# CVEs published 2010-10-21 31 CVEs were published on October 21, 2010: 0 critical, 0 high. Days are UTC. - [CVE-2010-3170](https://cve.now/CVE-2010-3170.md): Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 recognize (no CVSS) - [CVE-2010-3173](https://cve.now/CVE-2010-3173.md): The SSL implementation in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMon (no CVSS) - [CVE-2010-3174](https://cve.now/CVE-2010-3174.md): Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.14, Thunderbird before 3.0.9, and SeaMonkey before 2.0.9 (no CVSS) - [CVE-2010-3175](https://cve.now/CVE-2010-3175.md): Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.6.x before 3.6.11 and Thunderbird 3.1.x before 3.1.5 allow r (no CVSS) - [CVE-2010-3176](https://cve.now/CVE-2010-3176.md): Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.14 and 3.6.x before 3.6.11, Thunderbird befor (no CVSS) - [CVE-2010-3177](https://cve.now/CVE-2010-3177.md): Multiple cross-site scripting (XSS) vulnerabilities in the Gopher parser in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, and SeaMo (no CVSS) - [CVE-2010-3178](https://cve.now/CVE-2010-3178.md): Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 do not pr (no CVSS) - [CVE-2010-3179](https://cve.now/CVE-2010-3179.md): Stack-based buffer overflow in the text-rendering functionality in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before (no CVSS) - [CVE-2010-3180](https://cve.now/CVE-2010-3180.md): Use-after-free vulnerability in the nsBarProp function in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 an (no CVSS) - [CVE-2010-3181](https://cve.now/CVE-2010-3181.md): Untrusted search path vulnerability in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1. (no CVSS) - [CVE-2010-3182](https://cve.now/CVE-2010-3182.md): A certain application-launch script in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1. (no CVSS) - [CVE-2010-3183](https://cve.now/CVE-2010-3183.md): The LookupGetterOrSetter function in js3250.dll in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x (no CVSS) - [CVE-2010-3291](https://cve.now/CVE-2010-3291.md): Cross-site scripting (XSS) vulnerability in HP AssetCenter 5.0x through AC\_5.03, and AssetManager 5.1x through AM\_5.12 and 5.2x through AM\_5 (no CVSS) - [CVE-2010-4033](https://cve.now/CVE-2010-4033.md): Google Chrome before 7.0.517.41 does not properly implement the autofill and autocomplete functionality, which allows remote attackers to co (no CVSS) - [CVE-2010-4034](https://cve.now/CVE-2010-4034.md): Google Chrome before 7.0.517.41 does not properly handle forms, which allows remote attackers to cause a denial of service (application cras (no CVSS) - [CVE-2010-4035](https://cve.now/CVE-2010-4035.md): Google Chrome before 7.0.517.41 does not properly perform autofill operations for forms, which allows remote attackers to cause a denial of (no CVSS) - [CVE-2010-4036](https://cve.now/CVE-2010-4036.md): Google Chrome before 7.0.517.41 does not properly handle the unloading of a page, which allows remote attackers to spoof URLs via unspecifie (no CVSS) - [CVE-2010-4037](https://cve.now/CVE-2010-4037.md): Unspecified vulnerability in Google Chrome before 7.0.517.41 allows remote attackers to bypass the pop-up blocker via unknown vectors. (no CVSS) - [CVE-2010-4038](https://cve.now/CVE-2010-4038.md): The Web Sockets implementation in Google Chrome before 7.0.517.41 does not properly handle a shutdown action, which allows remote attackers (no CVSS) - [CVE-2010-4039](https://cve.now/CVE-2010-4039.md): Google Chrome before 7.0.517.41 on Linux does not properly set the PATH environment variable, which has unspecified impact and attack vector (no CVSS) - [CVE-2010-4040](https://cve.now/CVE-2010-4040.md): Google Chrome before 7.0.517.41 does not properly handle animated GIF images, which allows remote attackers to cause a denial of service (me (no CVSS) - [CVE-2010-4041](https://cve.now/CVE-2010-4041.md): The sandbox implementation in Google Chrome before 7.0.517.41 on Linux does not properly constrain worker processes, which might allow remot (no CVSS) - [CVE-2010-4042](https://cve.now/CVE-2010-4042.md): Google Chrome before 7.0.517.41 does not properly handle element maps, which allows remote attackers to cause a denial of service or possibl (no CVSS) - [CVE-2010-4043](https://cve.now/CVE-2010-4043.md): Opera before 10.63 does not prevent interpretation of a cross-origin document as a CSS stylesheet when the document lacks a CSS token sequen (no CVSS) - [CVE-2010-4044](https://cve.now/CVE-2010-4044.md): Opera before 10.63 does not ensure that the portion of a URL shown in the Address Bar contains the beginning of the URL, which allows remote (no CVSS) - [CVE-2010-4045](https://cve.now/CVE-2010-4045.md): Opera before 10.63 does not properly restrict web script in unspecified circumstances involving reloads and redirects, which allows remote a (no CVSS) - [CVE-2010-4046](https://cve.now/CVE-2010-4046.md): Opera before 10.63 does not properly verify the origin of video content, which allows remote attackers to obtain sensitive information by us (no CVSS) - [CVE-2010-4047](https://cve.now/CVE-2010-4047.md): Opera before 10.63 does not properly select the security context of JavaScript code associated with an error page, which allows user-assiste (no CVSS) - [CVE-2010-4048](https://cve.now/CVE-2010-4048.md): Opera before 10.63 allows user-assisted remote web servers to cause a denial of service (application crash) by sending a redirect during the (no CVSS) - [CVE-2010-4049](https://cve.now/CVE-2010-4049.md): Opera before 10.63 allows remote attackers to cause a denial of service (application crash) via a Flash movie with a transparent Window Mode (no CVSS) - [CVE-2010-4050](https://cve.now/CVE-2010-4050.md): Opera before 10.63 allows remote attackers to cause a denial of service (memory corruption) by referencing an SVG document in an IMG element (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2010-10-21 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.