# CVEs published 2010-06-07

23 CVEs were published on June 7, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-1636](https://cve.now/CVE-2010-1636.md): The btrfs\_ioctl\_clone function in fs/btrfs/ioctl.c in the btrfs functionality in the Linux kernel 2.6.29 through 2.6.32, and possibly other (no CVSS)
- [CVE-2010-1647](https://cve.now/CVE-2010-1647.md): Cross-site scripting (XSS) vulnerability in MediaWiki 1.15 before 1.15.4 and 1.16 before 1.16 beta 3 allows remote attackers to inject arbit (no CVSS)
- [CVE-2010-1648](https://cve.now/CVE-2010-1648.md): Cross-site request forgery (CSRF) vulnerability in the login interface in MediaWiki 1.15 before 1.15.4 and 1.16 before 1.16 beta 3 allows re (no CVSS)
- [CVE-2010-1649](https://cve.now/CVE-2010-1649.md): Multiple cross-site scripting (XSS) vulnerabilities in the back end in Joomla! 1.5 through 1.5.17 allow remote attackers to inject arbitrary (no CVSS, joomla/joomla-cms)
- [CVE-2010-1848](https://cve.now/CVE-2010-1848.md): Directory traversal vulnerability in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote authenticated users to bypass intended tab (no CVSS)
- [CVE-2010-1849](https://cve.now/CVE-2010-1849.md): The my\_net\_skip\_rest function in sql/net\_serv.cc in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote attackers to cause a denial (no CVSS)
- [CVE-2010-1850](https://cve.now/CVE-2010-1850.md): Buffer overflow in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote authenticated users to execute arbitrary code via a COM\_FIEL (no CVSS)
- [CVE-2010-2060](https://cve.now/CVE-2010-2060.md): The put command functionality in beanstalkd 1.4.5 and earlier allows remote attackers to execute arbitrary Beanstalk commands via the body i (no CVSS)
- [CVE-2010-2159](https://cve.now/CVE-2010-2159.md): Dameng DM Database Server allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via uns (no CVSS)
- [CVE-2010-2190](https://cve.now/CVE-2010-2190.md): The (1) trim, (2) ltrim, (3) rtrim, and (4) substr\_replace functions in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent (no CVSS)
- [CVE-2010-2191](https://cve.now/CVE-2010-2191.md): The (1) parse\_str, (2) preg\_match, (3) unpack, and (4) pack functions; the (5) ZEND\_FETCH\_RW, (6) ZEND\_CONCAT, and (7) ZEND\_ASSIGN\_CONCAT op (no CVSS)
- [CVE-2010-1439](https://cve.now/CVE-2010-1439.md): yum-rhn-plugin in Red Hat Network Client Tools (aka rhn-client-tools) on Red Hat Enterprise Linux (RHEL) 5 and Fedora uses world-readable pe (no CVSS)
- [CVE-2010-1646](https://cve.now/CVE-2010-1646.md): The secure path feature in env.c in sudo 1.3.1 through 1.6.9p22 and 1.7.0 through 1.7.2p6 does not properly handle an environment that conta (no CVSS)
- [CVE-2010-1904](https://cve.now/CVE-2010-1904.md): SQL injection vulnerability in EMC RSA Key Manager (RKM) C Client 1.5.x allows user-assisted remote attackers to execute arbitrary SQL comma (no CVSS)
- [CVE-2010-1962](https://cve.now/CVE-2010-1962.md): Unspecified vulnerability in HP StorageWorks Storage Mirroring 5 before 5.2.1.870.0 allows remote attackers to execute arbitrary code via un (no CVSS)
- [CVE-2010-1963](https://cve.now/CVE-2010-1963.md): Cross-site scripting (XSS) vulnerability in HP ServiceCenter allows remote attackers to inject arbitrary web script or HTML via unspecified (no CVSS)
- [CVE-2010-2023](https://cve.now/CVE-2010-2023.md): transports/appendfile.c in Exim before 4.72, when a world-writable sticky-bit mail directory is used, does not verify the st\_nlink field of (no CVSS)
- [CVE-2010-2024](https://cve.now/CVE-2010-2024.md): transports/appendfile.c in Exim before 4.72, when MBX locking is enabled, allows local users to change permissions of arbitrary files or cre (no CVSS)
- [CVE-2010-2157](https://cve.now/CVE-2010-2157.md): Unspecified vulnerability in CA ARCserve Backup r11.5 SP4, r12.0 SP2, and r12.5 SP1 on Windows allows local users to obtain sensitive inform (no CVSS)
- [CVE-2010-2158](https://cve.now/CVE-2010-2158.md): Multiple cross-site scripting (XSS) vulnerabilities in the Storm module 5.x and 6.x before 6.x-1.33 for Drupal allow remote authenticated us (no CVSS)
- [CVE-2010-2053](https://cve.now/CVE-2010-2053.md): emesenelib/ProfileManager.py in emesene before 1.6.2 allows local users to overwrite arbitrary files via a symlink attack on the emsnpic tem (no CVSS)
- [CVE-2010-2058](https://cve.now/CVE-2010-2058.md): setup.py in Prewikka 0.9.14 installs prewikka.conf with world-readable permissions, which allows local users to obtain the SQL database pass (no CVSS)
- [CVE-2010-2156](https://cve.now/CVE-2010-2156.md): ISC DHCP 4.1 before 4.1.1-P1 and 4.0 before 4.0.2-P1 allows remote attackers to cause a denial of service (server exit) via a zero-length cl (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-06-07
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.