# CVEs published 2010-08-09 20 CVEs were published on August 9, 2010: 0 critical, 0 high. Days are UTC. - [CVE-2010-0834](https://cve.now/CVE-2010-0834.md): The base-files package before 5.0.0ubuntu7.1 on Ubuntu 9.10 and before 5.0.0ubuntu20.10.04.2 on Ubuntu 10.04 LTS, as shipped on Dell Latitud (no CVSS) - [CVE-2010-2474](https://cve.now/CVE-2010-2474.md): JBoss Enterprise Service Bus (ESB) before 4.7 CP02 in JBoss Enterprise SOA Platform before 5.0.2 does not properly consider the security dom (no CVSS) - [CVE-2010-2493](https://cve.now/CVE-2010-2493.md): The default configuration of the deployment descriptor (aka web.xml) in picketlink-sts.war in (1) the security\_saml quickstart, (2) the webs (no CVSS) - [CVE-2010-2574](https://cve.now/CVE-2010-2574.md): Cross-site scripting (XSS) vulnerability in manage\_proj\_cat\_add.php in MantisBT 1.2.2 allows remote authenticated administrators to inject a (no CVSS, mantisbt/mantisbt) - [CVE-2010-2634](https://cve.now/CVE-2010-2634.md): RSA enVision before 3.7 SP1 allows remote authenticated users to cause a denial of service via unspecified vectors. (no CVSS) - [CVE-2010-2985](https://cve.now/CVE-2010-2985.md): Multiple cross-site scripting (XSS) vulnerabilities in IBM WebSphere Service Registry and Repository (WSRR) 6.3 allow remote attackers to in (no CVSS) - [CVE-2010-2986](https://cve.now/CVE-2010-2986.md): Cross-site scripting (XSS) vulnerability in webacs/QuickSearchAction.do in the search feature in the web interface in Cisco Wireless Control (no CVSS) - [CVE-2010-2987](https://cve.now/CVE-2010-2987.md): Multiple cross-site scripting (XSS) vulnerabilities in Cisco Wireless Control System (WCS) 7.x before 7.0.164, as used in Cisco Unified Wire (no CVSS) - [CVE-2010-2988](https://cve.now/CVE-2010-2988.md): Cross-site scripting (XSS) vulnerability in Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 allows remote attackers to inj (no CVSS) - [CVE-2010-2989](https://cve.now/CVE-2010-2989.md): nessusd\_www\_server.nbin in the Nessus Web Server plugin 1.2.4 for Nessus allows remote attackers to obtain sensitive information via a reque (no CVSS) - [CVE-2010-2975](https://cve.now/CVE-2010-2975.md): Cisco Unified Wireless Network (UWN) Solution 7.x through 7.0.98.0 does not properly handle multiple SSH sessions, which allows physically p (no CVSS) - [CVE-2010-2976](https://cve.now/CVE-2010-2976.md): The controller in Cisco Unified Wireless Network (UWN) Solution 7.x through 7.0.98.0 has (1) a default SNMP read-only community of public, ( (no CVSS) - [CVE-2010-2977](https://cve.now/CVE-2010-2977.md): Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 does not properly implement TLS and SSL, which has unspecified impact and (no CVSS) - [CVE-2010-2978](https://cve.now/CVE-2010-2978.md): Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 does not use an adequate message-digest algorithm for a self-signed certif (no CVSS) - [CVE-2010-2979](https://cve.now/CVE-2010-2979.md): Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 on 5508 series controllers allows remote attackers to cause a denial of se (no CVSS) - [CVE-2010-2980](https://cve.now/CVE-2010-2980.md): Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 on 5508 series controllers allows remote attackers to cause a denial of se (no CVSS) - [CVE-2010-2981](https://cve.now/CVE-2010-2981.md): Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 allows remote attackers to cause a denial of service (device crash) by pin (no CVSS) - [CVE-2010-2982](https://cve.now/CVE-2010-2982.md): Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 allows remote attackers to discover a group password via a series of SNMP (no CVSS) - [CVE-2010-2983](https://cve.now/CVE-2010-2983.md): The workgroup bridge (aka WGB) functionality in Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 allows remote attackers to (no CVSS) - [CVE-2010-2984](https://cve.now/CVE-2010-2984.md): Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 on 4404 series controllers does not properly implement the WEBAUTH\_REQD st (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2010-08-09 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.