# CVEs published 2010-08-30

17 CVEs were published on August 30, 2010: 0 critical, 1 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2010-2575](https://cve.now/CVE-2010-2575.md): Heap-based buffer overflow in the RLE decompression functionality in the TranscribePalmImageToJPEG function in generators/plucker/inplug/ima (no CVSS)
- [CVE-2010-2712](https://cve.now/CVE-2010-2712.md): Unspecified vulnerability in Software Distributor (sd) in HP HP-UX B.11.11, B.11.23, and B.11.31 allows local users to gain privileges via u (no CVSS)
- [CVE-2010-3035](https://cve.now/CVE-2010-3035.md): Cisco IOS XR 3.4.0 through 3.9.1, when BGP is enabled, does not properly handle unrecognized transitive attributes, which allows remote atta (CVSS 7.5, KEV)
- [CVE-2010-0116](https://cve.now/CVE-2010-0116.md): Integer overflow in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows might allow remote attackers to (no CVSS)
- [CVE-2010-0117](https://cve.now/CVE-2010-0117.md): RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows do not properly handle dimensions during YUV420 tra (no CVSS)
- [CVE-2010-0120](https://cve.now/CVE-2010-0120.md): Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows allows remote attacke (no CVSS)
- [CVE-2010-2363](https://cve.now/CVE-2010-2363.md): The IPv6 Unicast Reverse Path Forwarding (RPF) implementation on the SEIL/X1, SEIL/X2, and SEIL/B1 routers with firmware 1.00 through 2.73, (no CVSS)
- [CVE-2010-2792](https://cve.now/CVE-2010-2792.md): Race condition in the SPICE (aka spice-xpi) plug-in 2.2 for Firefox allows local users to obtain sensitive information, and conduct man-in-t (no CVSS)
- [CVE-2010-2794](https://cve.now/CVE-2010-2794.md): The SPICE (aka spice-xpi) plug-in 2.2 for Firefox allows local users to overwrite arbitrary files via a symlink attack on an unspecified log (no CVSS)
- [CVE-2010-2940](https://cve.now/CVE-2010-2940.md): The auth\_send function in providers/ldap/ldap\_auth.c in System Security Services Daemon (SSSD) 1.3.0, when LDAP authentication and anonymous (no CVSS)
- [CVE-2010-2945](https://cve.now/CVE-2010-2945.md): The default configuration of SLiM before 1.3.2 places ./ (dot slash) at the beginning of the default\_path option, which might allow local us (no CVSS)
- [CVE-2010-2996](https://cve.now/CVE-2010-2996.md): Array index error in RealNetworks RealPlayer 11.0 through 11.1 on Windows allows remote attackers to execute arbitrary code via a malformed (no CVSS)
- [CVE-2010-3000](https://cve.now/CVE-2010-3000.md): Multiple integer overflows in the ParseKnownType function in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 o (no CVSS)
- [CVE-2010-3001](https://cve.now/CVE-2010-3001.md): Unspecified vulnerability in an ActiveX control in the Internet Explorer (IE) plugin in RealNetworks RealPlayer 11.0 through 11.1 and RealPl (no CVSS)
- [CVE-2010-3002](https://cve.now/CVE-2010-3002.md): Unspecified vulnerability in RealNetworks RealPlayer 11.0 through 11.1 allows attackers to bypass intended access restrictions on files via (no CVSS)
- [CVE-2010-3186](https://cve.now/CVE-2010-3186.md): IBM WebSphere Application Server (WAS) 7.x before 7.0.0.13, and WebSphere Application Server Feature Pack for Web Services 6.1.0.9 through 6 (no CVSS)
- [CVE-2010-3187](https://cve.now/CVE-2010-3187.md): Buffer overflow in ftpd in IBM AIX 5.3 and earlier allows remote attackers to execute arbitrary code via a long NLST command. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-08-30
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.