# CVEs published 2010-10-19

48 CVEs were published on October 19, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-3541](https://cve.now/CVE-2010-3541.md): Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2\_27, and 1.3. (no CVSS)
- [CVE-2010-3548](https://cve.now/CVE-2010-3548.md): Unspecified vulnerability in the Java Naming and Directory Interface (JNDI) component in Oracle Java SE and Java for Business 6 Update 21, 5 (no CVSS)
- [CVE-2010-3549](https://cve.now/CVE-2010-3549.md): Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2\_27, and 1.3. (no CVSS)
- [CVE-2010-3550](https://cve.now/CVE-2010-3550.md): Unspecified vulnerability in the Java Web Start component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remot (no CVSS)
- [CVE-2010-3551](https://cve.now/CVE-2010-3551.md): Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2\_27 allow (no CVSS)
- [CVE-2010-3552](https://cve.now/CVE-2010-3552.md): Unspecified vulnerability in the New Java Plug-in component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to a (no CVSS)
- [CVE-2010-3553](https://cve.now/CVE-2010-3553.md): Unspecified vulnerability in the Swing component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2\_27, and 1.3.1\_28 (no CVSS)
- [CVE-2010-3554](https://cve.now/CVE-2010-3554.md): Unspecified vulnerability in the CORBA component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2\_27, and 1.3.1\_28 (no CVSS)
- [CVE-2010-3555](https://cve.now/CVE-2010-3555.md): Unspecified vulnerability in the Deployment component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to affect (no CVSS)
- [CVE-2010-3556](https://cve.now/CVE-2010-3556.md): Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2\_27, and 1.3.1\_28 all (no CVSS)
- [CVE-2010-3557](https://cve.now/CVE-2010-3557.md): Unspecified vulnerability in the Swing component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2\_27, and 1.3.1\_28 (no CVSS)
- [CVE-2010-3558](https://cve.now/CVE-2010-3558.md): Unspecified vulnerability in the Java Web Start component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to aff (no CVSS)
- [CVE-2010-3559](https://cve.now/CVE-2010-3559.md): Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2\_27, and 1.3.1\_28 (no CVSS)
- [CVE-2010-3560](https://cve.now/CVE-2010-3560.md): Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to affect (no CVSS)
- [CVE-2010-3561](https://cve.now/CVE-2010-3561.md): Unspecified vulnerability in the CORBA component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote attacke (no CVSS)
- [CVE-2010-3562](https://cve.now/CVE-2010-3562.md): Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2\_27, and 1.3.1\_28 all (no CVSS)
- [CVE-2010-3563](https://cve.now/CVE-2010-3563.md): Unspecified vulnerability in the Deployment component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to affect (no CVSS)
- [CVE-2010-3565](https://cve.now/CVE-2010-3565.md): Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2\_27 allows remote (no CVSS)
- [CVE-2010-3566](https://cve.now/CVE-2010-3566.md): Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update and 25 allows remote attackers (no CVSS)
- [CVE-2010-3567](https://cve.now/CVE-2010-3567.md): Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, and 5.0 Update 25 allows remote attackers (no CVSS)
- [CVE-2010-3568](https://cve.now/CVE-2010-3568.md): Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and (no CVSS)
- [CVE-2010-3569](https://cve.now/CVE-2010-3569.md): Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and (no CVSS)
- [CVE-2010-3570](https://cve.now/CVE-2010-3570.md): Unspecified vulnerability in the Deployment Toolkit component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to (no CVSS)
- [CVE-2010-3571](https://cve.now/CVE-2010-3571.md): Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2\_27, and 1.3.1\_28 all (no CVSS)
- [CVE-2010-3572](https://cve.now/CVE-2010-3572.md): Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2\_27, and 1.3.1\_28 (no CVSS)
- [CVE-2010-3573](https://cve.now/CVE-2010-3573.md): Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote at (no CVSS)
- [CVE-2010-3574](https://cve.now/CVE-2010-3574.md): Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2\_27, and 1.3. (no CVSS)
- [CVE-2010-3975](https://cve.now/CVE-2010-3975.md): Untrusted search path vulnerability in Adobe Flash Player 9 allows local users, and possibly remote attackers, to execute arbitrary code and (no CVSS)
- [CVE-2010-3976](https://cve.now/CVE-2010-3976.md): Untrusted search path vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows allows local users, and po (no CVSS)
- [CVE-2007-6736](https://cve.now/CVE-2007-6736.md): Multiple directory traversal vulnerabilities in FTPServer.py in pyftpdlib before 0.2.0 allow remote authenticated users to access arbitrary (no CVSS, pyftpdlib)
- [CVE-2007-6737](https://cve.now/CVE-2007-6737.md): FTPServer.py in pyftpdlib before 0.2.0 does not increment the attempted\_logins count for a USER command that specifies an invalid username, (no CVSS, pyftpdlib)
- [CVE-2007-6738](https://cve.now/CVE-2007-6738.md): pyftpdlib before 0.1.1 does not choose a random value for the port associated with the PASV command, which makes it easier for remote attack (no CVSS, pyftpdlib)
- [CVE-2007-6739](https://cve.now/CVE-2007-6739.md): FTPServer.py in pyftpdlib before 0.2.0 allows remote attackers to cause a denial of service via a long command. (no CVSS, pyftpdlib)
- [CVE-2007-6740](https://cve.now/CVE-2007-6740.md): The ftp\_STOU function in FTPServer.py in pyftpdlib before 0.2.0 does not limit the number of attempts to discover a unique filename, which m (no CVSS, pyftpdlib)
- [CVE-2007-6741](https://cve.now/CVE-2007-6741.md): The ftp\_PORT function in FTPServer.py in pyftpdlib before 0.2.0 does not prevent TCP connections to privileged ports if the destination IP a (no CVSS, pyftpdlib)
- [CVE-2008-7262](https://cve.now/CVE-2008-7262.md): Multiple directory traversal vulnerabilities in FTPServer.py in pyftpdlib before 0.3.0 allow remote authenticated users to access arbitrary (no CVSS, pyftpdlib)
- [CVE-2008-7263](https://cve.now/CVE-2008-7263.md): ftpserver.py in pyftpdlib before 0.5.0 does not delay its response after receiving an invalid login attempt, which makes it easier for remot (no CVSS, pyftpdlib)
- [CVE-2008-7264](https://cve.now/CVE-2008-7264.md): The ftp\_QUIT function in ftpserver.py in pyftpdlib before 0.5.0 allows remote authenticated users to cause a denial of service (file descrip (no CVSS, pyftpdlib)
- [CVE-2009-5010](https://cve.now/CVE-2009-5010.md): Race condition in the FTPHandler class in ftpserver.py in pyftpdlib before 0.5.1 allows remote attackers to cause a denial of service (daemo (no CVSS, pyftpdlib)
- [CVE-2009-5011](https://cve.now/CVE-2009-5011.md): Race condition in the FTPHandler class in ftpserver.py in pyftpdlib before 0.5.2 allows remote attackers to cause a denial of service (daemo (no CVSS, pyftpdlib)
- [CVE-2009-5012](https://cve.now/CVE-2009-5012.md): ftpserver.py in pyftpdlib before 0.5.2 does not require the l permission for the MLST command, which allows remote authenticated users to by (no CVSS, pyftpdlib)
- [CVE-2009-5013](https://cve.now/CVE-2009-5013.md): Memory leak in the on\_dtp\_close function in ftpserver.py in pyftpdlib before 0.5.2 allows remote authenticated users to cause a denial of se (no CVSS, pyftpdlib)
- [CVE-2010-3157](https://cve.now/CVE-2010-3157.md): Untrusted search path vulnerability in XacRett before 50 allows attackers to execute arbitrary code via a Trojan horse executable file, rela (no CVSS)
- [CVE-2010-3158](https://cve.now/CVE-2010-3158.md): Untrusted search path vulnerability in Lhaplus before 1.58 allows local users to gain privileges via a Trojan horse executable file in the c (no CVSS)
- [CVE-2010-3492](https://cve.now/CVE-2010-3492.md): The asyncore module in Python before 3.2 does not properly handle unsuccessful calls to the accept function, and does not have accompanying (no CVSS)
- [CVE-2010-3493](https://cve.now/CVE-2010-3493.md): Multiple race conditions in smtpd.py in the smtpd module in Python 2.6, 2.7, 3.1, and 3.2 alpha allow remote attackers to cause a denial of (no CVSS)
- [CVE-2010-3494](https://cve.now/CVE-2010-3494.md): Race condition in the FTPHandler class in ftpserver.py in pyftpdlib before 0.5.2 allows remote attackers to cause a denial of service (daemo (no CVSS, pyftpdlib)
- [CVE-2010-3495](https://cve.now/CVE-2010-3495.md): Race condition in ZEO/StorageServer.py in Zope Object Database (ZODB) before 3.10.0 allows remote attackers to cause a denial of service (da (no CVSS, zodb3)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-10-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.
