# CVEs published 2010-12-29 24 CVEs were published on December 29, 2010: 0 critical, 0 high. Days are UTC. - [CVE-2010-4607](https://cve.now/CVE-2010-4607.md): Multiple cross-site scripting (XSS) vulnerabilities in Habari 0.6.5, when register\_globals is enabled, allow remote attackers to inject… (no CVSS) - [CVE-2010-4608](https://cve.now/CVE-2010-4608.md): Habari 0.6.5 allows remote attackers to obtain sensitive information via a direct request to (1) header.php and (2) comments\_items.php in… (no CVSS) - [CVE-2010-4609](https://cve.now/CVE-2010-4609.md): SQL injection vulnerability in index.php in Html-edit CMS 3.1.8 allows remote attackers to execute arbitrary SQL commands via the nuser… (no CVSS) - [CVE-2010-4610](https://cve.now/CVE-2010-4610.md): Cross-site scripting (XSS) vulnerability in index.php in Html-edit CMS 3.1.8 allows remote attackers to inject arbitrary web script or… (no CVSS) - [CVE-2010-4611](https://cve.now/CVE-2010-4611.md): Html-edit CMS 3.1.8 allows remote attackers to obtain sensitive information via a direct request to (1) pages.php and (2) menu.php in… (no CVSS) - [CVE-2010-4612](https://cve.now/CVE-2010-4612.md): Multiple SQL injection vulnerabilities in index.php in Hycus CMS 1.0.3, when magic\_quotes\_gpc is disabled, allow remote attackers to… (no CVSS) - [CVE-2010-4613](https://cve.now/CVE-2010-4613.md): Multiple directory traversal vulnerabilities in Hycus CMS 1.0.3 allow remote attackers to include and execute arbitrary local files via a .. (no CVSS) - [CVE-2010-4614](https://cve.now/CVE-2010-4614.md): SQL injection vulnerability in item.php in Ero Auktion 2010 allows remote attackers to execute arbitrary SQL commands via the id… (no CVSS) - [CVE-2010-4615](https://cve.now/CVE-2010-4615.md): Multiple SQL injection vulnerabilities in Oto Galeri Sistemi 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) arac… (no CVSS) - [CVE-2010-4616](https://cve.now/CVE-2010-4616.md): Cross-site scripting (XSS) vulnerability in modules/content/admin/content.php in ImpressCMS 1.2.3 Final, and possibly other versions… (no CVSS, impresscms/impresscms) - [CVE-2010-4617](https://cve.now/CVE-2010-4617.md): Directory traversal vulnerability in the JotLoader (com\_jotloader) component 2.2.1 for Joomla! allows remote attackers to read arbitrary… (no CVSS) - [CVE-2010-4618](https://cve.now/CVE-2010-4618.md): Cross-site scripting (XSS) vulnerability in the Algis Info aiContactSafe component before 2.0.14 for Joomla! allows remote attackers to… (no CVSS) - [CVE-2010-4619](https://cve.now/CVE-2010-4619.md): SQL injection vulnerability in profil.php in Mafya Oyun Scrpti (aka Mafia Game Script) allows remote attackers to execute arbitrary SQL… (no CVSS) - [CVE-2010-3859](https://cve.now/CVE-2010-3859.md): Multiple integer signedness errors in the TIPC implementation in the Linux kernel before 2.6.36.2 allow local users to gain privileges via… (no CVSS) - [CVE-2010-3874](https://cve.now/CVE-2010-3874.md): Heap-based buffer overflow in the bcm\_connect function in net/can/bcm.c (aka the Broadcast Manager) in the Controller Area Network (CAN)… (no CVSS) - [CVE-2010-4343](https://cve.now/CVE-2010-4343.md): drivers/scsi/bfa/bfa\_core.c in the Linux kernel before 2.6.35 does not initialize a certain port data structure, which allows local users… (no CVSS) - [CVE-2010-4565](https://cve.now/CVE-2010-4565.md): The bcm\_connect function in net/can/bcm.c (aka the Broadcast Manager) in the Controller Area Network (CAN) implementation in the Linux… (no CVSS) - [CVE-2010-4600](https://cve.now/CVE-2010-4600.md): Dojo Toolkit, as used in the Web client in IBM Rational ClearQuest 7.1.1.x before 7.1.1.4 and 7.1.2.x before 7.1.2.1, allows remote… (no CVSS) - [CVE-2010-4601](https://cve.now/CVE-2010-4601.md): Multiple unspecified vulnerabilities in IBM Rational ClearQuest 7.0.x before 7.0.1.11, 7.1.1.x before 7.1.1.4, and 7.1.2.x before 7.1.2.1… (no CVSS) - [CVE-2010-4602](https://cve.now/CVE-2010-4602.md): The Web client in IBM Rational ClearQuest 7.1.1.x before 7.1.1.4 and 7.1.2.x before 7.1.2.1 allows remote authenticated users to bypass… (no CVSS) - [CVE-2010-4603](https://cve.now/CVE-2010-4603.md): IBM Rational ClearQuest 7.0.x before 7.0.1.11, 7.1.1.x before 7.1.1.4, and 7.1.2.x before 7.1.2.1 does not prevent modification of… (no CVSS) - [CVE-2010-4604](https://cve.now/CVE-2010-4604.md): Stack-based buffer overflow in the GeneratePassword function in dsmtca (aka the Trusted Communications Agent or TCA) in the backup-archive… (no CVSS) - [CVE-2010-4605](https://cve.now/CVE-2010-4605.md): Unspecified vulnerability in the backup-archive client in IBM Tivoli Storage Manager (TSM) 5.3.x before 5.3.6.10, 5.4.x before 5.4.3.4… (no CVSS) - [CVE-2010-4606](https://cve.now/CVE-2010-4606.md): Unspecified vulnerability in the Space Management client in the Hierarchical Storage Management (HSM) component in IBM Tivoli Storage… (no CVSS) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/archive/2010-12-29 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.