# CVEs published 2010-10-08

11 CVEs were published on October 8, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-3886](https://cve.now/CVE-2010-3886.md): The CTimeoutEventList::InsertIntoTimeoutList function in Microsoft mshtml.dll uses a certain pointer value as part of producing Timer ID val (no CVSS)
- [CVE-2010-3887](https://cve.now/CVE-2010-3887.md): The Limit Mail feature in the Parental Controls functionality in Mail on Apple Mac OS X does not properly enforce the correspondence whiteli (no CVSS)
- [CVE-2010-3888](https://cve.now/CVE-2010-3888.md): Unspecified vulnerability in Microsoft Windows on 32-bit platforms allows local users to gain privileges via unknown vectors, as exploited i (no CVSS)
- [CVE-2010-3889](https://cve.now/CVE-2010-3889.md): Unspecified vulnerability in Microsoft Windows on 32-bit platforms allows local users to gain privileges via unknown vectors, as exploited i (no CVSS)
- [CVE-2010-2797](https://cve.now/CVE-2010-2797.md): Directory traversal vulnerability in lib/translation.functions.php in CMS Made Simple before 1.8.1 allows remote attackers to include and ex (no CVSS)
- [CVE-2010-2938](https://cve.now/CVE-2010-2938.md): arch/x86/hvm/vmx/vmcs.c in the virtual-machine control structure (VMCS) implementation in the Linux kernel 2.6.18 on Red Hat Enterprise Linu (no CVSS)
- [CVE-2010-3088](https://cve.now/CVE-2010-3088.md): The notify function in pidgin-knotify.c in the pidgin-knotify plugin 0.2.1 and earlier for Pidgin allows remote attackers to execute arbitra (no CVSS)
- [CVE-2010-3743](https://cve.now/CVE-2010-3743.md): Directory traversal vulnerability in Visual Synapse HTTP Server 1.0 RC1 through RC3, and 0.60 and earlier, allows remote attackers to read a (no CVSS)
- [CVE-2010-3882](https://cve.now/CVE-2010-3882.md): Multiple cross-site scripting (XSS) vulnerabilities in CMS Made Simple 1.7.1 and earlier allow remote attackers to inject arbitrary web scri (no CVSS)
- [CVE-2010-3883](https://cve.now/CVE-2010-3883.md): Cross-site request forgery (CSRF) vulnerability in the Change Group Permissions module in CMS Made Simple 1.7.1 and earlier allows remote at (no CVSS)
- [CVE-2010-3884](https://cve.now/CVE-2010-3884.md): Cross-site request forgery (CSRF) vulnerability in CMS Made Simple 1.8.1 and earlier allows remote attackers to hijack the authentication of (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-10-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.