# CVEs published 2011-01-03

16 CVEs were published on January 3, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2010-1677](https://cve.now/CVE-2010-1677.md): MHonArc 2.6.16 allows remote attackers to cause a denial of service (CPU consumption) via start tags that are placed within other start… (no CVSS)
- [CVE-2010-3448](https://cve.now/CVE-2010-3448.md): drivers/platform/x86/thinkpad\_acpi.c in the Linux kernel before 2.6.34 on ThinkPad devices, when the X.Org X server is used, does not… (no CVSS)
- [CVE-2010-3873](https://cve.now/CVE-2010-3873.md): The X.25 implementation in the Linux kernel before 2.6.36.2 does not properly parse facilities, which allows remote attackers to cause a… (no CVSS)
- [CVE-2010-3875](https://cve.now/CVE-2010-3875.md): The ax25\_getname function in net/ax25/af\_ax25.c in the Linux kernel before 2.6.37-rc2 does not initialize a certain structure, which… (no CVSS)
- [CVE-2010-3876](https://cve.now/CVE-2010-3876.md): net/packet/af\_packet.c in the Linux kernel before 2.6.37-rc2 does not properly initialize certain structure members, which allows local… (no CVSS)
- [CVE-2010-3877](https://cve.now/CVE-2010-3877.md): The get\_name function in net/tipc/socket.c in the Linux kernel before 2.6.37-rc2 does not initialize a certain structure, which allows… (no CVSS)
- [CVE-2010-3907](https://cve.now/CVE-2010-3907.md): Multiple integer overflows in real.c in the Real demuxer plugin in VideoLAN VLC Media Player before 1.1.6 allow remote attackers to cause… (no CVSS)
- [CVE-2010-4162](https://cve.now/CVE-2010-4162.md): Multiple integer overflows in fs/bio.c in the Linux kernel before 2.6.36.2 allow local users to cause a denial of service (system crash)… (no CVSS)
- [CVE-2010-4163](https://cve.now/CVE-2010-4163.md): The blk\_rq\_map\_user\_iov function in block/blk-map.c in the Linux kernel before 2.6.36.2 allows local users to cause a denial of service… (no CVSS)
- [CVE-2010-4164](https://cve.now/CVE-2010-4164.md): Multiple integer underflows in the x25\_parse\_facilities function in net/x25/x25\_facilities.c in the Linux kernel before 2.6.36.2 allow… (no CVSS)
- [CVE-2010-4348](https://cve.now/CVE-2010-4348.md): Cross-site scripting (XSS) vulnerability in admin/upgrade\_unattended.php in MantisBT before 1.2.4 allows remote attackers to inject… (no CVSS)
- [CVE-2010-4349](https://cve.now/CVE-2010-4349.md): admin/upgrade\_unattended.php in MantisBT before 1.2.4 allows remote attackers to obtain sensitive information via an invalid db\_type… (no CVSS)
- [CVE-2010-4350](https://cve.now/CVE-2010-4350.md): Directory traversal vulnerability in admin/upgrade\_unattended.php in MantisBT before 1.2.4 allows remote attackers to include and execute… (no CVSS)
- [CVE-2010-4524](https://cve.now/CVE-2010-4524.md): Cross-site scripting (XSS) vulnerability in lib/mhtxthtml.pl in MHonArc 2.6.16 allows remote attackers to inject arbitrary web script or… (no CVSS)
- [CVE-2010-4536](https://cve.now/CVE-2010-4536.md): Multiple cross-site scripting (XSS) vulnerabilities in KSES, as used in WordPress before 3.0.4, allow remote attackers to inject arbitrary… (no CVSS)
- [CVE-2010-4668](https://cve.now/CVE-2010-4668.md): The blk\_rq\_map\_user\_iov function in block/blk-map.c in the Linux kernel before 2.6.37-rc7 allows local users to cause a denial of service… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2011-01-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.