# CVEs published 2010-08-02

18 CVEs were published on August 2, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-2539](https://cve.now/CVE-2010-2539.md): Buffer overflow in the msTmpFile function in maputil.c in mapserv in MapServer before 4.10.6 and 5.x before 5.6.4 allows local users to caus (no CVSS)
- [CVE-2010-2540](https://cve.now/CVE-2010-2540.md): mapserv.c in mapserv in MapServer before 4.10.6 and 5.x before 5.6.4 does not properly restrict the use of CGI command-line arguments that w (no CVSS)
- [CVE-2010-2633](https://cve.now/CVE-2010-2633.md): Unspecified vulnerability in EMC Disk Library (EDL) before 3.2.7, 3.3.x before 3.3.2 epatch 8, and 4.0.x before 4.0.1 epatch 4 allows remote (no CVSS)
- [CVE-2010-2786](https://cve.now/CVE-2010-2786.md): Directory traversal vulnerability in Piwik 0.6 through 0.6.3 allows remote attackers to include arbitrary local files and possibly have unsp (no CVSS)
- [CVE-2009-4975](https://cve.now/CVE-2009-4975.md): Cross-site scripting (XSS) vulnerability in webview.cpp in QtDemoBrowser allows remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2009-4976](https://cve.now/CVE-2009-4976.md): Cross-site scripting (XSS) vulnerability in webkitpart.cpp in kwebkitpart allows remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2010-1671](https://cve.now/CVE-2010-1671.md): hsolinkcontrol in hsolink 1.0.118 allows local users to gain privileges via shell metacharacters in command-line arguments, as demonstrated (no CVSS)
- [CVE-2010-2536](https://cve.now/CVE-2010-2536.md): Multiple cross-site scripting (XSS) vulnerabilities in rekonq 0.5 and earlier allow remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2010-2929](https://cve.now/CVE-2010-2929.md): Untrusted search path vulnerability in hsolinkcontrol in hsolink 1.0.118 allows local users to gain privileges via a modified PATH environme (no CVSS)
- [CVE-2010-2930](https://cve.now/CVE-2010-2930.md): Multiple stack-based buffer overflows in hsolinkcontrol in hsolink 1.0.118 allow local users to gain privileges via long command-line argume (no CVSS)
- [CVE-2009-4896](https://cve.now/CVE-2009-4896.md): Multiple directory traversal vulnerabilities in the mlmmj-php-admin web interface for Mailing List Managing Made Joyful (mlmmj) 1.2.15 throu (no CVSS)
- [CVE-2010-1517](https://cve.now/CVE-2010-1517.md): The GIGABYTE Dldrv2 ActiveX control 1.4.206.11 allows remote attackers to (1) download arbitrary programs onto a client system, and execute (no CVSS)
- [CVE-2010-1518](https://cve.now/CVE-2010-1518.md): Array index error in the SetDLInfo method in the GIGABYTE Dldrv2 ActiveX control 1.4.206.11 allows remote attackers to execute arbitrary cod (no CVSS)
- [CVE-2010-1794](https://cve.now/CVE-2010-1794.md): The webdav\_mount function in webdav\_vfsops.c in the WebDAV kernel extension (aka webdav\_fs.kext) for Mac OS X 10.6 allows local users to cau (no CVSS)
- [CVE-2010-2195](https://cve.now/CVE-2010-2195.md): bozotic HTTP server (aka bozohttpd) 20090522 through 20100512 allows attackers to cause a denial of service via vectors related to a "wrong (no CVSS)
- [CVE-2010-2320](https://cve.now/CVE-2010-2320.md): bozotic HTTP server (aka bozohttpd) before 20100621 allows remote attackers to list the contents of home directories, and determine the exis (no CVSS)
- [CVE-2010-2785](https://cve.now/CVE-2010-2785.md): The IRC Protocol component in KVIrc 3.x and 4.x before r4693 does not properly handle \\ (backslash) characters, which allows remote authenti (no CVSS)
- [CVE-2010-2927](https://cve.now/CVE-2010-2927.md): The slapi\_printmessage function in IBM Tivoli Directory Server (ITDS) before 6.0.0.8-TIV-ITDS-IF0006 allows remote attackers to cause a deni (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-08-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.