# CVEs published 2010-09-14

10 CVEs were published on September 14, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-2799](https://cve.now/CVE-2010-2799.md): Stack-based buffer overflow in the nestlex function in nestlex.c in Socat 1.5.0.0 through 1.7.1.2 and 2.0.0-b1 through 2.0.0-b3, when bidire (no CVSS)
- [CVE-2010-2953](https://cve.now/CVE-2010-2953.md): Untrusted search path vulnerability in a certain Debian GNU/Linux patch for the couchdb script in CouchDB 0.8.0 allows local users to gain p (no CVSS)
- [CVE-2010-2961](https://cve.now/CVE-2010-2961.md): mountall.c in mountall before 2.15.2 uses 0666 permissions for the root.rules file, which allows local users to gain privileges by modifying (no CVSS)
- [CVE-2010-3082](https://cve.now/CVE-2010-3082.md): Cross-site scripting (XSS) vulnerability in Django 1.2.x before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via a c (no CVSS, django)
- [CVE-2010-0152](https://cve.now/CVE-2010-0152.md): Multiple cross-site scripting (XSS) vulnerabilities in the Local Management Interface (LMI) on the IBM Proventia Network Mail Security Syste (no CVSS)
- [CVE-2010-0153](https://cve.now/CVE-2010-0153.md): Multiple cross-site request forgery (CSRF) vulnerabilities in the Local Management Interface (LMI) on the IBM Proventia Network Mail Securit (no CVSS)
- [CVE-2010-0154](https://cve.now/CVE-2010-0154.md): Directory traversal vulnerability in sla/index.php in the Local Management Interface (LMI) on the IBM Proventia Network Mail Security System (no CVSS)
- [CVE-2010-0155](https://cve.now/CVE-2010-0155.md): CRLF injection vulnerability in load.php in the Local Management Interface (LMI) on the IBM Proventia Network Mail Security System (PNMSS) a (no CVSS)
- [CVE-2010-3322](https://cve.now/CVE-2010-3322.md): The XML parser in Splunk 4.0.0 through 4.1.4 allows remote authenticated users to obtain sensitive information and gain privileges via an XM (no CVSS)
- [CVE-2010-3323](https://cve.now/CVE-2010-3323.md): Splunk 4.0.0 through 4.1.4 allows remote attackers to conduct session hijacking attacks and obtain the splunkd session key via vectors relat (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-09-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.