# CVEs published 2010-12-17

12 CVEs were published on December 17, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-2602](https://cve.now/CVE-2010-2602.md): Multiple buffer overflows in the PDF distiller component in the BlackBerry Attachment Service in BlackBerry Enterprise Server 5.0.0 through (no CVSS)
- [CVE-2010-2603](https://cve.now/CVE-2010-2603.md): RIM BlackBerry Desktop Software 4.7 through 6.0 for PC, and 1.0 for Mac, uses a weak password to encrypt a database backup file, which makes (no CVSS)
- [CVE-2010-3616](https://cve.now/CVE-2010-3616.md): ISC DHCP server 4.2 before 4.2.0-P2, when configured to use failover partnerships, allows remote attackers to cause a denial of service (com (no CVSS)
- [CVE-2010-3906](https://cve.now/CVE-2010-3906.md): Cross-site scripting (XSS) vulnerability in Gitweb 1.7.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via th (no CVSS)
- [CVE-2010-4115](https://cve.now/CVE-2010-4115.md): HP StorageWorks Modular Smart Array P2000 G3 firmware TS100R011, TS100R025, TS100P002, TS200R005, TS201R014, and TS201R015 installs an undoc (no CVSS)
- [CVE-2010-4262](https://cve.now/CVE-2010-4262.md): Stack-based buffer overflow in Xfig 3.2.4 and 3.2.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitr (no CVSS)
- [CVE-2010-4336](https://cve.now/CVE-2010-4336.md): The cu\_rrd\_create\_file function (src/utils\_rrdcreate.c) in collectd 4.x before 4.9.4 and before 4.10.2 allow remote attackers to cause a den (no CVSS)
- [CVE-2010-4481](https://cve.now/CVE-2010-4481.md): phpMyAdmin before 3.4.0-beta1 allows remote attackers to bypass authentication and obtain sensitive information via a direct request to phpi (no CVSS, phpmyadmin/phpmyadmin)
- [CVE-2010-4495](https://cve.now/CVE-2010-4495.md): Unspecified vulnerability in the ActiveMatrix Runtime component in TIBCO ActiveMatrix Service Grid 3.0.0, 3.0.1, and 3.1.0; ActiveMatrix Ser (no CVSS)
- [CVE-2010-4556](https://cve.now/CVE-2010-4556.md): Stack-based buffer overflow in the SapThemeRepository ActiveX control (sapwdpcd.dll) in SAP NetWeaver Business Client allows remote attacker (no CVSS)
- [CVE-2010-4557](https://cve.now/CVE-2010-4557.md): Buffer overflow in the lm\_tcp service in Invensys Wonderware InBatch 8.1 and 9.0, as used in Invensys Foxboro I/A Series Batch 8.1 and possi (no CVSS)
- [CVE-2010-4558](https://cve.now/CVE-2010-4558.md): phpMyFAQ 2.6.11 and 2.6.12, as distributed between December 4th and December 15th 2010, contains an externally introduced modification (Troj (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-12-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.