# CVEs published 2010-05-24

16 CVEs were published on May 24, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2006-7239](https://cve.now/CVE-2006-7239.md): The \_gnutls\_x509\_oid2mac\_algorithm function in lib/gnutls\_algorithms.c in GnuTLS before 1.4.2 allows remote attackers to cause a denial of s (no CVSS)
- [CVE-2010-1688](https://cve.now/CVE-2010-1688.md): Stack-based buffer overflow in 2BrightSparks SyncBack Freeware 3.2.20.0, and possibly other versions before 3.2.21, allows user-assisted rem (no CVSS)
- [CVE-2010-2027](https://cve.now/CVE-2010-2027.md): Mathematica 7, when running on Linux, allows local users to overwrite arbitrary files via a symlink attack on (1) files within /tmp/MathLink (no CVSS)
- [CVE-2010-2028](https://cve.now/CVE-2010-2028.md): Buffer overflow in k23productions TFTPUtil GUI (aka TFTPGUI) 1.4.5 allows remote attackers to cause a denial of service (crash) and possibly (no CVSS)
- [CVE-2010-2029](https://cve.now/CVE-2010-2029.md): Cybozu Office 7 Ktai and Dotsales do not properly restrict access to the login page, which allows remote attackers to bypass authentication (no CVSS)
- [CVE-2010-2030](https://cve.now/CVE-2010-2030.md): Cross-site scripting (XSS) vulnerability in the External Link Page module 5.x before 5.x-1.0 and 6.x before 6.x-1.2 for Drupal allows remote (no CVSS)
- [CVE-2010-2031](https://cve.now/CVE-2010-2031.md): KAVSafe.sys 2010.4.14.609 and earlier, as used in Kingsoft Webshield 3.5.1.2 and earlier, allows local users to overwrite arbitrary kernel m (no CVSS)
- [CVE-2010-2032](https://cve.now/CVE-2010-2032.md): Multiple cross-site scripting (XSS) vulnerabilities in resin-admin/digest.php in Caucho Technology Resin Professional 3.1.5, 3.1.10, 4.0.6, (no CVSS)
- [CVE-2010-2012](https://cve.now/CVE-2010-2012.md): SQL injection vulnerability in function.php in MigasCMS 1.1, when magic\_quotes\_gpc is disabled, allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2010-2013](https://cve.now/CVE-2010-2013.md): Cross-site scripting (XSS) vulnerability in cp/edit\_email.php in LiSK CMS 4.4 allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2010-2014](https://cve.now/CVE-2010-2014.md): Cross-site scripting (XSS) vulnerability in cp/list\_content.php in LiSK CMS 4.4 allows remote attackers to inject arbitrary web script or HT (no CVSS)
- [CVE-2010-2015](https://cve.now/CVE-2010-2015.md): Multiple SQL injection vulnerabilities in LiSK CMS 4.4 allow remote attackers to execute arbitrary SQL commands via (1) the id parameter in (no CVSS)
- [CVE-2010-2016](https://cve.now/CVE-2010-2016.md): SQL injection vulnerability in details.php in Iceberg CMS allows remote attackers to execute arbitrary SQL commands via the p\_id parameter. (no CVSS)
- [CVE-2010-2017](https://cve.now/CVE-2010-2017.md): Cross-site scripting (XSS) vulnerability in hasil-pencarian.html in Lokomedia CMS 1.4.1 and 2.0 allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2010-2018](https://cve.now/CVE-2010-2018.md): Directory traversal vulnerability in downlot.php in Lokomedia CMS 1.4.1 and 2.0 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2010-2019](https://cve.now/CVE-2010-2019.md): SQL injection vulnerability in downlot.php in Lokomedia CMS 1.4.1, when magic\_quotes\_gpc is disabled, allows remote attackers to execute arb (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-05-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.