# CVEs published 2010-11-03

9 CVEs were published on November 3, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-4006](https://cve.now/CVE-2010-4006.md): Multiple SQL injection vulnerabilities in search.php in WSN Links 5.0.x before 5.0.81, 5.1.x before 5.1.51, and 6.0.x before 6.0.1 allow rem (no CVSS)
- [CVE-2010-4151](https://cve.now/CVE-2010-4151.md): SQL injection vulnerability in misc.php in DeluxeBB 1.3, and possibly earlier, when magic\_quotes\_gpc is disabled, allows remote attackers to (no CVSS)
- [CVE-2010-4152](https://cve.now/CVE-2010-4152.md): SQL injection vulnerability in catalog/index.shtml in 4site CMS 2.6, and possibly earlier, allows remote attackers to execute arbitrary SQL (no CVSS)
- [CVE-2010-4153](https://cve.now/CVE-2010-4153.md): Directory traversal vulnerability in CrossFTP Pro 1.65a, and probably earlier, allows remote FTP servers to write arbitrary files via a "..\\ (no CVSS)
- [CVE-2010-4154](https://cve.now/CVE-2010-4154.md): Directory traversal vulnerability in Rhino Software, Inc. (no CVSS)
- [CVE-2010-4155](https://cve.now/CVE-2010-4155.md): Multiple cross-site scripting (XSS) vulnerabilities in eXV2 CMS 2.10 allow remote attackers to inject arbitrary web script or HTML via the ( (no CVSS)
- [CVE-2010-2583](https://cve.now/CVE-2010-2583.md): Stack-based buffer overflow in SonicWALL SSL-VPN End-Point Interrogator/Installer ActiveX control (Aventail.EPInstaller) before 10.5.2 and 1 (no CVSS)
- [CVE-2010-3914](https://cve.now/CVE-2010-3914.md): Untrusted search path vulnerability in VIM Development Group GVim before 7.3.034, and possibly other versions before 7.3.46, allows local us (no CVSS)
- [CVE-2010-3977](https://cve.now/CVE-2010-3977.md): Multiple cross-site scripting (XSS) vulnerabilities in wp-content/plugins/cforms/lib\_ajax.php in cforms WordPress plugin 11.5 allow remote a (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-11-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.
