# CVEs published 2010-08-19 24 CVEs were published on August 19, 2010: 0 critical, 0 high. Days are UTC. - [CVE-2010-1386](https://cve.now/CVE-2010-1386.md): page/Geolocation.cpp in WebCore in WebKit before r56188 and before 1.2.5 does not properly restrict access to the lastPosition function, whi (no CVSS) - [CVE-2010-1760](https://cve.now/CVE-2010-1760.md): loader/DocumentThreadableLoader.cpp in the XMLHttpRequest implementation in WebCore in WebKit before r58409 does not properly handle credent (no CVSS) - [CVE-2010-2234](https://cve.now/CVE-2010-2234.md): Cross-site request forgery (CSRF) vulnerability in Apache CouchDB 0.8.0 through 0.11.0 allows remote attackers to hijack the authentication (no CVSS) - [CVE-2010-2809](https://cve.now/CVE-2010-2809.md): The default configuration of the \ binding in Uzbl before 2010.08.05 does not properly use the @SELECTED\_URI feature, which allows u (no CVSS) - [CVE-2010-2076](https://cve.now/CVE-2010-2076.md): Apache CXF 2.0.x before 2.0.13, 2.1.x before 2.1.10, and 2.2.x before 2.2.9, as used in Apache ServiceMix, Apache Camel, Apache Chemistry, A (no CVSS, org.apache.cxf:cxf-rt-frontend-jaxrs) - [CVE-2010-2237](https://cve.now/CVE-2010-2237.md): Red Hat libvirt, possibly 0.6.1 through 0.8.2, looks up disk backing stores without referring to the user-defined main disk format, which mi (no CVSS) - [CVE-2010-2238](https://cve.now/CVE-2010-2238.md): Red Hat libvirt, possibly 0.7.2 through 0.8.2, recurses into disk-image backing stores without extracting the defined disk backing-store for (no CVSS) - [CVE-2010-2239](https://cve.now/CVE-2010-2239.md): Red Hat libvirt, possibly 0.6.0 through 0.8.2, creates new images without setting the user-defined backing-store format, which allows guest (no CVSS) - [CVE-2010-2242](https://cve.now/CVE-2010-2242.md): Red Hat libvirt 0.2.0 through 0.8.2 creates iptables rules with improper mappings of privileged source ports, which allows guest OS users to (no CVSS) - [CVE-2010-2497](https://cve.now/CVE-2010-2497.md): Integer underflow in glyph handling in FreeType before 2.4.0 allows remote attackers to cause a denial of service (application crash) or pos (no CVSS) - [CVE-2010-2498](https://cve.now/CVE-2010-2498.md): The psh\_glyph\_find\_strong\_points function in pshinter/pshalgo.c in FreeType before 2.4.0 does not properly implement hinting masks, which al (no CVSS) - [CVE-2010-2499](https://cve.now/CVE-2010-2499.md): Buffer overflow in the Mac\_Read\_POST\_Resource function in base/ftobjs.c in FreeType before 2.4.0 allows remote attackers to cause a denial o (no CVSS) - [CVE-2010-2500](https://cve.now/CVE-2010-2500.md): Integer overflow in the gray\_render\_span function in smooth/ftgrays.c in FreeType before 2.4.0 allows remote attackers to cause a denial of (no CVSS) - [CVE-2010-2519](https://cve.now/CVE-2010-2519.md): Heap-based buffer overflow in the Mac\_Read\_POST\_Resource function in base/ftobjs.c in FreeType before 2.4.0 allows remote attackers to cause (no CVSS) - [CVE-2010-2520](https://cve.now/CVE-2010-2520.md): Heap-based buffer overflow in the Ins\_IUP function in truetype/ttinterp.c in FreeType before 2.4.0, when TrueType bytecode support is enable (no CVSS) - [CVE-2010-2527](https://cve.now/CVE-2010-2527.md): Multiple buffer overflows in demo programs in FreeType before 2.4.0 allow remote attackers to cause a denial of service (application crash) (no CVSS) - [CVE-2010-2541](https://cve.now/CVE-2010-2541.md): Buffer overflow in ftmulti.c in the ftmulti demo program in FreeType before 2.4.2 allows remote attackers to cause a denial of service (appl (no CVSS) - [CVE-2010-2805](https://cve.now/CVE-2010-2805.md): The FT\_Stream\_EnterFrame function in base/ftstream.c in FreeType before 2.4.2 does not properly validate certain position values, which allo (no CVSS) - [CVE-2010-2806](https://cve.now/CVE-2010-2806.md): Array index error in the t42\_parse\_sfnts function in type42/t42parse.c in FreeType before 2.4.2 allows remote attackers to cause a denial of (no CVSS) - [CVE-2010-2807](https://cve.now/CVE-2010-2807.md): FreeType before 2.4.2 uses incorrect integer data types during bounds checking, which allows remote attackers to cause a denial of service ( (no CVSS) - [CVE-2010-2808](https://cve.now/CVE-2010-2808.md): Buffer overflow in the Mac\_Read\_POST\_Resource function in base/ftobjs.c in FreeType before 2.4.2 allows remote attackers to cause a denial o (no CVSS) - [CVE-2010-2813](https://cve.now/CVE-2010-2813.md): functions/imap\_general.php in SquirrelMail before 1.4.21 does not properly handle 8-bit characters in passwords, which allows remote attacke (no CVSS) - [CVE-2010-3053](https://cve.now/CVE-2010-3053.md): bdf/bdflib.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service (application crash) via a crafted BDF font file, (no CVSS) - [CVE-2010-3054](https://cve.now/CVE-2010-3054.md): Unspecified vulnerability in FreeType 2.3.9, and other versions before 2.4.2, allows remote attackers to cause a denial of service via vecto (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2010-08-19 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.