# CVEs published 2010-10-26

12 CVEs were published on October 26, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-3227](https://cve.now/CVE-2010-3227.md): Stack-based buffer overflow in the UpdateFrameTitleForDocument method in the CFrameWnd class in mfc42.dll in the Microsoft Foundation Class (no CVSS)
- [CVE-2010-4095](https://cve.now/CVE-2010-4095.md): Directory traversal vulnerability in the FTP client in Serengeti Systems Incorporated Robo-FTP 3.7.3, and probably other versions before 3.7 (no CVSS)
- [CVE-2010-1693](https://cve.now/CVE-2010-1693.md): openibd in OpenFabrics Enterprise Distribution (OFED) 1.5.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp (no CVSS)
- [CVE-2010-2584](https://cve.now/CVE-2010-2584.md): The Upload method in the RealPage Module Upload ActiveX control in Realpage.dll 1.0.0.9 in RealPage Module ActiveX Controls does not properl (no CVSS)
- [CVE-2010-2585](https://cve.now/CVE-2010-2585.md): Multiple buffer overflows in the RealPage Module Upload ActiveX control in Realpage.dll 1.0.0.9 in RealPage Module ActiveX Controls allow re (no CVSS)
- [CVE-2010-2885](https://cve.now/CVE-2010-2885.md): Cross-site scripting (XSS) vulnerability in Adobe RoboHelp 7 and 8, and RoboHelp Server 7 and 8, allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2010-2886](https://cve.now/CVE-2010-2886.md): Multiple cross-site scripting (XSS) vulnerabilities in Adobe RoboHelp 7 and 8, and RoboHelp Server 7 and 8, allow remote attackers to inject (no CVSS)
- [CVE-2010-3491](https://cve.now/CVE-2010-3491.md): The (1) ActiveMatrix Runtime and (2) ActiveMatrix Administrator components in TIBCO ActiveMatrix Service Grid before 2.3.1, ActiveMatrix Ser (no CVSS)
- [CVE-2010-3985](https://cve.now/CVE-2010-3985.md): Cross-site scripting (XSS) vulnerability in HP Operations Orchestration before 9.0, when Internet Explorer 6.0 is used, allows remote attack (no CVSS)
- [CVE-2010-3653](https://cve.now/CVE-2010-3653.md): The Director module (dirapi.dll) in Adobe Shockwave Player before 11.5.9.615 allows remote attackers to execute arbitrary code or cause a de (no CVSS)
- [CVE-2010-3986](https://cve.now/CVE-2010-3986.md): Unspecified vulnerability in HP Virtual Connect Enterprise Manager (VCEM) 6.0 and 6.1 allows remote attackers to read arbitrary files via un (no CVSS)
- [CVE-2010-4094](https://cve.now/CVE-2010-4094.md): The Tomcat server in IBM Rational Quality Manager and Rational Test Lab Manager has a default password for the ADMIN account, which makes it (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-10-26
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.