# CVEs published 2010-09-21 10 CVEs were published on September 21, 2010: 0 critical, 0 high. Days are UTC. - [CVE-2010-0781](https://cve.now/CVE-2010-0781.md): Unspecified vulnerability in the administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.33 allows remote authenti (no CVSS) - [CVE-2010-1820](https://cve.now/CVE-2010-1820.md): Apple Filing Protocol (AFP) Server in Apple Mac OS X 10.6.x through 10.6.4 does not properly handle errors, which allows remote attackers to (no CVSS) - [CVE-2010-3092](https://cve.now/CVE-2010-3092.md): The upload module in Drupal 5.x before 5.23 and 6.x before 6.18 does not properly support case-insensitive filename handling in a database c (no CVSS) - [CVE-2010-3093](https://cve.now/CVE-2010-3093.md): The comment module in Drupal 5.x before 5.23 and 6.x before 6.18 allows remote authenticated users with certain privileges to bypass intende (no CVSS) - [CVE-2010-3094](https://cve.now/CVE-2010-3094.md): Multiple cross-site scripting (XSS) vulnerabilities in Drupal 6.x before 6.18 allow remote authenticated users with certain privileges to in (no CVSS, drupal/drupal) - [CVE-2010-3477](https://cve.now/CVE-2010-3477.md): The tcf\_act\_police\_dump function in net/sched/act\_police.c in the actions implementation in the network queueing functionality in the Linux (no CVSS) - [CVE-2010-2942](https://cve.now/CVE-2010-2942.md): The actions implementation in the network queueing functionality in the Linux kernel before 2.6.36-rc2 does not properly initialize certain (no CVSS) - [CVE-2010-3067](https://cve.now/CVE-2010-3067.md): Integer overflow in the do\_io\_submit function in fs/aio.c in the Linux kernel before 2.6.36-rc4-next-20100915 allows local users to cause a (no CVSS) - [CVE-2010-3078](https://cve.now/CVE-2010-3078.md): The xfs\_ioc\_fsgetxattr function in fs/xfs/linux-2.6/xfs\_ioctl.c in the Linux kernel before 2.6.36-rc4 does not initialize a certain structur (no CVSS) - [CVE-2010-3080](https://cve.now/CVE-2010-3080.md): Double free vulnerability in the snd\_seq\_oss\_open function in sound/core/seq/oss/seq\_oss\_init.c in the Linux kernel before 2.6.36-rc4 might (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2010-09-21 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.