CVEs published September 14, 2010
10 CVEs were published on September 14, 2010: 0 critical, 0 high.
- Published
- 10
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 10
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- django
- 1
Medium, low and unrated 10
- CVE-2010-2799Stack-based buffer overflow in the nestlex function in nestlex.c in Socat 1.5.0.0 through 1.7.1.2 and 2.0.0-b1 through 2.0.0-b3, when bidire
- CVE-2010-2953Untrusted search path vulnerability in a certain Debian GNU/Linux patch for the couchdb script in CouchDB 0.8.0 allows local users to gain p
- CVE-2010-2961mountall.c in mountall before 2.15.2 uses 0666 permissions for the root.rules file, which allows local users to gain privileges by modifying
- CVE-2010-3082Cross-site scripting (XSS) vulnerability in Django 1.2.x before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via a cdjango
- CVE-2010-0152Multiple cross-site scripting (XSS) vulnerabilities in the Local Management Interface (LMI) on the IBM Proventia Network Mail Security Syste
- CVE-2010-0153Multiple cross-site request forgery (CSRF) vulnerabilities in the Local Management Interface (LMI) on the IBM Proventia Network Mail Securit
- CVE-2010-0154Directory traversal vulnerability in sla/index.php in the Local Management Interface (LMI) on the IBM Proventia Network Mail Security System
- CVE-2010-0155CRLF injection vulnerability in load.php in the Local Management Interface (LMI) on the IBM Proventia Network Mail Security System (PNMSS) a
- CVE-2010-3322The XML parser in Splunk 4.0.0 through 4.1.4 allows remote authenticated users to obtain sensitive information and gain privileges via an XM
- CVE-2010-3323Splunk 4.0.0 through 4.1.4 allows remote attackers to conduct session hijacking attacks and obtain the splunkd session key via vectors relat