# CVEs published 2010-10-13

86 CVEs were published on October 13, 2010: 0 critical, 1 high. Days are UTC.

- [CVE-2010-2412](https://cve.now/CVE-2010-2412.md): Unspecified vulnerability in the OLAP component in Oracle Database Server 11.1.0.7 allows remote authenticated users to affect confidentiali (no CVSS)
- [CVE-2010-2413](https://cve.now/CVE-2010-2413.md): Unspecified vulnerability in the BI Publisher component in Oracle Fusion Middleware 10.1.3.3.2 and 10.1.3.4.1 allows remote attackers to aff (no CVSS)
- [CVE-2010-2414](https://cve.now/CVE-2010-2414.md): Unspecified vulnerability in the (1) Sun Convergence 1 and (2) Sun Java Communications Suite 7 components in Oracle Sun Products Suite 1.0 a (no CVSS)
- [CVE-2010-2415](https://cve.now/CVE-2010-2415.md): Unspecified vulnerability in the Change Data Capture component in Oracle Database Server 10.1.0.5, 10.2.0.4, 11.1.0.7, and 11.2.0.1 allows r (no CVSS)
- [CVE-2010-2416](https://cve.now/CVE-2010-2416.md): Unspecified vulnerability in the Oracle E-Business Intelligence component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows re (no CVSS)
- [CVE-2010-2417](https://cve.now/CVE-2010-2417.md): Unspecified vulnerability in the Agile PLM component in Oracle Supply Chain Products Suite 9.3.0.0 allows remote authenticated users to affe (no CVSS)
- [CVE-2010-2418](https://cve.now/CVE-2010-2418.md): Unspecified vulnerability in the Oracle Territory Management component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remot (no CVSS)
- [CVE-2010-2419](https://cve.now/CVE-2010-2419.md): Unspecified vulnerability in the Java Virtual Machine component in Oracle Database Server 10.1.0.5, 10.2.0.4, 11.1.0.7, and 11.2.0.1 allows (no CVSS)
- [CVE-2010-3500](https://cve.now/CVE-2010-3500.md): Unspecified vulnerability in the Siebel Core - Highly Interactive Client component in Oracle Siebel Suite 7.7.2.12, 7.8.2.14, 8.0.0.10, and (no CVSS)
- [CVE-2010-3501](https://cve.now/CVE-2010-3501.md): Unspecified vulnerability in the OID component in Oracle Fusion Middleware 10.1.2.3, 10.1.4.3, and 11.1.1.2.0 allows remote attackers to aff (no CVSS)
- [CVE-2010-3502](https://cve.now/CVE-2010-3502.md): Unspecified vulnerability in the Siebel Core component in Oracle Siebel Suite 7.7.2.12, 7.8.2.14, 8.0.0.10, and 8.1.1.3 allows remote authen (no CVSS)
- [CVE-2010-3503](https://cve.now/CVE-2010-3503.md): Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect confidentiality and integrity via unknown vector (no CVSS)
- [CVE-2010-3504](https://cve.now/CVE-2010-3504.md): Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.2 all (no CVSS)
- [CVE-2010-3506](https://cve.now/CVE-2010-3506.md): Unspecified vulnerability in the Oracle Explorer (Sun Explorer) component in Oracle Sun Products Suite 6.4 allows local users to affect conf (no CVSS)
- [CVE-2010-3507](https://cve.now/CVE-2010-3507.md): Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows local users to affect confidentiality, integrity, and availability via unkno (no CVSS)
- [CVE-2010-3508](https://cve.now/CVE-2010-3508.md): Unspecified vulnerability in Oracle Solaris 10 allows local users to affect confidentiality and integrity via unknown vectors related to Sol (no CVSS)
- [CVE-2010-3509](https://cve.now/CVE-2010-3509.md): Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows remote attackers to affect confidentiality, integrity, and availability via (no CVSS)
- [CVE-2010-3511](https://cve.now/CVE-2010-3511.md): Unspecified vulnerability in Oracle OpenSolaris allows local users to affect integrity and availability via unknown vectors related to Toolt (no CVSS)
- [CVE-2010-3512](https://cve.now/CVE-2010-3512.md): Unspecified vulnerability in the Oracle iPlanet Web Server (Sun Java System Web Server) component in Oracle Sun Products Suite 7.0u8 allows (no CVSS)
- [CVE-2010-3513](https://cve.now/CVE-2010-3513.md): Unspecified vulnerability in Oracle Solaris 9 and 10, and OpenSolaris, allows local users to affect integrity and availability via unknown v (no CVSS)
- [CVE-2010-3514](https://cve.now/CVE-2010-3514.md): Unspecified vulnerability in the Oracle iPlanet Web Server (Sun Java System Web Server) component in Oracle Sun Products Suite 6.1 and 7.0 a (no CVSS)
- [CVE-2010-3515](https://cve.now/CVE-2010-3515.md): Unspecified vulnerability in the Solaris component in Oracle Solaris 9 and 10, and OpenSolaris, allows local users to affect availability vi (no CVSS)
- [CVE-2010-3516](https://cve.now/CVE-2010-3516.md): Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect availability via unknown vectors related to Infi (no CVSS)
- [CVE-2010-3517](https://cve.now/CVE-2010-3517.md): Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect availability, related to Kernel/X86. (no CVSS)
- [CVE-2010-3518](https://cve.now/CVE-2010-3518.md): Unspecified vulnerability in the PeopleSoft Enterprise HCM GP - Japan component in Oracle PeopleSoft and JDEdwards Suite 8.81 SP1 Bundle #13 (no CVSS)
- [CVE-2010-3519](https://cve.now/CVE-2010-3519.md): Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft and JDEdwards Suite 8.49.28 and 8.50.12 al (no CVSS)
- [CVE-2010-3520](https://cve.now/CVE-2010-3520.md): Unspecified vulnerability in the PeopleSoft Enterprise HCM - GP France component in Oracle PeopleSoft and JDEdwards Suite 8.81 SP1 Bundle #1 (no CVSS)
- [CVE-2010-3521](https://cve.now/CVE-2010-3521.md): Unspecified vulnerability in the PeopleSoft Enterprise HCM ePay component in Oracle PeopleSoft and JDEdwards Suite 9.0 to Payroll Update 10- (no CVSS)
- [CVE-2010-2388](https://cve.now/CVE-2010-2388.md): Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affec (no CVSS)
- [CVE-2010-2389](https://cve.now/CVE-2010-2389.md): Unspecified vulnerability in the Perl component in Oracle Database Server 11.2.0.1, 11.1.0.7, 10.2.0.3, 10.2.0.4, and 10.1.0.5; and Fusion M (no CVSS)
- [CVE-2010-2390](https://cve.now/CVE-2010-2390.md): Unspecified vulnerability in the Database Control component in EM Console in Oracle Database Server 10.1.0.5 and 10.2.0.3, Oracle Fusion Mid (no CVSS)
- [CVE-2010-2391](https://cve.now/CVE-2010-2391.md): Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 10.1.0.5 and 10.2.0.3 allows remote authenticated users to a (no CVSS)
- [CVE-2010-2395](https://cve.now/CVE-2010-2395.md): Unspecified vulnerability in the Cabo/UIX component in Oracle Fusion Middleware 10.1.2.3 and 10.1.3.5 allows remote attackers to affect inte (no CVSS)
- [CVE-2010-2396](https://cve.now/CVE-2010-2396.md): Unspecified vulnerability in the Forms component in Oracle Fusion Middleware 10.1.2.3 allows remote attackers to affect integrity via unknow (no CVSS)
- [CVE-2010-2404](https://cve.now/CVE-2010-2404.md): Unspecified vulnerability in the Oracle iRecruitment component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.2 allows remote authen (no CVSS)
- [CVE-2010-2405](https://cve.now/CVE-2010-2405.md): Unspecified vulnerability in the Siebel Core - Highly Interactive Client component in Oracle Siebel Suite 7.7.2.12, 7.8.2.14, 8.0.0.10, and (no CVSS)
- [CVE-2010-2406](https://cve.now/CVE-2010-2406.md): Unspecified vulnerability in the Siebel Core - Highly Interactive Client component in Oracle Siebel Suite 7.7.2.12, 7.8.2.14, 8.0.0.10, and (no CVSS)
- [CVE-2010-2407](https://cve.now/CVE-2010-2407.md): Unspecified vulnerability in the XDK component in Oracle Database Server 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote attackers to affect (no CVSS)
- [CVE-2010-2408](https://cve.now/CVE-2010-2408.md): Unspecified vulnerability in the Oracle iRecruitment component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attack (no CVSS)
- [CVE-2010-2409](https://cve.now/CVE-2010-2409.md): Unspecified vulnerability in the Cabo/UIX component in Oracle Fusion Middleware 10.1.2.3 and 10.1.3.5 allows remote attackers to affect inte (no CVSS)
- [CVE-2010-2410](https://cve.now/CVE-2010-2410.md): Unspecified vulnerability in the Cabo/UIX component in Oracle Fusion Middleware 10.1.2.3 and 10.1.3.5 allows remote attackers to affect inte (no CVSS)
- [CVE-2010-2411](https://cve.now/CVE-2010-2411.md): Unspecified vulnerability in the Job Queue component in Oracle Database Server 11.2.0.1, 11.1.0.7, 10.2.0.3, 10.2.0.4, and 10.1.0.5 allows r (no CVSS)
- [CVE-2010-0808](https://cve.now/CVE-2010-0808.md): Microsoft Internet Explorer 6 and 7 on Windows XP and Vista does not prevent script from simulating user interaction with the AutoComplete f (no CVSS)
- [CVE-2010-1883](https://cve.now/CVE-2010-1883.md): Integer overflow in the Embedded OpenType (EOT) Font Engine in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 (CVSS 7.8)
- [CVE-2010-2740](https://cve.now/CVE-2010-2740.md): The OpenType Font (OTF) format driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly perform memory allocation du (no CVSS)
- [CVE-2010-2741](https://cve.now/CVE-2010-2741.md): The OpenType Font (OTF) format driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 performs an incorrect integer calculation duri (no CVSS)
- [CVE-2010-2744](https://cve.now/CVE-2010-2744.md): The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, S (no CVSS)
- [CVE-2010-2745](https://cve.now/CVE-2010-2745.md): Microsoft Windows Media Player (WMP) 9 through 12 does not properly deallocate objects during a browser reload action, which allows user-ass (no CVSS)
- [CVE-2010-2746](https://cve.now/CVE-2010-2746.md): Heap-based buffer overflow in Comctl32.dll (aka the common control library) in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Wi (no CVSS)
- [CVE-2010-2747](https://cve.now/CVE-2010-2747.md): Microsoft Word 2002 SP3 and Office 2004 for Mac do not properly handle an uninitialized pointer during parsing of a Word document, which all (no CVSS)
- [CVE-2010-2748](https://cve.now/CVE-2010-2748.md): Microsoft Word 2002 SP3 and Office 2004 for Mac do not properly check an unspecified boundary during parsing of a Word document, which allow (no CVSS)
- [CVE-2010-2750](https://cve.now/CVE-2010-2750.md): Array index error in Microsoft Word 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Word do (no CVSS)
- [CVE-2010-3214](https://cve.now/CVE-2010-3214.md): Stack-based buffer overflow in Microsoft Word 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004 and 2008 for Mac; Open XML File Format Con (no CVSS)
- [CVE-2010-3215](https://cve.now/CVE-2010-3215.md): Microsoft Word 2002 SP3 and Office 2004 for Mac do not properly handle unspecified return values during parsing of a Word document, which al (no CVSS)
- [CVE-2010-3216](https://cve.now/CVE-2010-3216.md): Microsoft Word 2002 SP3 and Office 2004 for Mac allow remote attackers to execute arbitrary code via a crafted Word document containing book (no CVSS)
- [CVE-2010-3217](https://cve.now/CVE-2010-3217.md): Double free vulnerability in Microsoft Word 2002 SP3 allows remote attackers to execute arbitrary code via a Word document with crafted List (no CVSS)
- [CVE-2010-3218](https://cve.now/CVE-2010-3218.md): Heap-based buffer overflow in Microsoft Word 2002 SP3 allows remote attackers to execute arbitrary code via malformed records in a Word docu (no CVSS)
- [CVE-2010-3219](https://cve.now/CVE-2010-3219.md): Array index vulnerability in Microsoft Word 2002 SP3 allows remote attackers to execute arbitrary code via a crafted Word document that trig (no CVSS)
- [CVE-2010-3220](https://cve.now/CVE-2010-3220.md): Unspecified vulnerability in Microsoft Word 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted (no CVSS)
- [CVE-2010-3221](https://cve.now/CVE-2010-3221.md): Microsoft Word 2002 SP3 and 2003 SP3, Office 2004 for Mac, and Word Viewer do not properly handle a malformed record during parsing of a Wor (no CVSS)
- [CVE-2010-3222](https://cve.now/CVE-2010-3222.md): Stack-based buffer overflow in the Remote Procedure Call Subsystem (RPCSS) in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows lo (no CVSS)
- [CVE-2010-3223](https://cve.now/CVE-2010-3223.md): The user interface in Microsoft Cluster Service (MSCS) in Microsoft Windows Server 2008 R2 does not properly set administrative-share permis (no CVSS)
- [CVE-2010-3225](https://cve.now/CVE-2010-3225.md): Use-after-free vulnerability in the Media Player Network Sharing Service in Microsoft Windows Vista SP1 and SP2 and Windows 7 allows remote (no CVSS)
- [CVE-2010-3228](https://cve.now/CVE-2010-3228.md): The JIT compiler in Microsoft .NET Framework 4.0 on 64-bit platforms does not properly perform optimizations, which allows remote attackers (no CVSS)
- [CVE-2010-3229](https://cve.now/CVE-2010-3229.md): The Secure Channel (aka SChannel) security package in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Window (no CVSS)
- [CVE-2010-3230](https://cve.now/CVE-2010-3230.md): Integer overflow in Microsoft Excel 2002 SP3 allows remote attackers to execute arbitrary code via an Excel document with crafted record inf (no CVSS)
- [CVE-2010-3231](https://cve.now/CVE-2010-3231.md): Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record informati (no CVSS)
- [CVE-2010-3232](https://cve.now/CVE-2010-3232.md): Microsoft Excel 2003 SP3 and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Co (no CVSS)
- [CVE-2010-3233](https://cve.now/CVE-2010-3233.md): Microsoft Excel 2002 SP3 and 2003 SP3 does not properly validate record information, which allows remote attackers to execute arbitrary code (no CVSS)
- [CVE-2010-3234](https://cve.now/CVE-2010-3234.md): Microsoft Excel 2002 SP3 does not properly validate formula information, which allows remote attackers to execute arbitrary code via a craft (no CVSS)
- [CVE-2010-3235](https://cve.now/CVE-2010-3235.md): Microsoft Excel 2002 SP3 does not properly validate formula information, which allows remote attackers to execute arbitrary code via a craft (no CVSS)
- [CVE-2010-3236](https://cve.now/CVE-2010-3236.md): Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate rec (no CVSS)
- [CVE-2010-3237](https://cve.now/CVE-2010-3237.md): Microsoft Excel 2002 SP3 and Office 2004 for Mac do not properly validate record information, which allows remote attackers to execute arbit (no CVSS)
- [CVE-2010-3238](https://cve.now/CVE-2010-3238.md): Microsoft Excel 2002 SP3 and 2003 SP3, and Office 2004 for Mac, does not properly validate binary file-format information, which allows remo (no CVSS)
- [CVE-2010-3239](https://cve.now/CVE-2010-3239.md): Microsoft Excel 2002 SP3 does not properly validate record information, which allows remote attackers to execute arbitrary code via a crafte (no CVSS)
- [CVE-2010-3240](https://cve.now/CVE-2010-3240.md): Microsoft Excel 2002 SP3 and 2007 SP2; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 (no CVSS)
- [CVE-2010-3241](https://cve.now/CVE-2010-3241.md): Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate binary file-form (no CVSS)
- [CVE-2010-3242](https://cve.now/CVE-2010-3242.md): Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record informati (no CVSS)
- [CVE-2010-3243](https://cve.now/CVE-2010-3243.md): Cross-site scripting (XSS) vulnerability in the toStaticHTML function in Microsoft Internet Explorer 8, and the SafeHTML function in Microso (CVSS 4.3)
- [CVE-2010-3325](https://cve.now/CVE-2010-3325.md): Microsoft Internet Explorer 6 through 8 does not properly handle unspecified special characters in Cascading Style Sheets (CSS) documents, w (no CVSS)
- [CVE-2010-3326](https://cve.now/CVE-2010-3326.md): Microsoft Internet Explorer 6 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessi (no CVSS)
- [CVE-2010-3327](https://cve.now/CVE-2010-3327.md): The implementation of HTML content creation in Microsoft Internet Explorer 6 through 8 does not remove the Anchor element during pasting and (no CVSS)
- [CVE-2010-3328](https://cve.now/CVE-2010-3328.md): Use-after-free vulnerability in the CAttrArray::PrivateFind function in mshtml.dll in Microsoft Internet Explorer 6 through 8 allows remote (no CVSS)
- [CVE-2010-3329](https://cve.now/CVE-2010-3329.md): mshtmled.dll in Microsoft Internet Explorer 7 and 8 allows remote attackers to execute arbitrary code via a crafted Microsoft Office documen (no CVSS)
- [CVE-2010-3330](https://cve.now/CVE-2010-3330.md): Microsoft Internet Explorer 6 through 8 does not properly restrict script access to content from a different (1) domain or (2) zone, which a (CVSS 6.5)
- [CVE-2010-3331](https://cve.now/CVE-2010-3331.md): Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory in certain circumstances involving use of Microsoft Word (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-10-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.