# CVEs published 2010-09-16

24 CVEs were published on September 16, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-3418](https://cve.now/CVE-2010-3418.md): Multiple cross-site scripting (XSS) vulnerabilities in NetArt Media Car Portal 2.0 and earlier allow remote attackers to inject arbitrary we (no CVSS)
- [CVE-2010-3419](https://cve.now/CVE-2010-3419.md): Multiple PHP remote file inclusion vulnerabilities in Haudenschilt Family Connections CMS (FCMS) 2.2.3 allow remote attackers to execute arb (no CVSS)
- [CVE-2010-3420](https://cve.now/CVE-2010-3420.md): Cross-site scripting (XSS) vulnerability in Products\_Results.php in PowerStore 3.0 allows remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2010-3421](https://cve.now/CVE-2010-3421.md): Cross-site scripting (XSS) vulnerability in AffiliateLogin.asp in ProductCart 3, 4.1 SP1, and possibly other versions allows remote attacker (no CVSS)
- [CVE-2010-3422](https://cve.now/CVE-2010-3422.md): SQL injection vulnerability in the JGen (com\_jgen) component 0.9.33 for Joomla! allows remote attackers to execute arbitrary SQL commands vi (no CVSS)
- [CVE-2010-3423](https://cve.now/CVE-2010-3423.md): SQL injection vulnerability in the Yr Weatherdata module for Drupal 6.x before 6.x-1.6 allows remote attackers to execute arbitrary SQL comm (no CVSS)
- [CVE-2010-3424](https://cve.now/CVE-2010-3424.md): Cross-site scripting (XSS) vulnerability in admin/sources/classes/bbcode/custom/defaults.php in Invision Power Board (IP.Board) 3.1.2 allows (no CVSS)
- [CVE-2010-3425](https://cve.now/CVE-2010-3425.md): Cross-site scripting (XSS) vulnerability in UserControls/Popups/frmHelp.aspx in SmarterStats 5.3, 5.3.3819, and possibly other 5.3 versions, (no CVSS)
- [CVE-2010-3426](https://cve.now/CVE-2010-3426.md): Directory traversal vulnerability in jphone.php in the JPhone (com\_jphone) component 1.0 Alpha 3 for Joomla! allows remote attackers to incl (no CVSS)
- [CVE-2010-3427](https://cve.now/CVE-2010-3427.md): Multiple cross-site scripting (XSS) vulnerabilities in Open Classifieds 1.7.0.2 allow remote attackers to inject arbitrary web script or HTM (no CVSS)
- [CVE-2010-3428](https://cve.now/CVE-2010-3428.md): SQL injection vulnerability in modules/notes/json.php in Intermesh Group-Office 3.5.9 allows remote attackers to execute arbitrary SQL comma (no CVSS)
- [CVE-2010-3405](https://cve.now/CVE-2010-3405.md): Buffer overflow in sa\_snap in the bos.esagent fileset in IBM AIX 6.1, 5.3, and earlier and VIOS 2.1, 1.5, and earlier allows local users to (no CVSS)
- [CVE-2010-3406](https://cve.now/CVE-2010-3406.md): Unspecified vulnerability in sa\_snap in the bos.esagent fileset in IBM AIX 5.3 allows local users to leverage system group membership and de (no CVSS)
- [CVE-2010-3407](https://cve.now/CVE-2010-3407.md): Stack-based buffer overflow in the MailCheck821Address function in nnotes.dll in the nrouter.exe service in the server in IBM Lotus Domino 8 (no CVSS)
- [CVE-2010-3411](https://cve.now/CVE-2010-3411.md): Google Chrome before 6.0.472.59 on Linux does not properly handle cursors, which might allow attackers to cause a denial of service (asserti (no CVSS)
- [CVE-2010-3412](https://cve.now/CVE-2010-3412.md): Race condition in the console implementation in Google Chrome before 6.0.472.59 has unspecified impact and attack vectors. (no CVSS)
- [CVE-2010-3413](https://cve.now/CVE-2010-3413.md): Unspecified vulnerability in the pop-up blocking functionality in Google Chrome before 6.0.472.59 allows remote attackers to cause a denial (no CVSS)
- [CVE-2010-3414](https://cve.now/CVE-2010-3414.md): Google Chrome before 6.0.472.59 on Mac OS X does not properly implement file dialogs, which allows attackers to cause a denial of service (m (no CVSS)
- [CVE-2010-3415](https://cve.now/CVE-2010-3415.md): Google Chrome before 6.0.472.59 does not properly implement Geolocation, which allows remote attackers to cause a denial of service (memory (no CVSS)
- [CVE-2010-3416](https://cve.now/CVE-2010-3416.md): Google Chrome before 6.0.472.59 on Linux does not properly implement the Khmer locale, which allows remote attackers to cause a denial of se (no CVSS)
- [CVE-2010-3417](https://cve.now/CVE-2010-3417.md): Google Chrome before 6.0.472.59 does not prompt the user before granting access to the extension history, which allows attackers to obtain p (no CVSS)
- [CVE-2010-3402](https://cve.now/CVE-2010-3402.md): Untrusted search path vulnerability in IDM Computer Solutions UltraEdit 16.20.0.1009, 16.10.0.1036, and probably other versions allows local (no CVSS)
- [CVE-2010-3403](https://cve.now/CVE-2010-3403.md): Untrusted search path vulnerability in Qualcomm eXtensible Diagnostic Monitor (QXDM) 03.09.19 allows local users, and possibly remote attack (no CVSS)
- [CVE-2010-3404](https://cve.now/CVE-2010-3404.md): Multiple SQL injection vulnerabilities in eshtery CMS (aka eshtery.com) allow remote attackers to execute arbitrary SQL commands via the (1) (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-09-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.