# CVEs published 2010-10-25

16 CVEs were published on October 25, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-3156](https://cve.now/CVE-2010-3156.md): Untrusted search path vulnerability in K2 K2Editor before 1.5.9 allows local users to gain privileges via a Trojan horse executable file in (no CVSS)
- [CVE-2010-3159](https://cve.now/CVE-2010-3159.md): Untrusted search path vulnerability in Explzh 5.67 and earlier allows local users to gain privileges via a Trojan horse executable file in t (no CVSS)
- [CVE-2010-3160](https://cve.now/CVE-2010-3160.md): Untrusted search path vulnerability in Archive Decoder 1.23 and earlier allows local users to gain privileges via a Trojan horse executable (no CVSS)
- [CVE-2010-3161](https://cve.now/CVE-2010-3161.md): Untrusted search path vulnerability in TeraPad before 1.00 allows local users to gain privileges via a Trojan horse DLL in the current worki (no CVSS)
- [CVE-2010-3162](https://cve.now/CVE-2010-3162.md): Untrusted search path vulnerability in Apsaly before 3.74 allows local users to gain privileges via a Trojan horse executable file in the cu (no CVSS)
- [CVE-2010-3163](https://cve.now/CVE-2010-3163.md): Untrusted search path vulnerability in Fenrir Sleipnir before 2.9.5 and Grani before 4.4 allows local users to gain privileges via a Trojan (no CVSS)
- [CVE-2010-3164](https://cve.now/CVE-2010-3164.md): Untrusted search path vulnerability in Fenrir Sleipnir 2.9.4 and earlier and Grani 4.3 and earlier allows local users to gain privileges via (no CVSS)
- [CVE-2010-3165](https://cve.now/CVE-2010-3165.md): Untrusted search path vulnerability in Yokka NoEditor 1.33.1.1 and earlier, OuiEditor 1.6.1.1 and earlier, UnEditor 1.10.1.2 and earlier, De (no CVSS)
- [CVE-2010-3710](https://cve.now/CVE-2010-3710.md): Stack consumption vulnerability in the filter\_var function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3, when FILTER\_VALIDATE\_EMAIL m (no CVSS)
- [CVE-2010-3714](https://cve.now/CVE-2010-3714.md): The jumpUrl (aka access tracking) implementation in tslib/class.tslib\_fe.php in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x bef (no CVSS, typo3/cms)
- [CVE-2010-3715](https://cve.now/CVE-2010-3715.md): Multiple cross-site scripting (XSS) vulnerabilities in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 allow remote at (no CVSS, typo3/cms-backend)
- [CVE-2010-3716](https://cve.now/CVE-2010-3716.md): The be\_user\_creation task in TYPO3 4.2.x before 4.2.15 and 4.3.x before 4.3.7 allows remote authenticated users to gain privileges via a cra (no CVSS)
- [CVE-2010-3717](https://cve.now/CVE-2010-3717.md): The t3lib\_div::validEmail function in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 does not properly restrict input (no CVSS)
- [CVE-2010-4068](https://cve.now/CVE-2010-4068.md): Unspecified vulnerability in the Extension Manager in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 allows remote au (no CVSS)
- [CVE-2010-4069](https://cve.now/CVE-2010-4069.md): Stack-based buffer overflow in IBM Informix Dynamic Server (IDS) 7.x through 7.31, 9.x through 9.40, 10.00 before 10.00.xC10, 11.10 before 1 (no CVSS)
- [CVE-2010-4070](https://cve.now/CVE-2010-4070.md): Integer overflow in librpc.dll in portmap.exe (aka the ISM Portmapper service) in ISM before 2.20.TC1.117 in IBM Informix Dynamic Server (ID (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-10-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.