# CVEs published 2010-08-16 19 CVEs were published on August 16, 2010: 0 critical, 0 high. Days are UTC. - [CVE-2009-4269](https://cve.now/CVE-2009-4269.md): The password hash generation algorithm in the BUILTIN authentication functionality for Apache Derby before 10.6.1.0 performs a transformatio (no CVSS, org.apache.derby:derby) - [CVE-2010-3022](https://cve.now/CVE-2010-3022.md): Cross-site scripting (XSS) vulnerability in the Performance logging module in the Devel module 5.x before 5.x-1.3 and 6.x before 6.x-1.21 fo (no CVSS) - [CVE-2010-3023](https://cve.now/CVE-2010-3023.md): Multiple cross-site scripting (XSS) vulnerabilities in DiamondList 0.1.6, and possibly earlier, allow remote attackers to inject arbitrary w (no CVSS) - [CVE-2010-3024](https://cve.now/CVE-2010-3024.md): Multiple cross-site request forgery (CSRF) vulnerabilities in user/main/update\_user in DiamondList 0.1.6, and possibly earlier, allow remote (no CVSS) - [CVE-2010-3025](https://cve.now/CVE-2010-3025.md): Multiple cross-site scripting (XSS) vulnerabilities in Tomaz Muraus Open Blog 1.2.1, and possibly earlier, allow remote attackers to inject (no CVSS) - [CVE-2010-3026](https://cve.now/CVE-2010-3026.md): Cross-site request forgery (CSRF) vulnerability in application/modules/admin/controllers/users.php in Tomaz Muraus Open Blog 1.2.1, and poss (no CVSS) - [CVE-2010-3027](https://cve.now/CVE-2010-3027.md): SQL injection vulnerability in index.php in Tycoon Baseball Script 1.0.9 allows remote attackers to execute arbitrary SQL commands via the g (no CVSS) - [CVE-2010-3028](https://cve.now/CVE-2010-3028.md): The Aardvertiser component before 2.2.1 for Joomla! uses insecure permissions (777) in unspecified folders, which allows local users to modi (no CVSS) - [CVE-2010-3029](https://cve.now/CVE-2010-3029.md): SQL injection vulnerability in statistics.php in PHPKick 0.8 allows remote attackers to execute arbitrary SQL commands via the gameday param (no CVSS) - [CVE-2010-1797](https://cve.now/CVE-2010-1797.md): Multiple stack-based buffer overflows in the cff\_decoder\_parse\_charstrings function in the CFF Type2 CharStrings interpreter in cff/cffgload (no CVSS) - [CVE-2010-1799](https://cve.now/CVE-2010-1799.md): Stack-based buffer overflow in the error-logging functionality in Apple QuickTime before 7.6.7 on Windows allows remote attackers to execute (no CVSS) - [CVE-2010-1886](https://cve.now/CVE-2010-1886.md): Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 SP2 and R2, and Windows 7 allow lo (no CVSS) - [CVE-2010-2576](https://cve.now/CVE-2010-2576.md): Opera before 10.61 does not properly suppress clicks on download dialogs that became visible after a recent tab change, which allows remote (no CVSS) - [CVE-2010-2827](https://cve.now/CVE-2010-2827.md): Cisco IOS 15.1(2)T allows remote attackers to cause a denial of service (resource consumption and TCP outage) via spoofed TCP packets, relat (no CVSS) - [CVE-2010-3019](https://cve.now/CVE-2010-3019.md): Heap-based buffer overflow in Opera before 10.61 allows remote attackers to execute arbitrary code or cause a denial of service (application (no CVSS) - [CVE-2010-3020](https://cve.now/CVE-2010-3020.md): The news-feed preview feature in Opera before 10.61 does not properly remove scripts, which allows remote attackers to force subscriptions t (no CVSS) - [CVE-2010-3021](https://cve.now/CVE-2010-3021.md): Unspecified vulnerability in Opera before 10.61 allows remote attackers to cause a denial of service (CPU consumption and application hang) (no CVSS) - [CVE-2010-2577](https://cve.now/CVE-2010-2577.md): Multiple SQL injection vulnerabilities in Pligg before 1.1.1 allow remote attackers to execute arbitrary SQL commands via the title paramete (no CVSS) - [CVE-2010-3013](https://cve.now/CVE-2010-3013.md): SQL injection vulnerability in groupadmin.php in Pligg before 1.1.1 allows remote attackers to execute arbitrary SQL commands via the role p (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2010-08-16 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.