# CVEs published 2010-07-28

18 CVEs were published on July 28, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-2904](https://cve.now/CVE-2010-2904.md): Multiple cross-site scripting (XSS) vulnerabilities in the System Landscape Directory (SLD) component 6.4 through 7.02 in SAP NetWeaver allo (no CVSS)
- [CVE-2010-2905](https://cve.now/CVE-2010-2905.md): SQL injection vulnerability in info.php in ScriptsFeed and BrotherScripts (BS) Scripts Directory allows remote attackers to execute arbitrar (no CVSS)
- [CVE-2010-2906](https://cve.now/CVE-2010-2906.md): SQL injection vulnerability in articlesdetails.php in ScriptsFeed and BrotherScripts (BS) Scripts Directory allows remote attackers to execu (no CVSS)
- [CVE-2010-2907](https://cve.now/CVE-2010-2907.md): SQL injection vulnerability in the Huru Helpdesk (com\_huruhelpdesk) component for Joomla! allows remote attackers to execute arbitrary SQL c (no CVSS)
- [CVE-2010-2908](https://cve.now/CVE-2010-2908.md): SQL injection vulnerability in the Joomdle (com\_joomdle) component 0.24 and earlier for Joomla! allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2010-2909](https://cve.now/CVE-2010-2909.md): SQL injection vulnerability in ttvideo.php in the TTVideo (com\_ttvideo) component 1.0 for Joomla! allows remote attackers to execute arbitra (no CVSS)
- [CVE-2010-2910](https://cve.now/CVE-2010-2910.md): SQL injection vulnerability in the Ozio Gallery (com\_oziogallery) component for Joomla! allows remote attackers to execute arbitrary SQL com (no CVSS)
- [CVE-2010-2911](https://cve.now/CVE-2010-2911.md): SQL injection vulnerability in index.php in Kayako eSupport 3.70.02 allows remote attackers to execute arbitrary SQL commands via the newsid (no CVSS)
- [CVE-2010-2912](https://cve.now/CVE-2010-2912.md): SQL injection vulnerability in index.php in Kayako eSupport 3.70.02 allows remote attackers to execute arbitrary SQL commands via the \_a par (no CVSS)
- [CVE-2010-1452](https://cve.now/CVE-2010-1452.md): The (1) mod\_cache and (2) mod\_dav modules in the Apache HTTP Server 2.2.x before 2.2.16 allow remote attackers to cause a denial of service (no CVSS)
- [CVE-2010-2896](https://cve.now/CVE-2010-2896.md): IBM FileNet Content Manager (CM) 4.0.0, 4.0.1, 4.5.0, and 4.5.1 before FP4 does not properly manage the InheritParentPermissions setting dur (no CVSS)
- [CVE-2010-2897](https://cve.now/CVE-2010-2897.md): Google Chrome before 5.0.375.125 does not properly mitigate an unspecified flaw in the Windows kernel, which has unknown impact and attack v (no CVSS)
- [CVE-2010-2898](https://cve.now/CVE-2010-2898.md): Google Chrome before 5.0.375.125 does not properly mitigate an unspecified flaw in the GNU C Library, which has unknown impact and attack ve (no CVSS)
- [CVE-2010-2899](https://cve.now/CVE-2010-2899.md): Unspecified vulnerability in the layout implementation in Google Chrome before 5.0.375.125 allows remote attackers to obtain sensitive infor (no CVSS)
- [CVE-2010-2900](https://cve.now/CVE-2010-2900.md): Google Chrome before 5.0.375.125 does not properly handle a large canvas, which has unspecified impact and remote attack vectors. (no CVSS)
- [CVE-2010-2901](https://cve.now/CVE-2010-2901.md): The rendering implementation in Google Chrome before 5.0.375.125 allows remote attackers to cause a denial of service (memory corruption) or (no CVSS)
- [CVE-2010-2902](https://cve.now/CVE-2010-2902.md): The SVG implementation in Google Chrome before 5.0.375.125 allows remote attackers to cause a denial of service (memory corruption) or possi (no CVSS)
- [CVE-2010-2903](https://cve.now/CVE-2010-2903.md): Google Chrome before 5.0.375.125 performs unexpected truncation and improper eliding of hostnames, which has unspecified impact and remote a (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-07-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.