# CVEs published 2010-09-03

16 CVEs were published on September 3, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-1325](https://cve.now/CVE-2010-1325.md): Cross-site request forgery (CSRF) vulnerability in the apache2-slms package in SUSE Lifecycle Management Server (SLMS) 1.0 on SUSE Linux Ent (no CVSS)
- [CVE-2010-1507](https://cve.now/CVE-2010-1507.md): WebYaST in yast2-webclient in SUSE Linux Enterprise (SLE) 11 on the WebYaST appliance uses a fixed secret key that is embedded in the applia (no CVSS)
- [CVE-2010-2226](https://cve.now/CVE-2010-2226.md): The xfs\_swapext function in fs/xfs/xfs\_dfrag.c in the Linux kernel before 2.6.35 does not properly check the file descriptors passed to the (no CVSS)
- [CVE-2010-2240](https://cve.now/CVE-2010-2240.md): The do\_anonymous\_page function in mm/memory.c in the Linux kernel before 2.6.27.52, 2.6.32.x before 2.6.32.19, 2.6.34.x before 2.6.34.4, and (no CVSS)
- [CVE-2010-2532](https://cve.now/CVE-2010-2532.md): lxsession-logout in lxsession in LXDE, as used on SUSE openSUSE 11.3 and other platforms, does not lock the screen when the Suspend or Hiber (no CVSS)
- [CVE-2010-2954](https://cve.now/CVE-2010-2954.md): The irda\_bind function in net/irda/af\_irda.c in the Linux kernel before 2.6.36-rc3-next-20100901 does not properly handle failure of the ird (no CVSS)
- [CVE-2010-3203](https://cve.now/CVE-2010-3203.md): Directory traversal vulnerability in the PicSell (com\_picsell) component 1.0 for Joomla! allows remote attackers to read arbitrary files via (no CVSS)
- [CVE-2010-3204](https://cve.now/CVE-2010-3204.md): Multiple PHP remote file inclusion vulnerabilities in Pecio CMS 2.0.5 allow remote attackers to execute arbitrary PHP code via a URL in the (no CVSS)
- [CVE-2010-3205](https://cve.now/CVE-2010-3205.md): PHP remote file inclusion vulnerability in index.php in Textpattern CMS 4.2.0 allows remote attackers to execute arbitrary PHP code via a UR (no CVSS)
- [CVE-2010-3206](https://cve.now/CVE-2010-3206.md): Multiple PHP remote file inclusion vulnerabilities in DiY-CMS 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the (1) (no CVSS)
- [CVE-2010-3207](https://cve.now/CVE-2010-3207.md): SQL injection vulnerability in index.php in GaleriaSHQIP 1.0, when magic\_quotes\_gpc is disabled, allows remote attackers to execute arbitrar (no CVSS)
- [CVE-2010-3208](https://cve.now/CVE-2010-3208.md): Cross-site scripting (XSS) vulnerability in ajax.php in Wiccle Web Builder (WWB) 1.00 and 1.0.1 allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2010-3209](https://cve.now/CVE-2010-3209.md): Multiple PHP remote file inclusion vulnerabilities in Seagull 0.6.7 allow remote attackers to execute arbitrary PHP code via a URL in the in (no CVSS)
- [CVE-2010-3210](https://cve.now/CVE-2010-3210.md): Multiple PHP remote file inclusion vulnerabilities in Multi-lingual E-Commerce System 0.2 allow remote attackers to execute arbitrary PHP co (no CVSS)
- [CVE-2010-3211](https://cve.now/CVE-2010-3211.md): Multiple SQL injection vulnerabilities in the JE FAQ Pro (com\_jefaqpro) component 1.5.0 for Joomla! allow remote attackers to execute arbitr (no CVSS)
- [CVE-2010-3212](https://cve.now/CVE-2010-3212.md): SQL injection vulnerability in index.php in Seagull 0.6.7 and earlier allows remote attackers to execute arbitrary SQL commands via the frmQ (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-09-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.