# CVEs published 2010-11-16 37 CVEs were published on November 16, 2010: 0 critical, 0 high. Days are UTC. - [CVE-2010-4008](https://cve.now/CVE-2010-4008.md): libxml2 before 2.7.8, as used in Google Chrome before 7.0.517.44, Apple Safari 5.0.2 and earlier, and other products, reads from invalid mem (no CVSS) - [CVE-2010-4011](https://cve.now/CVE-2010-4011.md): Dovecot in Apple Mac OS X 10.6.5 10H574 does not properly manage memory for user names, which allows remote authenticated users to read the (no CVSS) - [CVE-2010-4215](https://cve.now/CVE-2010-4215.md): UI/Manage.pm in Foswiki 1.1.0 and 1.1.1 allows remote authenticated users to gain privileges by modifying the GROUP and ALLOWTOPICCHANGE pre (no CVSS) - [CVE-2010-4230](https://cve.now/CVE-2010-4230.md): Stack-based buffer overflow in a certain ActiveX control for the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera (no CVSS) - [CVE-2010-4231](https://cve.now/CVE-2010-4231.md): Directory traversal vulnerability in the web-based administration interface on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Me (no CVSS) - [CVE-2010-4232](https://cve.now/CVE-2010-4232.md): The web-based administration interface on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102 (no CVSS) - [CVE-2010-4233](https://cve.now/CVE-2010-4233.md): The Linux installation on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008 has a defa (no CVSS) - [CVE-2010-4234](https://cve.now/CVE-2010-4234.md): The web server on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008 allows remote atta (no CVSS) - [CVE-2010-4268](https://cve.now/CVE-2010-4268.md): SQL injection vulnerability in the Pulse Infotech Flip Wall (com\_flipwall) component 1.1 for Joomla! allows remote attackers to execute arbi (no CVSS) - [CVE-2010-4269](https://cve.now/CVE-2010-4269.md): SQL injection vulnerability in managechat.php in Collabtive 0.65 allows remote attackers to execute arbitrary SQL commands via the chatstart (no CVSS) - [CVE-2010-4270](https://cve.now/CVE-2010-4270.md): Directory traversal vulnerability in the nBill (com\_netinvoice) component before 2.0.9 standard edition, 2.0.10 lite edition, and 1.2\_10 for (no CVSS) - [CVE-2010-4271](https://cve.now/CVE-2010-4271.md): SQL injection vulnerability in ImpressCMS before 1.2.3 RC2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors (no CVSS) - [CVE-2010-4272](https://cve.now/CVE-2010-4272.md): SQL injection vulnerability in the Pulse Infotech Sponsor Wall (com\_sponsorwall) component 1.1 for Joomla! allows remote attackers to execut (no CVSS) - [CVE-2010-4273](https://cve.now/CVE-2010-4273.md): SQL injection vulnerability in imoveis.php in DescargarVista ACC IMoveis 1.1 allows remote attackers to execute arbitrary SQL commands via t (no CVSS) - [CVE-2010-4274](https://cve.now/CVE-2010-4274.md): reset\_diragent\_keys in the Common agent in IBM Systems Director 6.2.0 has 754 permissions, which allows local users to gain privileges by le (no CVSS) - [CVE-2010-4010](https://cve.now/CVE-2010-4010.md): Integer signedness error in Apple Type Services (ATS) in Apple Mac OS X 10.5.8 allows remote attackers to execute arbitrary code via a craft (no CVSS) - [CVE-2010-1843](https://cve.now/CVE-2010-1843.md): Networking in Apple Mac OS X 10.6.2 through 10.6.4 allows remote attackers to cause a denial of service (NULL pointer dereference and system (no CVSS) - [CVE-2010-1844](https://cve.now/CVE-2010-1844.md): Unspecified vulnerability in Image Capture in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to cause a denial of service (memo (no CVSS) - [CVE-2010-1845](https://cve.now/CVE-2010-1845.md): ImageIO in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (me (no CVSS) - [CVE-2010-1846](https://cve.now/CVE-2010-1846.md): Heap-based buffer overflow in Image RAW in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code (no CVSS) - [CVE-2010-1847](https://cve.now/CVE-2010-1847.md): The kernel in Apple Mac OS X 10.6.x before 10.6.5 does not properly perform memory management associated with terminal devices, which allows (no CVSS) - [CVE-2010-3783](https://cve.now/CVE-2010-3783.md): Password Server in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 does not properly perform replication, which allows remote authenticated u (no CVSS) - [CVE-2010-3784](https://cve.now/CVE-2010-3784.md): The PMPageFormatCreateWithDataRepresentation API in Printing in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 does not properly handle XML (no CVSS) - [CVE-2010-3785](https://cve.now/CVE-2010-3785.md): Buffer overflow in QuickLook in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a (no CVSS) - [CVE-2010-3786](https://cve.now/CVE-2010-3786.md): QuickLook in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corr (no CVSS) - [CVE-2010-3787](https://cve.now/CVE-2010-3787.md): Heap-based buffer overflow in QuickTime in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a (no CVSS) - [CVE-2010-3788](https://cve.now/CVE-2010-3788.md): QuickTime in Apple Mac OS X 10.6.x before 10.6.5 accesses uninitialized memory locations during processing of JP2 image data, which allows r (no CVSS) - [CVE-2010-3789](https://cve.now/CVE-2010-3789.md): QuickTime in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corr (no CVSS) - [CVE-2010-3790](https://cve.now/CVE-2010-3790.md): QuickTime in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corr (no CVSS) - [CVE-2010-3791](https://cve.now/CVE-2010-3791.md): Buffer overflow in QuickTime in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of s (no CVSS) - [CVE-2010-3792](https://cve.now/CVE-2010-3792.md): Integer signedness error in QuickTime in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a de (no CVSS) - [CVE-2010-3793](https://cve.now/CVE-2010-3793.md): QuickTime in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corr (no CVSS) - [CVE-2010-3794](https://cve.now/CVE-2010-3794.md): QuickTime in Apple Mac OS X 10.6.x before 10.6.5 accesses uninitialized memory locations during processing of FlashPix image data, which all (no CVSS) - [CVE-2010-3795](https://cve.now/CVE-2010-3795.md): QuickTime in Apple Mac OS X 10.6.x before 10.6.5 accesses uninitialized memory locations during processing of GIF image data, which allows r (no CVSS) - [CVE-2010-3796](https://cve.now/CVE-2010-3796.md): Safari RSS in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 does not block Java applets in an RSS feed, which allows remote attackers to ob (no CVSS) - [CVE-2010-3797](https://cve.now/CVE-2010-3797.md): Cross-site scripting (XSS) vulnerability in Wiki Server in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote authenticated users (no CVSS) - [CVE-2010-3798](https://cve.now/CVE-2010-3798.md): Heap-based buffer overflow in xar in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2010-11-16 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.