://cve.now/CVE-2010-1778.md): Cross-site scripting (XSS) vulnerability in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS (no CVSS)
- [CVE-2010-1780](https://cve.now/CVE-2010-1780.md): Use-after-free vulnerability in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X (no CVSS)
- [CVE-2010-1782](https://cve.now/CVE-2010-1782.md): WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6 (no CVSS)
- [CVE-2010-1783](https://cve.now/CVE-2010-1783.md): WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6 (no CVSS)
- [CVE-2010-1784](https://cve.now/CVE-2010-1784.md): The counters functionality in the Cascading Style Sheets (CSS) implementation in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 throug (no CVSS)
- [CVE-2010-1785](https://cve.now/CVE-2010-1785.md): WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6 (no CVSS)
- [CVE-2010-1786](https://cve.now/CVE-2010-1786.md): Use-after-free vulnerability in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X (no CVSS)
- [CVE-2010-1787](https://cve.now/CVE-2010-1787.md): WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6 (no CVSS)
- [CVE-2010-1788](https://cve.now/CVE-2010-1788.md): WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6 (no CVSS)
- [CVE-2010-1789](https://cve.now/CVE-2010-1789.md): Heap-based buffer overflow in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10 (no CVSS)
- [CVE-2010-1790](https://cve.now/CVE-2010-1790.md): WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6 (no CVSS)
- [CVE-2010-1791](https://cve.now/CVE-2010-1791.md): Integer signedness error in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4 (no CVSS)
- [CVE-2010-1792](https://cve.now/CVE-2010-1792.md): WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6 (no CVSS)
- [CVE-2010-1793](https://cve.now/CVE-2010-1793.md): Multiple use-after-free vulnerabilities in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 o (no CVSS)
- [CVE-2010-1796](https://cve.now/CVE-2010-1796.md): The AutoFill feature in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4, allows remot (no CVSS)
- [CVE-2010-2751](https://cve.now/CVE-2010-2751.md): The nsDocShell::OnRedirectStateChange function in docshell/base/nsDocShell.cpp in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7 (no CVSS)
- [CVE-2010-2752](https://cve.now/CVE-2010-2752.md): Integer overflow in an array class in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x b (no CVSS)
- [CVE-2010-2753](https://cve.now/CVE-2010-2753.md): Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and S (no CVSS)
- [CVE-2010-2914](https://cve.now/CVE-2010-2914.md): Cross-site scripting (XSS) vulnerability in nessusd\_www\_server.nbin in the Nessus Web Server plugin 1.2.4 for Nessus allows remote attackers (no CVSS)
- [CVE-2010-2915](https://cve.now/CVE-2010-2915.md): SQL injection vulnerability in welcome.php in AJ Square AJ HYIP PRIME allows remote attackers to execute arbitrary SQL commands via the id p (no CVSS)
- [CVE-2010-2916](https://cve.now/CVE-2010-2916.md): SQL injection vulnerability in news.php in AJ Square AJ HYIP MERIDIAN allows remote attackers to execute arbitrary SQL commands via the id p (no CVSS)
- [CVE-2010-2917](https://cve.now/CVE-2010-2917.md): Multiple cross-site scripting (XSS) vulnerabilities in index.php in AJ Square AJ Article 3.0 allow remote attackers to inject arbitrary web (no CVSS)
- [CVE-2010-2918](https://cve.now/CVE-2010-2918.md): PHP remote file inclusion vulnerability in core/include/myMailer.class.php in the Visites (com\_joomla-visites) component 1.1 RC2 for Joomla! (no CVSS)
- [CVE-2010-2919](https://cve.now/CVE-2010-2919.md): SQL injection vulnerability in the StaticXT (com\_staticxt) component for Joomla! allows remote attackers to execute arbitrary SQL commands v (no CVSS)
- [CVE-2010-2920](https://cve.now/CVE-2010-2920.md): Directory traversal vulnerability in the Foobla Suggestions (com\_foobla\_suggestions) component 1.5.1.2 for Joomla! allows remote attackers t (no CVSS)
- [CVE-2010-2921](https://cve.now/CVE-2010-2921.md): SQL injection vulnerability in the Golf Course Guide (com\_golfcourseguide) component 0.9.6.0 beta and 1 beta for Joomla! allows remote attac (no CVSS)
- [CVE-2010-2922](https://cve.now/CVE-2010-2922.md): SQL injection vulnerability in default.asp in AKY Blog allows remote attackers to execute arbitrary SQL commands via the id parameter. (no CVSS)
- [CVE-2010-2923](https://cve.now/CVE-2010-2923.md): SQL injection vulnerability in the YouTube (com\_youtube) component 1.5 for Joomla! allows remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2010-2924](https://cve.now/CVE-2010-2924.md): SQL injection vulnerability in myLDlinker.php in the myLinksDump Plugin 1.2 for WordPress allows remote attackers to execute arbitrary SQL c (no CVSS)
- [CVE-2010-2925](https://cve.now/CVE-2010-2925.md): SQL injection vulnerability in index.php in Freeway CMS 1.4.3.210 allows remote attackers to execute arbitrary SQL commands via the ecPath p (no CVSS)
- [CVE-2010-2926](https://cve.now/CVE-2010-2926.md): SQL injection vulnerability in index.php in sNews 1.7 allows remote attackers to execute arbitrary SQL commands via the category parameter. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-07-30
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.