CVEs published September 21, 2010
10 CVEs were published on September 21, 2010: 0 critical, 0 high.
- Published
- 10
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 10
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- drupal/drupal
- 1
Medium, low and unrated 10
- CVE-2010-0781Unspecified vulnerability in the administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.33 allows remote authenti
- CVE-2010-1820Apple Filing Protocol (AFP) Server in Apple Mac OS X 10.6.x through 10.6.4 does not properly handle errors, which allows remote attackers to
- CVE-2010-3092The upload module in Drupal 5.x before 5.23 and 6.x before 6.18 does not properly support case-insensitive filename handling in a database c
- CVE-2010-3093The comment module in Drupal 5.x before 5.23 and 6.x before 6.18 allows remote authenticated users with certain privileges to bypass intende
- CVE-2010-3094Multiple cross-site scripting (XSS) vulnerabilities in Drupal 6.x before 6.18 allow remote authenticated users with certain privileges to indrupal/drupal
- CVE-2010-3477The tcf_act_police_dump function in net/sched/act_police.c in the actions implementation in the network queueing functionality in the Linux
- CVE-2010-2942The actions implementation in the network queueing functionality in the Linux kernel before 2.6.36-rc2 does not properly initialize certain
- CVE-2010-3067Integer overflow in the do_io_submit function in fs/aio.c in the Linux kernel before 2.6.36-rc4-next-20100915 allows local users to cause a
- CVE-2010-3078The xfs_ioc_fsgetxattr function in fs/xfs/linux-2.6/xfs_ioctl.c in the Linux kernel before 2.6.36-rc4 does not initialize a certain structur
- CVE-2010-3080Double free vulnerability in the snd_seq_oss_open function in sound/core/seq/oss/seq_oss_init.c in the Linux kernel before 2.6.36-rc4 might