# Vulnerabilities published in 2010


- [CVE-2010-10014](https://insights.sbomify.com/CVE-2010-10014/): Odin Secure FTP <= 4.1 Stack Buffer Overflow via LIST Response (high 8.7)
- [CVE-2010-10013](https://insights.sbomify.com/CVE-2010-10013/): AjaXplorer < 2.6 checkInstall.php Unauthenticated RCE (critical 9.3)
- [CVE-2010-10012](https://insights.sbomify.com/CVE-2010-10012/): httpdASM 0.92 Path Traversal (high 8.7)
- [CVE-2010-10011](https://insights.sbomify.com/CVE-2010-10011/): Acritum Femitter Server path traversal (medium 4.3)
- [CVE-2010-10010](https://insights.sbomify.com/CVE-2010-10010/): Stars Alliance PsychoStats login.php cross site scripting (low 3.5)
- [CVE-2010-10009](https://insights.sbomify.com/CVE-2010-10009/): frioux ptome sql injection (medium 5.5)
- [CVE-2010-10008](https://insights.sbomify.com/CVE-2010-10008/): simplesamlphp simplesamlphp-module-openidprovider trust.tpl.php cross site scripting (low 3.5)
- [CVE-2010-10007](https://insights.sbomify.com/CVE-2010-10007/): lierdakil click-reminder BaseAction.php db_query sql injection (medium 5.5)
- [CVE-2010-10006](https://insights.sbomify.com/CVE-2010-10006/): michaelliao jopenid OpenIdManager.java getAuthentication timing discrepancy (low 2.6)
- [CVE-2010-10004](https://insights.sbomify.com/CVE-2010-10004/): Information Cards Module cross site scripting (low 3.5)
- [CVE-2010-10003](https://insights.sbomify.com/CVE-2010-10003/): gesellix titlelink plugin_content_title.php sql injection (medium 5.5)
- [CVE-2010-10002](https://insights.sbomify.com/CVE-2010-10002/): SimpleSAMLphp simplesamlphp-module-openid OpenID consumer.php cross site scripting (low 3.1)
- [CVE-2010-10001](https://insights.sbomify.com/CVE-2010-10001/): Shemes GrabIt NZB Date Parser denial of service (medium 5.3)
- [CVE-2010-1000](https://insights.sbomify.com/CVE-2010-1000/): Path traversal in kde:kde sc (medium 5.8)
- [CVE-2010-0999](https://insights.sbomify.com/CVE-2010-0999/): Path traversal in freedownloadmanager:free download manager (high 7.1)
- [CVE-2010-0998](https://insights.sbomify.com/CVE-2010-0998/): Memory corruption in freedownloadmanager:free download manager (critical 10.0)
- [CVE-2010-0997](https://insights.sbomify.com/CVE-2010-0997/): Cross-site scripting in e107:e107 (low 3.5)
- [CVE-2010-0996](https://insights.sbomify.com/CVE-2010-0996/): File upload in e107:e107 (medium 6.0)
- [CVE-2010-0995](https://insights.sbomify.com/CVE-2010-0995/): Memory corruption in tonec:internet download manager (critical 9.3)
- [CVE-2010-0994](https://insights.sbomify.com/CVE-2010-0994/): Memory corruption in visualizationlibrary:visualization library (medium 6.8)
- [CVE-2010-0993](https://insights.sbomify.com/CVE-2010-0993/): File upload in pulsecms:pulse cms (medium 6.0)
- [CVE-2010-0992](https://insights.sbomify.com/CVE-2010-0992/): Cross-site request forgery in pulsecms:pulse cms (medium 6.8)
- [CVE-2010-0991](https://insights.sbomify.com/CVE-2010-0991/): Memory corruption in enlightenment:imlib2 (medium 6.8)
- [CVE-2010-0990](https://insights.sbomify.com/CVE-2010-0990/): Memory corruption in creative:autoupdate (critical 10.0)
- [CVE-2010-0989](https://insights.sbomify.com/CVE-2010-0989/): Path traversal in pulsecms:pulse cms (medium 5.5)
- [CVE-2010-0988](https://insights.sbomify.com/CVE-2010-0988/): Code injection in pulsecms:pulse cms (medium 6.0)
- [CVE-2010-0987](https://insights.sbomify.com/CVE-2010-0987/): Memory corruption in adobe:shockwave player (high 8.8)
- [CVE-2010-0986](https://insights.sbomify.com/CVE-2010-0986/): Memory corruption in adobe:shockwave player (high 8.8)
- [CVE-2010-0985](https://insights.sbomify.com/CVE-2010-0985/): Path traversal in chris simon:com abbrev (high 7.5)
- [CVE-2010-0984](https://insights.sbomify.com/CVE-2010-0984/): Information disclosure in acidcat:acidcat cms (medium 5.0)
- [CVE-2010-0983](https://insights.sbomify.com/CVE-2010-0983/): Code injection in utilo:rezervi (medium 6.8)
- [CVE-2010-0982](https://insights.sbomify.com/CVE-2010-0982/): Path traversal in joomlamo:com cartweberp (medium 4.3)
- [CVE-2010-0981](https://insights.sbomify.com/CVE-2010-0981/): SQL injection in templateplazza:com tpjobs (high 7.5)
- [CVE-2010-0980](https://insights.sbomify.com/CVE-2010-0980/): SQL injection in mitchell sleeper:l4d stats (high 7.5)
- [CVE-2010-0979](https://insights.sbomify.com/CVE-2010-0979/): Cross-site scripting in obsession-design:image-gallery (medium 4.3)
- [CVE-2010-0978](https://insights.sbomify.com/CVE-2010-0978/): Information disclosure in kmsoft:guestbook (medium 5.0)
- [CVE-2010-0977](https://insights.sbomify.com/CVE-2010-0977/): Information disclosure in pordus:pd portal (medium 5.0)
- [CVE-2010-0976](https://insights.sbomify.com/CVE-2010-0976/): Misconfiguration in acidcat:acidcat cms (high 7.5)
- [CVE-2010-0975](https://insights.sbomify.com/CVE-2010-0975/): Code injection in phpcityportal:phpcityportal (high 7.5)
- [CVE-2010-0974](https://insights.sbomify.com/CVE-2010-0974/): SQL injection in phpcityportal:phpcityportal (high 7.5)
- [CVE-2010-0973](https://insights.sbomify.com/CVE-2010-0973/): SQL injection in scripteverkauf:domain verkaus and auktions portal (high 7.5)
- [CVE-2010-0972](https://insights.sbomify.com/CVE-2010-0972/): Path traversal in g4j.laoneo:com gcalendar (high 7.5)
- [CVE-2010-0971](https://insights.sbomify.com/CVE-2010-0971/): Cross-site scripting in atutor:atutor (low 2.1)
- [CVE-2010-0970](https://insights.sbomify.com/CVE-2010-0970/): SQL injection in jorik berkepas:phpmylogon (high 7.5)
- [CVE-2010-0969](https://insights.sbomify.com/CVE-2010-0969/): Denial of service in nlnetlabs:unbound (medium 5.0)
- [CVE-2010-0968](https://insights.sbomify.com/CVE-2010-0968/): SQL injection in geekhelps:admp (high 7.5)
- [CVE-2010-0967](https://insights.sbomify.com/CVE-2010-0967/): Path traversal in geekhelps:admp (medium 5.1)
- [CVE-2010-0966](https://insights.sbomify.com/CVE-2010-0966/): Code injection in dzcp:dev\!l\'z clanportal (medium 6.8)
- [CVE-2010-0965](https://insights.sbomify.com/CVE-2010-0965/): Information disclosure in jevci.net:jevci siparis formu scripti (medium 5.0)
- [CVE-2010-0964](https://insights.sbomify.com/CVE-2010-0964/): SQL injection in media-products:eros webkatalog (high 7.5)
- [CVE-2010-0963](https://insights.sbomify.com/CVE-2010-0963/): Cross-site scripting in yuri d\'elia:dl (medium 4.3)
- [CVE-2010-0962](https://insights.sbomify.com/CVE-2010-0962/): Server-side request forgery in apple:airport express (medium 5.0)
- [CVE-2010-0961](https://insights.sbomify.com/CVE-2010-0961/): Memory corruption in ibm:aix (high 7.2)
- [CVE-2010-0960](https://insights.sbomify.com/CVE-2010-0960/): Memory corruption in ibm:aix (high 7.2)
- [CVE-2010-0959](https://insights.sbomify.com/CVE-2010-0959/): Cross-site scripting in ibm:enovia smarteam (medium 4.3)
- [CVE-2010-0958](https://insights.sbomify.com/CVE-2010-0958/): Path traversal in thomas perez:tribisur (medium 6.8)
- [CVE-2010-0957](https://insights.sbomify.com/CVE-2010-0957/): Path traversal in saskia bruckner:saskias shopsystem (medium 6.8)
- [CVE-2010-0956](https://insights.sbomify.com/CVE-2010-0956/): SQL injection in opencart:opencart (high 7.5)
- [CVE-2010-0955](https://insights.sbomify.com/CVE-2010-0955/): SQL injection in media-products:bild flirt community (high 7.5)
- [CVE-2010-0954](https://insights.sbomify.com/CVE-2010-0954/): SQL injection in preprojects:pre e-learning portal (high 7.5)
- [CVE-2010-0953](https://insights.sbomify.com/CVE-2010-0953/): Path traversal in phpcoin:phpcoin (medium 6.8)
- [CVE-2010-0952](https://insights.sbomify.com/CVE-2010-0952/): SQL injection in insanevisions:onecms (medium 6.8)
- [CVE-2010-0951](https://insights.sbomify.com/CVE-2010-0951/): SQL injection in dev4u:dev4u cms (high 7.5)
- [CVE-2010-0950](https://insights.sbomify.com/CVE-2010-0950/): SQL injection in natychmiast-cms:natychmiast-cms (high 7.5)
- [CVE-2010-0949](https://insights.sbomify.com/CVE-2010-0949/): Cross-site scripting in natychmiast-cms:natychmiast-cms (medium 4.3)
- [CVE-2010-0948](https://insights.sbomify.com/CVE-2010-0948/): SQL injection in bfs.kilu:bigforum (medium 6.8)
- [CVE-2010-0947](https://insights.sbomify.com/CVE-2010-0947/): Cross-site scripting in bbsmax:bbsmax (medium 4.3)
- [CVE-2010-0946](https://insights.sbomify.com/CVE-2010-0946/): SQL injection in kiss-software:com ksadvertiser (high 7.5)
- [CVE-2010-0945](https://insights.sbomify.com/CVE-2010-0945/): SQL injection in hotbrackets:com hotbrackets (high 7.5)
- [CVE-2010-0944](https://insights.sbomify.com/CVE-2010-0944/): Path traversal in thorsten riess:com jcollection (medium 5.0)
- [CVE-2010-0943](https://insights.sbomify.com/CVE-2010-0943/): Path traversal in joomlart:com jashowcase (medium 5.0)
- [CVE-2010-0942](https://insights.sbomify.com/CVE-2010-0942/): Path traversal in jvideodirect:com jvideodirect (medium 5.0)
- [CVE-2010-0941](https://insights.sbomify.com/CVE-2010-0941/): Cross-site scripting in web-site-development:etek systems hit counter (medium 4.3)
- [CVE-2010-0940](https://insights.sbomify.com/CVE-2010-0940/): Cross-site scripting in sanusart:simple php guestbook (medium 4.3)
- [CVE-2010-0939](https://insights.sbomify.com/CVE-2010-0939/): Information disclosure in visialis:abb forum (medium 5.0)
- [CVE-2010-0938](https://insights.sbomify.com/CVE-2010-0938/): Cross-site scripting in todoomasters:todoo forum (medium 4.3)
- [CVE-2010-0937](https://insights.sbomify.com/CVE-2010-0937/): Other in visualizationlibrary:visualization library (high 7.5)
- [CVE-2010-0936](https://insights.sbomify.com/CVE-2010-0936/): Cross-site scripting in d-link:dkvm-ip8 (medium 4.3)
- [CVE-2010-0935](https://insights.sbomify.com/CVE-2010-0935/): Privilege escalation in perforce:perforce server (medium 4.6)
- [CVE-2010-0934](https://insights.sbomify.com/CVE-2010-0934/): Command injection in perforce:perforce server (high 7.1)
- [CVE-2010-0933](https://insights.sbomify.com/CVE-2010-0933/): Path traversal in perforce:perforce server (medium 6.8)
- [CVE-2010-0932](https://insights.sbomify.com/CVE-2010-0932/): Null dereference in perforce:perforce server (medium 5.0)
- [CVE-2010-0931](https://insights.sbomify.com/CVE-2010-0931/): Denial of service in perforce:perforce server (medium 5.0)
- [CVE-2010-0930](https://insights.sbomify.com/CVE-2010-0930/): Denial of service in perforce:perforce server (medium 5.0)
- [CVE-2010-0929](https://insights.sbomify.com/CVE-2010-0929/): Denial of service in perforce:perforce server (medium 5.0)
- [CVE-2010-0928](https://insights.sbomify.com/CVE-2010-0928/): Weak cryptography in openssl:openssl (medium 4.0)
- [CVE-2010-0927](https://insights.sbomify.com/CVE-2010-0927/): Cross-site scripting in ibm:lotus domino (medium 4.3)
- [CVE-2010-0926](https://insights.sbomify.com/CVE-2010-0926/): Path traversal in samba:samba (low 3.5)
- [CVE-2010-0925](https://insights.sbomify.com/CVE-2010-0925/): Denial of service in apple:safari (medium 5.0)
- [CVE-2010-0924](https://insights.sbomify.com/CVE-2010-0924/): Denial of service in apple:safari (medium 5.0)
- [CVE-2010-0923](https://insights.sbomify.com/CVE-2010-0923/): Race condition in kde:kde sc (medium 6.9)
- [CVE-2010-0922](https://insights.sbomify.com/CVE-2010-0922/): Denial of service in ibm:aix (high 7.8)
- [CVE-2010-0921](https://insights.sbomify.com/CVE-2010-0921/): Cross-site request forgery in ibm:lotus inotes (medium 6.8)
- [CVE-2010-0920](https://insights.sbomify.com/CVE-2010-0920/): Cross-site scripting in ibm:lotus inotes (medium 4.3)
- [CVE-2010-0919](https://insights.sbomify.com/CVE-2010-0919/): Memory corruption in ibm:domino web access (high 7.6)
- [CVE-2010-0918](https://insights.sbomify.com/CVE-2010-0918/): Other in ibm:lotus inotes (critical 10.0)
- [CVE-2010-0917](https://insights.sbomify.com/CVE-2010-0917/): Memory corruption in microsoft:windows 2000 (high 7.6)
- [CVE-2010-0916](https://insights.sbomify.com/CVE-2010-0916/): Other in oracle:opensolaris (medium 6.2)
- [CVE-2010-0915](https://insights.sbomify.com/CVE-2010-0915/): Other in oracle:e-business suite (medium 5.5)
- [CVE-2010-0914](https://insights.sbomify.com/CVE-2010-0914/): Other in oracle:sun convergence (medium 5.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2010/page/42/