# CVEs published 2010-06-28 23 CVEs were published on June 28, 2010: 0 critical, 0 high. Days are UTC. - [CVE-2010-2507](https://cve.now/CVE-2010-2507.md): Directory traversal vulnerability in the Picasa2Gallery (com\_picasa2gallery) component 1.2.8 and earlier for Joomla! allows remote attackers (no CVSS) - [CVE-2010-2508](https://cve.now/CVE-2010-2508.md): SQL injection vulnerability in user-profile.php in 2daybiz Video Community Portal Script allows remote attackers to execute arbitrary SQL co (no CVSS) - [CVE-2010-2509](https://cve.now/CVE-2010-2509.md): Multiple cross-site scripting (XSS) vulnerabilities in 2daybiz Web Template Software allow remote attackers to inject arbitrary web script o (no CVSS) - [CVE-2010-2510](https://cve.now/CVE-2010-2510.md): SQL injection vulnerability in customize.php in 2daybiz Web Template Software allows remote attackers to execute arbitrary SQL commands via (no CVSS) - [CVE-2010-2511](https://cve.now/CVE-2010-2511.md): SQL injection vulnerability in viewnews.php in 2daybiz Multi Level Marketing (MLM) Software allows remote attackers to execute arbitrary SQL (no CVSS) - [CVE-2010-2512](https://cve.now/CVE-2010-2512.md): SQL injection vulnerability in customprofile.php in 2daybiz Matrimonial Script allows remote attackers to execute arbitrary SQL commands via (no CVSS) - [CVE-2010-2513](https://cve.now/CVE-2010-2513.md): SQL injection vulnerability in the JE Ajax Event Calendar (com\_jeajaxeventcalendar) component 1.0.5 for Joomla! allows remote attackers to e (no CVSS) - [CVE-2010-2514](https://cve.now/CVE-2010-2514.md): Cross-site scripting (XSS) vulnerability in the JFaq (com\_jfaq) component 1.2 for Joomla! allows remote attackers to inject arbitrary web sc (no CVSS) - [CVE-2010-2515](https://cve.now/CVE-2010-2515.md): Multiple SQL injection vulnerabilities in index.php in the JFaq (com\_jfaq) component 1.2 for Joomla!, when magic\_quotes\_gpc is disabled, all (no CVSS) - [CVE-2010-2502](https://cve.now/CVE-2010-2502.md): Multiple directory traversal vulnerabilities in Splunk 4.0 through 4.0.10 and 4.1 through 4.1.1 allow (1) remote attackers to read arbitrary (no CVSS) - [CVE-2010-2503](https://cve.now/CVE-2010-2503.md): Multiple cross-site scripting (XSS) vulnerabilities in Splunk 4.0 through 4.0.10 and 4.1 through 4.1.1 allow remote attackers to inject arbi (no CVSS) - [CVE-2010-2504](https://cve.now/CVE-2010-2504.md): Splunk 4.0 through 4.0.10 and 4.1 through 4.1.1 allows remote authenticated users to obtain sensitive information via HTTP header injection, (no CVSS) - [CVE-2010-2505](https://cve.now/CVE-2010-2505.md): Soft SaschArt SasCAM Webcam Server 2.6.5, 2.7, and earlier allows remote attackers to cause a denial of service (crash) via a large number o (no CVSS) - [CVE-2010-2506](https://cve.now/CVE-2010-2506.md): Cross-site scripting (XSS) vulnerability in debug.cgi in Linksys WAP54Gv3 firmware 3.05.03 and 3.04.03 allows remote attackers to inject arb (no CVSS) - [CVE-2010-0180](https://cve.now/CVE-2010-0180.md): Install/Filesystem.pm in Bugzilla 3.5.1 through 3.6 and 3.7, when use\_suexec is enabled, uses world-readable permissions for the localconfig (no CVSS) - [CVE-2010-1204](https://cve.now/CVE-2010-1204.md): Search.pm in Bugzilla 2.17.1 through 3.2.6, 3.3.1 through 3.4.6, 3.5.1 through 3.6, and 3.7 allows remote attackers to obtain potentially se (no CVSS) - [CVE-2010-1929](https://cve.now/CVE-2010-1929.md): Multiple stack-based buffer overflows in the jclient.\_Java\_novell\_jclient\_JClient\_defineClass@20 function in jclient.dll in the Tomcat web s (no CVSS) - [CVE-2010-1930](https://cve.now/CVE-2010-1930.md): Off-by-one error in Novell iManager 2.7, 2.7.3, and 2.7.3 FTF2 allows remote attackers to cause a denial of service (daemon crash) via a lon (no CVSS) - [CVE-2010-2228](https://cve.now/CVE-2010-2228.md): Cross-site scripting (XSS) vulnerability in the MNET access-control interface in Moodle before 1.8.13 and 1.9.x before 1.9.9 allows remote a (no CVSS) - [CVE-2010-2229](https://cve.now/CVE-2010-2229.md): Multiple cross-site scripting (XSS) vulnerabilities in blog/index.php in Moodle before 1.8.13 and 1.9.x before 1.9.9 allow remote attackers (no CVSS) - [CVE-2010-2230](https://cve.now/CVE-2010-2230.md): The KSES text cleaning filter in lib/weblib.php in Moodle before 1.8.13 and 1.9.x before 1.9.9 does not properly handle vbscript URIs, which (no CVSS, moodle/moodle) - [CVE-2010-2231](https://cve.now/CVE-2010-2231.md): Cross-site request forgery (CSRF) vulnerability in report/overview/report.php in the quiz module in Moodle before 1.8.13 and 1.9.x before 1. (no CVSS) - [CVE-2010-2470](https://cve.now/CVE-2010-2470.md): Install/Filesystem.pm in Bugzilla 3.5.1 through 3.6.1 and 3.7 through 3.7.1, when use\_suexec is enabled, uses world-readable permissions wit (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2010-06-28 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.