# CVEs published 2010-09-10 18 CVEs were published on September 10, 2010: 0 critical, 0 high. Days are UTC. - [CVE-2010-3199](https://cve.now/CVE-2010-3199.md): Untrusted search path vulnerability in TortoiseSVN 1.6.10, Build 19898 and earlier allows local users, and possibly remote attackers, to exe (no CVSS) - [CVE-2010-3263](https://cve.now/CVE-2010-3263.md): Cross-site scripting (XSS) vulnerability in setup/frames/index.inc.php in the setup script in phpMyAdmin 3.x before 3.3.7 allows remote atta (no CVSS) - [CVE-2010-1805](https://cve.now/CVE-2010-1805.md): Untrusted search path vulnerability in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2 on Windows allows local users to gain privileges v (no CVSS) - [CVE-2010-1806](https://cve.now/CVE-2010-1806.md): Use-after-free vulnerability in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2 allows remote attackers to execute arbitrary code or caus (no CVSS) - [CVE-2010-1807](https://cve.now/CVE-2010-1807.md): WebKit in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2; Android before 2.2; and webkitgtk before 1.2.6; does not properly validate flo (no CVSS) - [CVE-2010-2948](https://cve.now/CVE-2010-2948.md): Stack-based buffer overflow in the bgp\_route\_refresh\_receive function in bgp\_packet.c in bgpd in Quagga before 0.99.17 allows remote authent (no CVSS) - [CVE-2010-2949](https://cve.now/CVE-2010-2949.md): bgpd in Quagga before 0.99.17 does not properly parse AS paths, which allows remote attackers to cause a denial of service (NULL pointer der (no CVSS) - [CVE-2010-2956](https://cve.now/CVE-2010-2956.md): Sudo 1.7.0 through 1.7.4p3, when a Runas group is configured, does not properly handle use of the -u option in conjunction with the -g optio (no CVSS) - [CVE-2010-3006](https://cve.now/CVE-2010-3006.md): Unspecified vulnerability on the HP ProLiant G6 Lights-Out 100 Remote Management card with firmware before 4.06 allows remote attackers to c (no CVSS) - [CVE-2010-0574](https://cve.now/CVE-2010-0574.md): Unspecified vulnerability in Cisco Wireless LAN Controller (WLC) software 3.2 before 3.2.215.0; 4.1 and 4.2 before 4.2.205.0; 4.1M and 4.2M (no CVSS) - [CVE-2010-0575](https://cve.now/CVE-2010-0575.md): Cisco Wireless LAN Controller (WLC) software, possibly 6.0.x or possibly 4.1 through 6.0.x, allows remote attackers to bypass ACLs in the co (no CVSS) - [CVE-2010-2841](https://cve.now/CVE-2010-2841.md): Unspecified vulnerability in Cisco Wireless LAN Controller (WLC) software 4.2 before 4.2.209.0; 4.2M before 4.2.207.54M; 5.0, 5.1, and 6.0 b (no CVSS) - [CVE-2010-2842](https://cve.now/CVE-2010-2842.md): Cisco Wireless LAN Controller (WLC) software, possibly 4.2 through 6.0, allows remote authenticated users to bypass intended access restrict (no CVSS) - [CVE-2010-2843](https://cve.now/CVE-2010-2843.md): Cisco Wireless LAN Controller (WLC) software, possibly 4.2 through 6.0, allows remote authenticated users to bypass intended access restrict (no CVSS) - [CVE-2010-2957](https://cve.now/CVE-2010-2957.md): Cross-site scripting (XSS) vulnerability in Serendipity before 1.5.4, when "Remember me" logins are enabled, allows remote attackers to inje (no CVSS) - [CVE-2010-3003](https://cve.now/CVE-2010-3003.md): Cross-site scripting (XSS) vulnerability in HP Insight Diagnostics Online Edition before 8.5.0-11 on Linux allows remote attackers to inject (no CVSS) - [CVE-2010-3033](https://cve.now/CVE-2010-3033.md): Cisco Wireless LAN Controller (WLC) software, possibly 4.2 through 6.0, allows remote authenticated users to bypass intended access restrict (no CVSS) - [CVE-2010-3034](https://cve.now/CVE-2010-3034.md): Cisco Wireless LAN Controller (WLC) software, possibly 6.0.x or possibly 4.1 through 6.0.x, allows remote attackers to bypass ACLs in the co (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2010-09-10 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.