# CVEs published 2010-12-07 26 CVEs were published on December 7, 2010: 0 critical, 0 high. Days are UTC. - [CVE-2010-4150](https://cve.now/CVE-2010-4150.md): Double free vulnerability in the imap\_do\_open function in the IMAP extension (ext/imap/php\_imap.c) in PHP 5.2 before 5.2.15 and 5.3 before 5 (no CVSS) - [CVE-2010-4170](https://cve.now/CVE-2010-4170.md): The staprun runtime tool in SystemTap 1.3 does not properly clear the environment before executing modprobe, which allows local users to gai (no CVSS) - [CVE-2010-4171](https://cve.now/CVE-2010-4171.md): The staprun runtime tool in SystemTap 1.3 does not verify that a module to unload was previously loaded by SystemTap, which allows local use (no CVSS) - [CVE-2010-4176](https://cve.now/CVE-2010-4176.md): plymouth-pretrigger.sh in dracut and udev, when running on Fedora 13 and 14, sets weak permissions for the /dev/systty device file, which al (no CVSS) - [CVE-2010-4179](https://cve.now/CVE-2010-4179.md): The installation documentation for Red Hat Enterprise Messaging, Realtime and Grid (MRG) 1.3 recommends that Condor should be configured so (no CVSS) - [CVE-2010-4482](https://cve.now/CVE-2010-4482.md): Unspecified vulnerability in Google Chrome before 8.0.552.215 allows remote attackers to bypass the pop-up blocker via unknown vectors. (no CVSS) - [CVE-2010-4483](https://cve.now/CVE-2010-4483.md): Google Chrome before 8.0.552.215 does not properly restrict read access to videos derived from CANVAS elements, which allows remote attacker (no CVSS) - [CVE-2010-4484](https://cve.now/CVE-2010-4484.md): Google Chrome before 8.0.552.215 does not properly handle HTML5 databases, which allows attackers to cause a denial of service (application (no CVSS) - [CVE-2010-4485](https://cve.now/CVE-2010-4485.md): Google Chrome before 8.0.552.215 does not properly restrict the generation of file dialogs, which allows remote attackers to cause a denial (no CVSS) - [CVE-2010-4486](https://cve.now/CVE-2010-4486.md): Use-after-free vulnerability in Google Chrome before 8.0.552.215 allows remote attackers to cause a denial of service or possibly have unspe (no CVSS) - [CVE-2010-4487](https://cve.now/CVE-2010-4487.md): Incomplete blacklist vulnerability in Google Chrome before 8.0.552.215 on Linux and Mac OS X allows remote attackers to have an unspecified (no CVSS) - [CVE-2010-4488](https://cve.now/CVE-2010-4488.md): Google Chrome before 8.0.552.215 does not properly handle HTTP proxy authentication, which allows remote attackers to cause a denial of serv (no CVSS) - [CVE-2010-4489](https://cve.now/CVE-2010-4489.md): libvpx, as used in Google Chrome before 8.0.552.215 and possibly other products, allows remote attackers to cause a denial of service (out-o (no CVSS) - [CVE-2010-4490](https://cve.now/CVE-2010-4490.md): Google Chrome before 8.0.552.215 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other (no CVSS) - [CVE-2010-4491](https://cve.now/CVE-2010-4491.md): Google Chrome before 8.0.552.215 does not properly restrict privileged extensions, which allows remote attackers to cause a denial of servic (no CVSS) - [CVE-2010-4492](https://cve.now/CVE-2010-4492.md): Use-after-free vulnerability in Google Chrome before 8.0.552.215 allows remote attackers to cause a denial of service or possibly have unspe (no CVSS) - [CVE-2010-4493](https://cve.now/CVE-2010-4493.md): Use-after-free vulnerability in Google Chrome before 8.0.552.215 allows remote attackers to cause a denial of service via vectors related to (no CVSS) - [CVE-2010-4494](https://cve.now/CVE-2010-4494.md): Double free vulnerability in libxml2 2.7.8 and other versions, as used in Google Chrome before 8.0.552.215 and other products, allows remote (no CVSS) - [CVE-2010-4246](https://cve.now/CVE-2010-4246.md): Multiple cross-site scripting (XSS) vulnerabilities in graph.php in pfSense 1.2.3 and 2 beta 4 allow remote attackers to inject arbitrary we (no CVSS) - [CVE-2010-4257](https://cve.now/CVE-2010-4257.md): SQL injection vulnerability in the do\_trackbacks function in wp-includes/comment.php in WordPress before 3.0.2 allows remote authenticated u (no CVSS) - [CVE-2010-4259](https://cve.now/CVE-2010-4259.md): Stack-based buffer overflow in FontForge 20100501 allows remote attackers to cause a denial of service (application crash) or possibly execu (no CVSS) - [CVE-2010-4260](https://cve.now/CVE-2010-4260.md): Multiple unspecified vulnerabilities in pdf.c in libclamav in ClamAV before 0.96.5 allow remote attackers to cause a denial of service (appl (no CVSS) - [CVE-2010-4261](https://cve.now/CVE-2010-4261.md): Off-by-one error in the icon\_cb function in pe\_icons.c in libclamav in ClamAV before 0.96.5 allows remote attackers to cause a denial of ser (no CVSS) - [CVE-2010-4330](https://cve.now/CVE-2010-4330.md): Directory traversal vulnerability in includes/controller.php in Pulse CMS Basic before 1.2.9 allows remote attackers to include and execute (no CVSS) - [CVE-2010-4412](https://cve.now/CVE-2010-4412.md): Multiple cross-site scripting (XSS) vulnerabilities in pfSense 2 beta 4 allow remote attackers to inject arbitrary web script or HTML via (1 (no CVSS) - [CVE-2010-4479](https://cve.now/CVE-2010-4479.md): Unspecified vulnerability in pdf.c in libclamav in ClamAV before 0.96.5 allows remote attackers to cause a denial of service (application cr (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2010-12-07 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.