# CVEs published 2010-08-16

19 CVEs were published on August 16, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2009-4269](https://cve.now/CVE-2009-4269.md): The password hash generation algorithm in the BUILTIN authentication functionality for Apache Derby before 10.6.1.0 performs a… (no CVSS, org.apache.derby:derby)
- [CVE-2010-3022](https://cve.now/CVE-2010-3022.md): Cross-site scripting (XSS) vulnerability in the Performance logging module in the Devel module 5.x before 5.x-1.3 and 6.x before 6.x-1.21… (no CVSS)
- [CVE-2010-3023](https://cve.now/CVE-2010-3023.md): Multiple cross-site scripting (XSS) vulnerabilities in DiamondList 0.1.6, and possibly earlier, allow remote attackers to inject arbitrary… (no CVSS)
- [CVE-2010-3024](https://cve.now/CVE-2010-3024.md): Multiple cross-site request forgery (CSRF) vulnerabilities in user/main/update\_user in DiamondList 0.1.6, and possibly earlier, allow… (no CVSS)
- [CVE-2010-3025](https://cve.now/CVE-2010-3025.md): Multiple cross-site scripting (XSS) vulnerabilities in Tomaz Muraus Open Blog 1.2.1, and possibly earlier, allow remote attackers to… (no CVSS)
- [CVE-2010-3026](https://cve.now/CVE-2010-3026.md): Cross-site request forgery (CSRF) vulnerability in application/modules/admin/controllers/users.php in Tomaz Muraus Open Blog 1.2.1, and… (no CVSS)
- [CVE-2010-3027](https://cve.now/CVE-2010-3027.md): SQL injection vulnerability in index.php in Tycoon Baseball Script 1.0.9 allows remote attackers to execute arbitrary SQL commands via the… (no CVSS)
- [CVE-2010-3028](https://cve.now/CVE-2010-3028.md): The Aardvertiser component before 2.2.1 for Joomla! uses insecure permissions (777) in unspecified folders, which allows local users to… (no CVSS)
- [CVE-2010-3029](https://cve.now/CVE-2010-3029.md): SQL injection vulnerability in statistics.php in PHPKick 0.8 allows remote attackers to execute arbitrary SQL commands via the gameday… (no CVSS)
- [CVE-2010-1797](https://cve.now/CVE-2010-1797.md): Multiple stack-based buffer overflows in the cff\_decoder\_parse\_charstrings function in the CFF Type2 CharStrings interpreter in… (no CVSS)
- [CVE-2010-1799](https://cve.now/CVE-2010-1799.md): Stack-based buffer overflow in the error-logging functionality in Apple QuickTime before 7.6.7 on Windows allows remote attackers to… (no CVSS)
- [CVE-2010-1886](https://cve.now/CVE-2010-1886.md): Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 SP2 and R2, and Windows 7 allow… (no CVSS)
- [CVE-2010-2576](https://cve.now/CVE-2010-2576.md): Opera before 10.61 does not properly suppress clicks on download dialogs that became visible after a recent tab change, which allows… (no CVSS)
- [CVE-2010-2827](https://cve.now/CVE-2010-2827.md): Cisco IOS 15.1(2)T allows remote attackers to cause a denial of service (resource consumption and TCP outage) via spoofed TCP packets… (no CVSS)
- [CVE-2010-3019](https://cve.now/CVE-2010-3019.md): Heap-based buffer overflow in Opera before 10.61 allows remote attackers to execute arbitrary code or cause a denial of service… (no CVSS)
- [CVE-2010-3020](https://cve.now/CVE-2010-3020.md): The news-feed preview feature in Opera before 10.61 does not properly remove scripts, which allows remote attackers to force subscriptions… (no CVSS)
- [CVE-2010-3021](https://cve.now/CVE-2010-3021.md): Unspecified vulnerability in Opera before 10.61 allows remote attackers to cause a denial of service (CPU consumption and application… (no CVSS)
- [CVE-2010-2577](https://cve.now/CVE-2010-2577.md): Multiple SQL injection vulnerabilities in Pligg before 1.1.1 allow remote attackers to execute arbitrary SQL commands via the title… (no CVSS)
- [CVE-2010-3013](https://cve.now/CVE-2010-3013.md): SQL injection vulnerability in groupadmin.php in Pligg before 1.1.1 allows remote attackers to execute arbitrary SQL commands via the role… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2010-08-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.