# CVEs published 2010-07-13

71 CVEs were published on July 13, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2009-3762](https://cve.now/CVE-2009-3762.md): Unspecified vulnerability in Oracle OpenSSO Enterprise 8.0 allows remote attackers to affect integrity via unknown vectors. (no CVSS)
- [CVE-2010-0083](https://cve.now/CVE-2010-0083.md): Unspecified vulnerability in Oracle OpenSolaris 8, 9, and 10 allows remote attackers to affect confidentiality, integrity, and availability (no CVSS)
- [CVE-2010-0835](https://cve.now/CVE-2010-0835.md): Unspecified vulnerability in the Wireless component in Oracle Fusion Middleware 10.1.2.3 allows remote attackers to affect integrity via unk (no CVSS)
- [CVE-2010-0836](https://cve.now/CVE-2010-0836.md): Unspecified vulnerability in the Oracle Knowledge Management component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.2 allows remot (no CVSS)
- [CVE-2010-0873](https://cve.now/CVE-2010-0873.md): Unspecified vulnerability in the Data Server component in Oracle TimesTen In-Memory Database 7.0.6.0 allows remote attackers to affect confi (no CVSS)
- [CVE-2010-0892](https://cve.now/CVE-2010-0892.md): Unspecified vulnerability in the Application Express component in Oracle Database Server 3.2.0.00.27 allows remote attackers to affect integ (no CVSS)
- [CVE-2010-0898](https://cve.now/CVE-2010-0898.md): Unspecified vulnerability in Oracle Secure Backup 10.3.0.1 allows remote attackers to affect confidentiality, integrity, and availability vi (no CVSS)
- [CVE-2010-0899](https://cve.now/CVE-2010-0899.md): Unspecified vulnerability in Oracle Secure Backup 10.3.0.1 allows remote authenticated users to affect confidentiality, integrity, and avail (no CVSS)
- [CVE-2010-0900](https://cve.now/CVE-2010-0900.md): Unspecified vulnerability in the Network Layer component in Oracle Database Server 9.2.0.8, 10.1.0.5, 10.2.0.4, 11.1.0.7, and 11.2.0.1, when (no CVSS)
- [CVE-2010-0901](https://cve.now/CVE-2010-0901.md): Unspecified vulnerability in the Export component in Oracle Database Server 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, 11.1.0.7, and 11.2.0.1 a (no CVSS)
- [CVE-2010-0902](https://cve.now/CVE-2010-0902.md): Unspecified vulnerability in the Oracle OLAP component in Oracle Database Server 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, 11.1.0.7, and 11.2. (no CVSS)
- [CVE-2010-0903](https://cve.now/CVE-2010-0903.md): Unspecified vulnerability in the Net Foundation Layer component in Oracle Database Server 9.2.0.8, 10.1.0.5, 10.2.0.4, 11.1.0.7, and 11.2.0. (no CVSS)
- [CVE-2010-0904](https://cve.now/CVE-2010-0904.md): Unspecified vulnerability in Oracle Secure Backup 10.3.0.1 allows remote attackers to affect integrity via unknown vectors. (no CVSS)
- [CVE-2010-0905](https://cve.now/CVE-2010-0905.md): Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 11.5.10.2 and 12.0.4 allows remote attacke (no CVSS)
- [CVE-2010-0906](https://cve.now/CVE-2010-0906.md): Unspecified vulnerability in Oracle Secure Backup 10.3.0.1 allows remote authenticated users to affect confidentiality, integrity, and avail (no CVSS)
- [CVE-2010-0907](https://cve.now/CVE-2010-0907.md): Unspecified vulnerability in Oracle Secure Backup 10.3.0.1 allows remote attackers to affect confidentiality, integrity, and availability vi (no CVSS)
- [CVE-2010-0908](https://cve.now/CVE-2010-0908.md): Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.1.2 allows remote attackers to affect (no CVSS)
- [CVE-2010-0909](https://cve.now/CVE-2010-0909.md): Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.2 allows rem (no CVSS)
- [CVE-2010-0910](https://cve.now/CVE-2010-0910.md): Unspecified vulnerability in the Data Server component in Oracle TimesTen In-Memory Database 7.0.6.0 and 11.2.1.4.1 allows remote attackers (no CVSS)
- [CVE-2010-0911](https://cve.now/CVE-2010-0911.md): Unspecified vulnerability in the Listener component in Oracle Database Server 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, 11.1.0.7, and 11.2.0.1 (no CVSS)
- [CVE-2010-0912](https://cve.now/CVE-2010-0912.md): Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.2 allows rem (no CVSS)
- [CVE-2010-0913](https://cve.now/CVE-2010-0913.md): Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.2 allows remot (no CVSS)
- [CVE-2010-0914](https://cve.now/CVE-2010-0914.md): Unspecified vulnerability in Oracle Sun Convergence 1.0 allows remote attackers to affect confidentiality via unknown vectors related to Mai (no CVSS)
- [CVE-2010-0915](https://cve.now/CVE-2010-0915.md): Unspecified vulnerability in the Oracle Advanced Product Catalog component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.2 allows r (no CVSS)
- [CVE-2010-0916](https://cve.now/CVE-2010-0916.md): Unspecified vulnerability in Oracle OpenSolaris 10 allows local users to affect confidentiality, integrity, and availability via unknown vec (no CVSS)
- [CVE-2010-2370](https://cve.now/CVE-2010-2370.md): Unspecified vulnerability in the Oracle Business Process Management component in Oracle Fusion Middleware 5.7 MP3, 6.0 MP5, and 10.3 MP2 all (no CVSS)
- [CVE-2010-2371](https://cve.now/CVE-2010-2371.md): Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1.1 allows local users t (no CVSS)
- [CVE-2010-2372](https://cve.now/CVE-2010-2372.md): Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1.1 allows remote attack (no CVSS)
- [CVE-2010-2373](https://cve.now/CVE-2010-2373.md): Unspecified vulnerability in the Console component in Oracle Enterprise Manager Grid Control 10.1.0.6 and 10.2.0.5 allows remote attackers t (no CVSS)
- [CVE-2010-2374](https://cve.now/CVE-2010-2374.md): Unspecified vulnerability in Solaris Studio 12 update 1 allows local users to affect confidentiality and integrity via unknown vectors. (no CVSS)
- [CVE-2010-2375](https://cve.now/CVE-2010-2375.md): Package/Privilege: Plugins for Apache, Sun and IIS web servers Unspecified vulnerability in the WebLogic Server component in Oracle Fusion M (no CVSS)
- [CVE-2010-2376](https://cve.now/CVE-2010-2376.md): Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows local users to affect confidentiality and integrity via unknown vectors rela (no CVSS)
- [CVE-2010-2377](https://cve.now/CVE-2010-2377.md): Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft and JDEdwards Suite 8.49.27 and 8.50.10 al (no CVSS)
- [CVE-2010-2378](https://cve.now/CVE-2010-2378.md): Unspecified vulnerability in the PeopleSoft Enterprise CRM component in Oracle PeopleSoft and JDEdwards Suite CRM 9.0 Bundle #28 and CRM 9.1 (no CVSS)
- [CVE-2010-2379](https://cve.now/CVE-2010-2379.md): Unspecified vulnerability in the PeopleSoft Enterprise HCM - Time & Labor component in Oracle PeopleSoft and JDEdwards Suite HCM 9.0 Bundle (no CVSS)
- [CVE-2010-2380](https://cve.now/CVE-2010-2380.md): Unspecified vulnerability in the PeopleSoft Enterprise FSCM component in Oracle PeopleSoft and JDEdwards Suite SCM 8.9 Bundle #37, SCM 9.0 B (no CVSS)
- [CVE-2010-2381](https://cve.now/CVE-2010-2381.md): Unspecified vulnerability in the Application Server Control component in Oracle Fusion Middleware 10.1.2.3 and 10.1.4.0.1 allows remote auth (no CVSS)
- [CVE-2010-2382](https://cve.now/CVE-2010-2382.md): Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows local users to affect confidentiality and integrity via unknown vectors. (no CVSS)
- [CVE-2010-2383](https://cve.now/CVE-2010-2383.md): Unspecified vulnerability in Oracle Solaris 8, 9, and 10, and OpenSolaris, allows local users to affect confidentiality and integrity, relat (no CVSS)
- [CVE-2010-2384](https://cve.now/CVE-2010-2384.md): Unspecified vulnerability in Oracle Solaris 9 and 10 allows local users to affect confidentiality and integrity via unknown vectors related (no CVSS)
- [CVE-2010-2385](https://cve.now/CVE-2010-2385.md): Unspecified vulnerability in Oracle Sun Java System Web Proxy Server 4.0.13 allows remote attackers to affect confidentiality and integrity (no CVSS)
- [CVE-2010-2386](https://cve.now/CVE-2010-2386.md): Unspecified vulnerability in Oracle Solaris 8, 9, and 10, and OpenSolaris, allows local users to affect availability via unknown vectors rel (no CVSS)
- [CVE-2010-2392](https://cve.now/CVE-2010-2392.md): Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect integrity and availability, related to ZFS. (no CVSS)
- [CVE-2010-2393](https://cve.now/CVE-2010-2393.md): Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect availability, related to RPC. (no CVSS)
- [CVE-2010-2394](https://cve.now/CVE-2010-2394.md): Unspecified vulnerability in Oracle Solaris 10 allows local users to affect availability, related to TCP/IP. (no CVSS)
- [CVE-2010-2397](https://cve.now/CVE-2010-2397.md): Unspecified vulnerability in Oracle Sun Java System Application Server 8.0, 8.1, and 8.2; and GlassFish Enterprise Server 2.1.1; allows loca (no CVSS)
- [CVE-2010-2398](https://cve.now/CVE-2010-2398.md): Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft and JDEdwards Suite HCM 9.0 Bundle #12 allows remo (no CVSS)
- [CVE-2010-2399](https://cve.now/CVE-2010-2399.md): Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect availability via unknown vectors related to Kern (no CVSS)
- [CVE-2010-2400](https://cve.now/CVE-2010-2400.md): Unspecified vulnerability in Oracle Solaris 9 and 10, and OpenSolaris, allows local users to affect availability via unknown vectors related (no CVSS)
- [CVE-2010-2401](https://cve.now/CVE-2010-2401.md): Unspecified vulnerability in the PeopleSoft Enterprise HCM - eProfile Mgr component in Oracle PeopleSoft and JDEdwards Suite HCM 9.0 Bundle (no CVSS)
- [CVE-2010-2402](https://cve.now/CVE-2010-2402.md): Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft and JDEdwards Suite 8.49.27 allows remote (no CVSS)
- [CVE-2010-2403](https://cve.now/CVE-2010-2403.md): Unspecified vulnerability in the PeopleSoft Enterprise Campus Solutions component in Oracle PeopleSoft and JDEdwards Suite Campus Solutions (no CVSS)
- [CVE-2009-3763](https://cve.now/CVE-2009-3763.md): Unspecified vulnerability in the Access Manager / OpenSSO component in Oracle OpenSSO Enterprise 7.1, 7, 2005Q4, and 8.0 allows remote attac (no CVSS)
- [CVE-2009-3764](https://cve.now/CVE-2009-3764.md): Unspecified vulnerability in the OpenSSO component in Oracle OpenSSO Enterprise 8.0 allows remote attackers to affect integrity via unknown (no CVSS)
- [CVE-2010-0081](https://cve.now/CVE-2010-0081.md): Unspecified vulnerability in the Application Server Control component in Oracle Fusion Middleware 10.1.2.3 and 10.1.4.0.1 allows remote auth (no CVSS)
- [CVE-2010-2008](https://cve.now/CVE-2010-2008.md): MySQL before 5.1.48 allows remote authenticated users with alter database privileges to cause a denial of service (server crash and database (no CVSS)
- [CVE-2010-2693](https://cve.now/CVE-2010-2693.md): FreeBSD 7.1 through 8.1-PRERELEASE does not copy the read-only flag when creating a duplicate mbuf buffer reference, which allows local user (no CVSS)
- [CVE-2010-2714](https://cve.now/CVE-2010-2714.md): SQL injection vulnerability in photos/index.php in TCW PHP Album 1.0 allows remote attackers to execute arbitrary SQL commands via the album (no CVSS)
- [CVE-2010-2715](https://cve.now/CVE-2010-2715.md): Cross-site scripting (XSS) vulnerability in photos/index.php in TCW PHP Album 1.0 allows remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2010-2716](https://cve.now/CVE-2010-2716.md): Multiple SQL injection vulnerabilities in PsNews 1.3 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) nd (no CVSS)
- [CVE-2010-2717](https://cve.now/CVE-2010-2717.md): Cross-site scripting (XSS) vulnerability in manager/login.php in CruxSoftware CruxCMS 3.0, and possibly earlier, allows remote attackers to (no CVSS)
- [CVE-2010-2718](https://cve.now/CVE-2010-2718.md): Multiple cross-site scripting (XSS) vulnerabilities in CruxSoftware CruxPA 2.00, and possibly earlier, allow remote attackers to inject arbi (no CVSS)
- [CVE-2010-2719](https://cve.now/CVE-2010-2719.md): SQL injection vulnerability in show.php in phpaaCms 0.3.1 UTF-8, and possibly other versions, allows remote attackers to execute arbitrary S (no CVSS)
- [CVE-2010-2720](https://cve.now/CVE-2010-2720.md): SQL injection vulnerability in list.php in phpaaCms 0.3.1 UTF-8, and possibly other versions, allows remote attackers to execute arbitrary S (no CVSS)
- [CVE-2010-2721](https://cve.now/CVE-2010-2721.md): SQL injection vulnerability in index.php in RightInPoint Lyrics Script 3.0 allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2010-2722](https://cve.now/CVE-2010-2722.md): Cross-site scripting (XSS) vulnerability in index.php in RightInPoint Lyrics Script 3.0 allows remote attackers to inject arbitrary web scri (no CVSS)
- [CVE-2010-2723](https://cve.now/CVE-2010-2723.md): Cross-site scripting (XSS) vulnerability in LISTSERV 15 and 16 allows remote attackers to inject arbitrary web script or HTML via the T para (no CVSS)
- [CVE-2010-2724](https://cve.now/CVE-2010-2724.md): Cross-site scripting (XSS) vulnerability in the Hierarchical Select module 5.x before 5.x-3.2 and 6.x before 6.x-3.2 for Drupal allows remot (no CVSS)
- [CVE-2010-2227](https://cve.now/CVE-2010-2227.md): Apache Tomcat 5.5.0 through 5.5.29, 6.0.0 through 6.0.27, and 7.0.0 beta does not properly handle an invalid Transfer-Encoding header, which (no CVSS, org.apache.tomcat:tomcat)
- [CVE-2010-2522](https://cve.now/CVE-2010-2522.md): The mipv6 daemon in UMIP 0.4 does not verify that netlink messages originated in the kernel, which allows local users to spoof netlink socke (no CVSS)
- [CVE-2010-2523](https://cve.now/CVE-2010-2523.md): Multiple buffer overflows in ha.c in the mipv6 daemon in UMIP 0.4 allow remote attackers to have an unspecified impact via a crafted (1) ND\_ (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-07-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.