# CVEs published 2010-09-07 26 CVEs were published on September 7, 2010: 0 critical, 0 high. Days are UTC. - [CVE-2006-7240](https://cve.now/CVE-2006-7240.md): gnome-power-manager 2.14.0 does not properly implement the lock\_on\_suspend and lock\_on\_hibernate settings for locking the screen when the su (no CVSS) - [CVE-2009-4996](https://cve.now/CVE-2009-4996.md): Xfce4-session 4.5.91 in Xfce does not lock the screen when the suspend or hibernate button is pressed, which might make it easier for physic (no CVSS) - [CVE-2009-4997](https://cve.now/CVE-2009-4997.md): gnome-power-manager 2.27.92 does not properly implement the lock\_on\_suspend and lock\_on\_hibernate settings for locking the screen when the s (no CVSS) - [CVE-2010-2739](https://cve.now/CVE-2010-2739.md): Buffer overflow in the CreateDIBPalette function in win32k.sys in Microsoft Windows XP SP3, Server 2003 R2 Enterprise SP2, Vista Business SP (no CVSS) - [CVE-2010-2874](https://cve.now/CVE-2010-2874.md): Unspecified vulnerability in Adobe Shockwave Player before 11.5.8.612 allows remote attackers to execute arbitrary code via unknown vectors (no CVSS) - [CVE-2010-3213](https://cve.now/CVE-2010-3213.md): Cross-site request forgery (CSRF) vulnerability in Microsoft Outlook Web Access (owa/ev.owa) 2007 through SP2 allows remote attackers to hij (no CVSS) - [CVE-2010-3244](https://cve.now/CVE-2010-3244.md): BbtsConnection\_Edit.exe in Blackboard Transact Suite (formerly Blackboard Commerce Suite) before 3.6.0.2 relies on field names when determin (no CVSS) - [CVE-2010-3245](https://cve.now/CVE-2010-3245.md): The automated-backup functionality in Blackboard Transact Suite (formerly Blackboard Commerce Suite) stores the (1) database username and (2 (no CVSS) - [CVE-2010-3246](https://cve.now/CVE-2010-3246.md): Google Chrome before 6.0.472.53 does not properly handle the \_blank value for the target attribute of unspecified elements, which allows rem (no CVSS) - [CVE-2010-3247](https://cve.now/CVE-2010-3247.md): Google Chrome before 6.0.472.53 does not properly restrict the characters in URLs, which allows remote attackers to spoof the appearance of (no CVSS) - [CVE-2010-3248](https://cve.now/CVE-2010-3248.md): Google Chrome before 6.0.472.53 does not properly restrict copying to the clipboard, which has unspecified impact and attack vectors. (no CVSS) - [CVE-2010-3249](https://cve.now/CVE-2010-3249.md): Google Chrome before 6.0.472.53 does not properly implement SVG filters, which allows remote attackers to cause a denial of service or possi (no CVSS) - [CVE-2010-3250](https://cve.now/CVE-2010-3250.md): Unspecified vulnerability in Google Chrome before 6.0.472.53 allows remote attackers to enumerate the set of installed extensions via unknow (no CVSS) - [CVE-2010-3251](https://cve.now/CVE-2010-3251.md): The WebSockets implementation in Google Chrome before 6.0.472.53 allows remote attackers to cause a denial of service (NULL pointer derefere (no CVSS) - [CVE-2010-3252](https://cve.now/CVE-2010-3252.md): Use-after-free vulnerability in the Notifications presenter in Google Chrome before 6.0.472.53 allows attackers to cause a denial of service (no CVSS) - [CVE-2010-3253](https://cve.now/CVE-2010-3253.md): The implementation of notification permissions in Google Chrome before 6.0.472.53 allows attackers to cause a denial of service (memory corr (no CVSS) - [CVE-2010-3254](https://cve.now/CVE-2010-3254.md): The WebSockets implementation in Google Chrome before 6.0.472.53 does not properly handle integer values, which allows remote attackers to c (no CVSS) - [CVE-2010-3255](https://cve.now/CVE-2010-3255.md): Google Chrome before 6.0.472.53 and webkitgtk before 1.2.6 do not properly handle counter nodes, which allows remote attackers to cause a de (no CVSS) - [CVE-2010-3256](https://cve.now/CVE-2010-3256.md): Google Chrome before 6.0.472.53 does not properly limit the number of stored autocomplete entries, which has unspecified impact and attack v (no CVSS) - [CVE-2010-3257](https://cve.now/CVE-2010-3257.md): Use-after-free vulnerability in WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before 6.0.472.53, and we (no CVSS) - [CVE-2010-3258](https://cve.now/CVE-2010-3258.md): The sandbox implementation in Google Chrome before 6.0.472.53 does not properly deserialize parameters, which has unspecified impact and rem (no CVSS) - [CVE-2010-3259](https://cve.now/CVE-2010-3259.md): WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before 6.0.472.53, and webkitgtk before 1.2.6, does not p (no CVSS) - [CVE-2009-4898](https://cve.now/CVE-2009-4898.md): Cross-site request forgery (CSRF) vulnerability in TWiki before 4.3.2 allows remote attackers to hijack the authentication of arbitrary user (no CVSS) - [CVE-2010-2248](https://cve.now/CVE-2010-2248.md): fs/cifs/cifssmb.c in the CIFS implementation in the Linux kernel before 2.6.34-rc4 allows remote attackers to cause a denial of service (pan (no CVSS) - [CVE-2010-2521](https://cve.now/CVE-2010-2521.md): Multiple buffer overflows in fs/nfsd/nfs4xdr.c in the XDR implementation in the NFS server in the Linux kernel before 2.6.34-rc6 allow remot (no CVSS) - [CVE-2010-2802](https://cve.now/CVE-2010-2802.md): Cross-site scripting (XSS) vulnerability in MantisBT before 1.2.2 allows remote authenticated users to inject arbitrary web script or HTML v (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2010-09-07 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.