# CVEs published 2010-10-18

20 CVEs were published on October 18, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-2578](https://cve.now/CVE-2010-2578.md): Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, and RealPlayer Enterprise 2.1.2 al (no CVSS)
- [CVE-2010-2998](https://cve.now/CVE-2010-2998.md): Array index error in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.0.1 allows remote attackers to execute arbitr (no CVSS)
- [CVE-2010-3747](https://cve.now/CVE-2010-3747.md): An ActiveX control in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, and RealPlayer Enterprise 2.1.2 does not p (no CVSS)
- [CVE-2010-3748](https://cve.now/CVE-2010-3748.md): Stack-based buffer overflow in the RichFX component in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, and RealP (no CVSS)
- [CVE-2010-3749](https://cve.now/CVE-2010-3749.md): The browser-plugin implementation in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1 allows remote attackers to (no CVSS)
- [CVE-2010-3750](https://cve.now/CVE-2010-3750.md): rjrmrpln.dll in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, and RealPlayer Enterprise 2.1.2 does not properl (no CVSS)
- [CVE-2010-3751](https://cve.now/CVE-2010-3751.md): Multiple heap-based buffer overflows in an ActiveX control in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 (no CVSS)
- [CVE-2009-5005](https://cve.now/CVE-2009-5005.md): The Cluster::deliveredEvent function in cluster/Cluster.cpp in Apache Qpid, as used in Red Hat Enterprise MRG before 1.3 and other products, (no CVSS)
- [CVE-2009-5006](https://cve.now/CVE-2009-5006.md): The SessionAdapter::ExchangeHandlerImpl::checkAlternate function in broker/SessionAdapter.cpp in the C++ Broker component in Apache Qpid bef (no CVSS)
- [CVE-2010-0219](https://cve.now/CVE-2010-0219.md): Apache Axis2, as used in dswsbobje.war in SAP BusinessObjects Enterprise XI 3.2, CA ARCserve D2D r15, and other products, has a default pass (no CVSS)
- [CVE-2010-2368](https://cve.now/CVE-2010-2368.md): Untrusted search path vulnerability in Lhaplus before 1.58 allows local users to gain privileges via a Trojan horse DLL in the current worki (no CVSS)
- [CVE-2010-2369](https://cve.now/CVE-2010-2369.md): Untrusted search path vulnerability in Lhasa 0.19 and earlier allows local users to gain privileges via a Trojan horse executable file in th (no CVSS)
- [CVE-2010-3286](https://cve.now/CVE-2010-3286.md): Unspecified vulnerability in HP Systems Insight Manager (SIM) 6.0 and 6.1 allows remote attackers to read arbitrary files via unknown vector (no CVSS)
- [CVE-2010-3287](https://cve.now/CVE-2010-3287.md): Unspecified vulnerability on HP ProCurve Access Points, Access Controllers, and Mobility Controllers with software 5.1.x through 5.1.9, 5.2. (no CVSS)
- [CVE-2010-3841](https://cve.now/CVE-2010-3841.md): Multiple cross-site scripting (XSS) vulnerabilities in lib/TWiki.pm in TWiki before 5.0.1 allow remote attackers to inject arbitrary web scr (no CVSS)
- [CVE-2010-3979](https://cve.now/CVE-2010-3979.md): Dswsbobje in SAP BusinessObjects Enterprise XI 3.2 generates different error messages depending on whether the Login field corresponds to a (no CVSS)
- [CVE-2010-3980](https://cve.now/CVE-2010-3980.md): Dswsbobje in SAP BusinessObjects Enterprise XI 3.2 does not limit the number of CUIDs that may be requested, which allows remote authenticat (no CVSS)
- [CVE-2010-3981](https://cve.now/CVE-2010-3981.md): Cross-site scripting (XSS) vulnerability in SAP BusinessObjects Enterprise XI 3.2 allows remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2010-3982](https://cve.now/CVE-2010-3982.md): SAP BusinessObjects Enterprise XI 3.2 allows remote attackers to trigger TCP connections to arbitrary intranet hosts on any port, and obtain (no CVSS)
- [CVE-2010-3983](https://cve.now/CVE-2010-3983.md): CmcApp in SAP BusinessObjects Enterprise XI 3.2 allows remote authenticated users to gain privileges via vectors involving the Program Job S (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-10-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.