# CVEs published 2010-11-09

19 CVEs were published on November 9, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2008-7265](https://cve.now/CVE-2008-7265.md): The pr\_data\_xfer function in ProFTPD before 1.3.2rc3 allows remote authenticated users to cause a denial of service (CPU consumption) via an (no CVSS)
- [CVE-2010-0783](https://cve.now/CVE-2010-0783.md): Cross-site scripting (XSS) vulnerability in the Administrative Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.35 and 7.0 (no CVSS)
- [CVE-2010-0784](https://cve.now/CVE-2010-0784.md): Cross-site scripting (XSS) vulnerability in the Administrative Console in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.13 allows (no CVSS)
- [CVE-2010-0785](https://cve.now/CVE-2010-0785.md): Cross-site request forgery (CSRF) vulnerability in the Administrative Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.35 (no CVSS)
- [CVE-2010-0786](https://cve.now/CVE-2010-0786.md): The Web Services Security component in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.13 does not properly implement the Java API f (no CVSS)
- [CVE-2010-2635](https://cve.now/CVE-2010-2635.md): SQL injection vulnerability in IBM WebSphere Commerce 6.0 before 6.0.0.10 allows remote authenticated users to execute arbitrary SQL command (no CVSS)
- [CVE-2010-2636](https://cve.now/CVE-2010-2636.md): Multiple cross-site scripting (XSS) vulnerabilities in sample store pages in IBM WebSphere Commerce 7.0 before 7.0.0.1 allow remote attacker (no CVSS)
- [CVE-2010-3039](https://cve.now/CVE-2010-3039.md): /usr/local/cm/bin/pktCap\_protectData in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6, 7, and 8 allows remote auth (no CVSS)
- [CVE-2010-3040](https://cve.now/CVE-2010-3040.md): Multiple stack-based buffer overflows in agent.exe in Setup Manager in Cisco Intelligent Contact Manager (ICM) before 7.0 allow remote attac (no CVSS)
- [CVE-2010-3077](https://cve.now/CVE-2010-3077.md): Cross-site scripting (XSS) vulnerability in util/icon\_browser.php in the Horde Application Framework before 3.3.9 allows remote attackers to (no CVSS)
- [CVE-2010-3694](https://cve.now/CVE-2010-3694.md): Cross-site request forgery (CSRF) vulnerability in the Horde Application Framework before 3.3.9 allows remote attackers to hijack the authen (no CVSS)
- [CVE-2010-3867](https://cve.now/CVE-2010-3867.md): Multiple directory traversal vulnerabilities in the mod\_site\_misc module in ProFTPD before 1.3.3c allow remote authenticated users to create (no CVSS)
- [CVE-2010-3871](https://cve.now/CVE-2010-3871.md): Cross-site scripting (XSS) vulnerability in blocktype/groupviews/theme/raw/groupviews.tpl in Mahara before 1.3.3 allows remote attackers to (no CVSS)
- [CVE-2010-4216](https://cve.now/CVE-2010-4216.md): IBM Tivoli Directory Server (TDS) 6.0.0.x before 6.0.0.8-TIV-ITDS-IF0007 does not properly handle invalid buffer references in LDAP BER requ (no CVSS)
- [CVE-2010-4217](https://cve.now/CVE-2010-4217.md): Use-after-free vulnerability in the proxy server in IBM Tivoli Directory Server (TDS) 6.0.0.x before 6.0.0.8-TIV-ITDS-IF0007 and 6.1.x befor (no CVSS)
- [CVE-2010-4218](https://cve.now/CVE-2010-4218.md): Unspecified vulnerability in Web Services in IBM ENOVIA 6 has unknown impact and attack vectors, related to a system that becomes "exposed t (no CVSS)
- [CVE-2010-4219](https://cve.now/CVE-2010-4219.md): Cross-site scripting (XSS) vulnerability in SemanticTagService.js in IBM WebSphere Portal 6.1.0.1 allows remote attackers to inject arbitrar (no CVSS)
- [CVE-2010-4220](https://cve.now/CVE-2010-4220.md): Cross-site scripting (XSS) vulnerability in the Integrated Solution Console in the Administrative Console component in IBM WebSphere Applica (no CVSS)
- [CVE-2010-4221](https://cve.now/CVE-2010-4221.md): Multiple stack-based buffer overflows in the pr\_netio\_telnet\_gets function in netio.c in ProFTPD before 1.3.3c allow remote attackers to exe (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-11-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.