# CVEs published 2010-06-03

17 CVEs were published on June 3, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-2149](https://cve.now/CVE-2010-2149.md): Session fixation vulnerability in Fujitsu e-Pares V01 L01, L03, L10, L20, L30 allows remote attackers to hijack web sessions via unspecified (no CVSS)
- [CVE-2010-2150](https://cve.now/CVE-2010-2150.md): Cross-site scripting (XSS) vulnerability Fujitsu e-Pares V01 L01 allows remote attackers to inject arbitrary web script or HTML via unspecif (no CVSS)
- [CVE-2010-2151](https://cve.now/CVE-2010-2151.md): Cross-site request forgery (CSRF) vulnerability in Fujitsu e-Pares V01 L01 V01 L01, L03, L10, L20, L30, and L40 allows remote attackers to h (no CVSS)
- [CVE-2010-2152](https://cve.now/CVE-2010-2152.md): Unspecified vulnerability in JustSystems Ichitaro 2004 through 2009, Ichitaro Government 2006 through 2009, and Just School 2008 and 2009 al (no CVSS)
- [CVE-2010-2153](https://cve.now/CVE-2010-2153.md): Unrestricted file upload vulnerability in admin/code/tce\_functions\_tcecode\_editor.php in TCExam 10.1.006 and 10.1.007 allows remote attacker (no CVSS)
- [CVE-2010-2154](https://cve.now/CVE-2010-2154.md): Cross-site scripting (XSS) vulnerability in the Search Site in CMScout 2.09, and possibly other versions, allows remote attackers to inject (no CVSS)
- [CVE-2010-2155](https://cve.now/CVE-2010-2155.md): Multiple cross-site scripting (XSS) vulnerabilities in zc/publisher/html.rb in ZoneCheck 2.1.0 allow remote attackers to inject arbitrary we (no CVSS)
- [CVE-2008-7256](https://cve.now/CVE-2008-7256.md): mm/shmem.c in the Linux kernel before 2.6.28-rc8, when strict overcommit is enabled and CONFIG\_SECURITY is disabled, does not properly handl (no CVSS)
- [CVE-2010-0742](https://cve.now/CVE-2010-0742.md): The Cryptographic Message Syntax (CMS) implementation in crypto/cms/cms\_asn1.c in OpenSSL before 0.9.8o and 1.x before 1.0.0a does not prope (no CVSS)
- [CVE-2010-1633](https://cve.now/CVE-2010-1633.md): RSA verification recovery in the EVP\_PKEY\_verify\_recover function in OpenSSL 1.x before 1.0.0a, as used by pkeyutl and possibly other applic (no CVSS)
- [CVE-2010-1643](https://cve.now/CVE-2010-1643.md): mm/shmem.c in the Linux kernel before 2.6.28-rc3, when strict overcommit is enabled, does not properly handle the export of shmemfs objects (no CVSS)
- [CVE-2010-2143](https://cve.now/CVE-2010-2143.md): Directory traversal vulnerability in index.php in Symphony CMS 2.0.7 allows remote attackers to read arbitrary files and possibly have unspe (no CVSS)
- [CVE-2010-2144](https://cve.now/CVE-2010-2144.md): Cross-site scripting (XSS) vulnerability in signinform.php in Zeeways eBay Clone Auction Script allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2010-2145](https://cve.now/CVE-2010-2145.md): Multiple PHP remote file inclusion vulnerabilities in ClearSite Beta 4.50, and possibly other versions, allow remote attackers to execute ar (no CVSS)
- [CVE-2010-2146](https://cve.now/CVE-2010-2146.md): PHP remote file inclusion vulnerability in banned.php in Visitor Logger allows remote attackers to execute arbitrary PHP code via a URL in t (no CVSS)
- [CVE-2010-2147](https://cve.now/CVE-2010-2147.md): Cross-site scripting (XSS) vulnerability in the My Car (com\_mycar) component 1.0 for Joomla! allows remote attackers to inject arbitrary web (no CVSS)
- [CVE-2010-2148](https://cve.now/CVE-2010-2148.md): SQL injection vulnerability in the My Car (com\_mycar) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands vi (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-06-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.