# CVEs published 2010-05-27

34 CVEs were published on May 27, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-2092](https://cve.now/CVE-2010-2092.md): SQL injection vulnerability in graph.php in Cacti 0.8.7e and earlier allows remote attackers to execute arbitrary SQL commands via a crafted (no CVSS)
- [CVE-2010-2093](https://cve.now/CVE-2010-2093.md): Use-after-free vulnerability in the request shutdown functionality in PHP 5.2 before 5.2.13 and 5.3 before 5.3.2 allows context-dependent at (no CVSS)
- [CVE-2010-2094](https://cve.now/CVE-2010-2094.md): Multiple format string vulnerabilities in the phar extension in PHP 5.3 before 5.3.2 allow context-dependent attackers to obtain sensitive i (no CVSS)
- [CVE-2010-2095](https://cve.now/CVE-2010-2095.md): SQL injection vulnerability in index.php in CMSQlite 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the c par (no CVSS)
- [CVE-2010-2096](https://cve.now/CVE-2010-2096.md): Directory traversal vulnerability in index.php in CMSQlite 1.2 and earlier allows remote attackers to include and execute arbitrary local fi (no CVSS)
- [CVE-2010-2097](https://cve.now/CVE-2010-2097.md): The (1) iconv\_mime\_decode, (2) iconv\_substr, and (3) iconv\_mime\_encode functions in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow conte (no CVSS)
- [CVE-2010-2098](https://cve.now/CVE-2010-2098.md): Incomplete blacklist vulnerability in usersettings.php in e107 0.7.20 and earlier allows remote attackers to conduct SQL injection attacks v (no CVSS)
- [CVE-2010-2099](https://cve.now/CVE-2010-2099.md): bbcode/php.bb in e107 0.7.20 and earlier does not perform access control checks for all inputs that could contain the php bbcode tag, which (no CVSS)
- [CVE-2010-2100](https://cve.now/CVE-2010-2100.md): The (1) htmlentities, (2) htmlspecialchars, (3) str\_getcsv, (4) http\_build\_query, (5) strpbrk, and (6) strtr functions in PHP 5.2 through 5. (no CVSS)
- [CVE-2010-2101](https://cve.now/CVE-2010-2101.md): The (1) strip\_tags, (2) setcookie, (3) strtok, (4) wordwrap, (5) str\_word\_count, and (6) str\_pad functions in PHP 5.2 through 5.2.13 and 5.3 (no CVSS)
- [CVE-2010-2102](https://cve.now/CVE-2010-2102.md): Buffer overflow in Webby Webserver 1.01 allows remote attackers to execute arbitrary code via a long HTTP GET request. (no CVSS)
- [CVE-2010-2103](https://cve.now/CVE-2010-2103.md): Cross-site scripting (XSS) vulnerability in axis2-admin/axis2-admin/engagingglobally in the administration console in Apache Axis2/Java 1.4. (no CVSS, org.apache.axis2.wso2:axis2)
- [CVE-2010-2104](https://cve.now/CVE-2010-2104.md): Directory traversal vulnerability in Orbit Downloader 3.0.0.4 and 3.0.0.5 allows user-assisted remote attackers to write arbitrary files via (no CVSS)
- [CVE-2009-4134](https://cve.now/CVE-2009-4134.md): Buffer underflow in the rgbimg module in Python 2.5 allows remote attackers to cause a denial of service (application crash) via a large ZSI (no CVSS)
- [CVE-2010-0595](https://cve.now/CVE-2010-0595.md): Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Buildi (no CVSS)
- [CVE-2010-0596](https://cve.now/CVE-2010-0596.md): Unspecified vulnerability in Cisco Mediator Framework 2.2 before 2.2.1.dev.1 and 3.0 before 3.0.9.release.1 on the Cisco Network Building Me (no CVSS)
- [CVE-2010-0597](https://cve.now/CVE-2010-0597.md): Unspecified vulnerability in Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release. (no CVSS)
- [CVE-2010-0598](https://cve.now/CVE-2010-0598.md): Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Buildi (no CVSS)
- [CVE-2010-0599](https://cve.now/CVE-2010-0599.md): Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Buildi (no CVSS)
- [CVE-2010-0600](https://cve.now/CVE-2010-0600.md): Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Buildi (no CVSS)
- [CVE-2010-1296](https://cve.now/CVE-2010-1296.md): Multiple buffer overflows in Adobe Photoshop CS4 before 11.0.2 allow user-assisted remote attackers to execute arbitrary code via a crafted (no CVSS)
- [CVE-2010-1449](https://cve.now/CVE-2010-1449.md): Integer overflow in rgbimgmodule.c in the rgbimg module in Python 2.5 allows remote attackers to have an unspecified impact via a large imag (no CVSS)
- [CVE-2010-1450](https://cve.now/CVE-2010-1450.md): Multiple buffer overflows in the RLE decoder in the rgbimg module in Python 2.5 allow remote attackers to have an unspecified impact via an (no CVSS)
- [CVE-2010-1634](https://cve.now/CVE-2010-1634.md): Multiple integer overflows in audioop.c in the audioop module in Python 2.6, 2.7, 3.1, and 3.2 allow context-dependent attackers to cause a (no CVSS)
- [CVE-2010-1959](https://cve.now/CVE-2010-1959.md): Unspecified vulnerability in HP TestDirector for Quality Center 9.2 before Patch8 allows remote attackers to modify data via unknown vectors (no CVSS)
- [CVE-2010-2089](https://cve.now/CVE-2010-2089.md): The audioop module in Python 2.7 and 3.2 does not verify the relationships between size arguments and byte string lengths, which allows cont (no CVSS)
- [CVE-2010-2090](https://cve.now/CVE-2010-2090.md): The npb\_protocol\_error function in sna V5router64 in IBM Communications Server for Windows 6.1.3 and Communications Server for AIX (aka CSAI (no CVSS)
- [CVE-2010-2091](https://cve.now/CVE-2010-2091.md): Microsoft Outlook Web Access (OWA) 8.2.254.0, when Internet Explorer 7 on Windows Server 2003 is used, does not properly handle the id param (no CVSS)
- [CVE-2010-1459](https://cve.now/CVE-2010-1459.md): The default configuration of ASP.NET in Mono before 2.6.4 has a value of FALSE for the EnableViewStateMac property, which allows remote atta (no CVSS, mono)
- [CVE-2010-2084](https://cve.now/CVE-2010-2084.md): Microsoft ASP.NET 2.0 does not prevent setting the InnerHtml property on a control that inherits from HtmlContainerControl, which allows rem (no CVSS)
- [CVE-2010-2085](https://cve.now/CVE-2010-2085.md): The default configuration of ASP.NET in Microsoft .NET before 1.1 has a value of FALSE for the EnableViewStateMac property, which allows rem (no CVSS)
- [CVE-2010-2086](https://cve.now/CVE-2010-2086.md): Apache MyFaces 1.1.7 and 1.2.8, as used in IBM WebSphere Application Server and other applications, does not properly handle an unencrypted (no CVSS, org.apache.myfaces.core:myfaces-core-module)
- [CVE-2010-2087](https://cve.now/CVE-2010-2087.md): Oracle Mojarra 1.2\_14 and 2.0.2, as used in IBM WebSphere Application Server, Caucho Resin, and other applications, does not properly handle (no CVSS)
- [CVE-2010-2088](https://cve.now/CVE-2010-2088.md): ASP.NET in Microsoft .NET 3.5 does not properly handle an unencrypted view state, which allows remote attackers to conduct cross-site script (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-05-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.