# CVEs published 2010-08-04

17 CVEs were published on August 4, 2010: 1 critical, 1 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2010-2487](https://cve.now/CVE-2010-2487.md): Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.7.3 and earlier, 1.8.x before 1.8.8, and 1.9.x before 1.9.3 allow remote a (no CVSS, moin)
- [CVE-2010-2526](https://cve.now/CVE-2010-2526.md): The cluster logical volume manager daemon (clvmd) in lvm2-cluster in LVM2 before 2.02.72, as used in Red Hat Global File System (GFS) and ot (no CVSS)
- [CVE-2010-2546](https://cve.now/CVE-2010-2546.md): Multiple heap-based buffer overflows in loaders/load\_it.c in libmikmod, possibly 3.1.12, might allow remote attackers to execute arbitrary c (no CVSS)
- [CVE-2010-2860](https://cve.now/CVE-2010-2860.md): The EMC Celerra Network Attached Storage (NAS) appliance accepts external network traffic to IP addresses intended for an intranet network w (no CVSS)
- [CVE-2010-2965](https://cve.now/CVE-2010-2965.md): The WDB target agent debug service in Wind River VxWorks 6.x, 5.x, and earlier, as used on the Rockwell Automation 1756-ENBT series A with f (CVSS 9.8)
- [CVE-2010-2966](https://cve.now/CVE-2010-2966.md): The INCLUDE\_SECURITY functionality in Wind River VxWorks 6.x, 5.x, and earlier uses the LOGIN\_USER\_NAME and LOGIN\_USER\_PASSWORD (aka LOGIN\_P (no CVSS)
- [CVE-2010-2967](https://cve.now/CVE-2010-2967.md): The loginDefaultEncrypt algorithm in loginLib in Wind River VxWorks before 6.9 does not properly support a large set of distinct possible pa (no CVSS)
- [CVE-2010-2968](https://cve.now/CVE-2010-2968.md): The FTP daemon in Wind River VxWorks does not close the TCP connection after a number of failed login attempts, which makes it easier for re (no CVSS)
- [CVE-2010-2969](https://cve.now/CVE-2010-2969.md): Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.7.3 and earlier, and 1.9.x before 1.9.3, allow remote attackers to inject (no CVSS, moin)
- [CVE-2010-2970](https://cve.now/CVE-2010-2970.md): Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.9.x before 1.9.3 allow remote attackers to inject arbitrary web script or (no CVSS, moin)
- [CVE-2010-2971](https://cve.now/CVE-2010-2971.md): loaders/load\_it.c in libmikmod, possibly 3.1.12, does not properly account for the larger size of name##env relative to name##tick and name# (no CVSS)
- [CVE-2010-1871](https://cve.now/CVE-2010-1871.md): JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, does not properly sanitize inputs for (CVSS 8.8, KEV)
- [CVE-2010-2725](https://cve.now/CVE-2010-2725.md): BarnOwl before 1.6.2 does not check the return code of calls to the (1) ZPending and (2) ZReceiveNotice functions in libzephyr, which allows (no CVSS)
- [CVE-2010-2790](https://cve.now/CVE-2010-2790.md): Multiple cross-site scripting (XSS) vulnerabilities in the formatQuery function in frontends/php/include/classes/class.curl.php in Zabbix be (no CVSS)
- [CVE-2010-2931](https://cve.now/CVE-2010-2931.md): Stack-based buffer overflow in SigPlus Pro 3.74 ActiveX control allows remote attackers to execute arbitrary code via a long eighth argument (no CVSS)
- [CVE-2010-2932](https://cve.now/CVE-2010-2932.md): Buffer overflow in BarCodeWiz BarCode 3.29 ActiveX control (BarcodeWiz.dll) allows remote attackers to execute arbitrary code via a long arg (no CVSS)
- [CVE-2010-2933](https://cve.now/CVE-2010-2933.md): SQL injection vulnerability in AV Scripts AV Arcade 3 allows remote attackers to execute arbitrary SQL commands via the ava\_code cookie to t (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-08-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.