# CVEs published 2010-08-05

10 CVEs were published on August 5, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-2974](https://cve.now/CVE-2010-2974.md): Stack-based buffer overflow in the IConfigurationAccess interface in the Invensys Wonderware Archestra ConfigurationAccessComponent ActiveX (no CVSS)
- [CVE-2009-2696](https://cve.now/CVE-2009-2696.md): Cross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples web application in Apache Tomcat on (no CVSS)
- [CVE-2010-2547](https://cve.now/CVE-2010-2547.md): Use-after-free vulnerability in kbx/keybox-blob.c in GPGSM in GnuPG 2.x through 2.0.16 allows remote attackers to cause a denial of service (no CVSS)
- [CVE-2010-2709](https://cve.now/CVE-2010-2709.md): Stack-based buffer overflow in webappmon.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute a (no CVSS)
- [CVE-2010-2713](https://cve.now/CVE-2010-2713.md): The vte\_sequence\_handler\_window\_manipulation function in vteseq.c in libvte (aka libvte9) in VTE 0.25.1 and earlier, as used in gnome-termin (no CVSS)
- [CVE-2010-2791](https://cve.now/CVE-2010-2791.md): mod\_proxy in httpd in Apache HTTP Server 2.2.9, when running on Unix, does not close the backend connection if a timeout occurs when reading (no CVSS)
- [CVE-2010-2795](https://cve.now/CVE-2010-2795.md): phpCAS before 1.1.2 allows remote authenticated users to hijack sessions via a query string containing a crafted ticket value. (no CVSS)
- [CVE-2010-2796](https://cve.now/CVE-2010-2796.md): Cross-site scripting (XSS) vulnerability in phpCAS before 1.1.2, when proxy mode is enabled, allows remote attackers to inject arbitrary web (no CVSS)
- [CVE-2010-2862](https://cve.now/CVE-2010-2862.md): Integer overflow in CoolType.dll in Adobe Reader 8.2.3 and 9.3.3, and Acrobat 9.3.3, allows remote attackers to execute arbitrary code via a (no CVSS)
- [CVE-2010-2973](https://cve.now/CVE-2010-2973.md): Integer overflow in IOSurface in Apple iOS before 4.0.2 on the iPhone and iPod touch, and before 3.2.2 on the iPad, allows local users to ga (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-08-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.