# CVEs published 2010-09-29

14 CVEs were published on September 29, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-2453](https://cve.now/CVE-2010-2453.md): Multiple cross-site scripting (XSS) vulnerabilities in Synology Disk Station 2.x before DSM3.0-1337 allow remote attackers to inject arbitra (no CVSS)
- [CVE-2010-2478](https://cve.now/CVE-2010-2478.md): Integer overflow in the ethtool\_get\_rxnfc function in net/core/ethtool.c in the Linux kernel before 2.6.33.7 on 32-bit platforms allows loca (no CVSS)
- [CVE-2010-2530](https://cve.now/CVE-2010-2530.md): Multiple integer signedness errors in smb\_subr.c in the netsmb module in the kernel in NetBSD 5.0.2 and earlier, FreeBSD, and Apple Mac OS X (no CVSS)
- [CVE-2010-2946](https://cve.now/CVE-2010-2946.md): fs/jfs/xattr.c in the Linux kernel before 2.6.35.2 does not properly handle a certain legacy format for storage of extended attributes, whic (no CVSS)
- [CVE-2010-3084](https://cve.now/CVE-2010-3084.md): Buffer overflow in the niu\_get\_ethtool\_tcam\_all function in drivers/net/niu.c in the Linux kernel before 2.6.36-rc4 allows local users to ca (no CVSS)
- [CVE-2010-3091](https://cve.now/CVE-2010-3091.md): The OpenID module in Drupal 6.x before 6.18, and the OpenID module 5.x before 5.x-1.4 for Drupal, violates the OpenID 2.0 protocol by not ve (no CVSS)
- [CVE-2010-3310](https://cve.now/CVE-2010-3310.md): Multiple integer signedness errors in net/rose/af\_rose.c in the Linux kernel before 2.6.36-rc5-next-20100923 allow local users to cause a de (no CVSS)
- [CVE-2010-3380](https://cve.now/CVE-2010-3380.md): The (1) init.d/slurm and (2) init.d/slurmdbd scripts in SLURM before 2.1.14 place the . (no CVSS)
- [CVE-2010-3468](https://cve.now/CVE-2010-3468.md): Directory traversal vulnerability in fileManager.cfc in Mura CMS 5.1 before 5.1.498 and 5.2 before 5.2.2809, and Sava CMS 5 through 5.2, all (no CVSS)
- [CVE-2010-3684](https://cve.now/CVE-2010-3684.md): The FTP authentication module in Synology Disk Station 2.x logs passwords to the web application interface in cases of incorrect login attem (no CVSS)
- [CVE-2010-3685](https://cve.now/CVE-2010-3685.md): The OpenID module in Drupal 6.x before 6.18, and the OpenID module 5.x before 5.x-1.4 for Drupal, violates the OpenID 2.0 protocol by not ch (no CVSS)
- [CVE-2010-3686](https://cve.now/CVE-2010-3686.md): The OpenID module in Drupal 6.x before 6.18, and the OpenID module 5.x before 5.x-1.4 for Drupal, violates the OpenID 2.0 protocol by not en (no CVSS)
- [CVE-2010-3687](https://cve.now/CVE-2010-3687.md): Unspecified vulnerability in the powermail extension 1.5.3 and earlier for TYPO3 allows remote attackers to bypass validation have an unspec (no CVSS)
- [CVE-2010-3688](https://cve.now/CVE-2010-3688.md): Directory traversal vulnerability in ADMIN/login.php in NetArtMEDIA WebSiteAdmin allows remote emote attackers to include and execute arbitr (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-09-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.