# CVEs published 2010-10-05 33 CVEs were published on October 5, 2010: 0 critical, 0 high. Days are UTC. - [CVE-2010-0218](https://cve.now/CVE-2010-0218.md): ISC BIND 9.7.2 through 9.7.2-P1 uses an incorrect ACL to restrict the ability of Recursion Desired (RD) queries to access the cache, which a (no CVSS) - [CVE-2010-3302](https://cve.now/CVE-2010-3302.md): Buffer overflow in programs/pluto/xauth.c in the client in Openswan 2.6.25 through 2.6.28 might allow remote authenticated gateways to execu (no CVSS) - [CVE-2010-3303](https://cve.now/CVE-2010-3303.md): Multiple cross-site scripting (XSS) vulnerabilities in MantisBT before 1.2.3 allow remote authenticated administrators to inject arbitrary w (no CVSS) - [CVE-2010-3308](https://cve.now/CVE-2010-3308.md): Buffer overflow in programs/pluto/xauth.c in the client in Openswan 2.6.26 through 2.6.28 might allow remote authenticated gateways to execu (no CVSS) - [CVE-2010-3752](https://cve.now/CVE-2010-3752.md): programs/pluto/xauth.c in the client in Openswan 2.6.25 through 2.6.28 allows remote authenticated gateways to execute arbitrary commands vi (no CVSS) - [CVE-2010-3753](https://cve.now/CVE-2010-3753.md): programs/pluto/xauth.c in the client in Openswan 2.6.26 through 2.6.28 allows remote authenticated gateways to execute arbitrary commands vi (no CVSS) - [CVE-2010-3754](https://cve.now/CVE-2010-3754.md): The FXCLI\_OraBR\_Exec\_Command function in FastBackServer.exe in the Server in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6 (no CVSS) - [CVE-2010-3755](https://cve.now/CVE-2010-3755.md): The \_DAS\_ReadBlockReply function in FastBackServer.exe in the Server in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 an (no CVSS) - [CVE-2010-3756](https://cve.now/CVE-2010-3756.md): The \_CalcHashValueWithLength function in FastBackServer.exe in the Server in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6 (no CVSS) - [CVE-2010-3757](https://cve.now/CVE-2010-3757.md): Format string vulnerability in the \_Eventlog function in FastBackServer.exe in the Server in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0 (no CVSS) - [CVE-2010-3758](https://cve.now/CVE-2010-3758.md): Multiple stack-based buffer overflows in FastBackServer.exe in the Server in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6 (no CVSS) - [CVE-2010-3759](https://cve.now/CVE-2010-3759.md): FastBackMount.exe in the Mount service in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 writ (no CVSS) - [CVE-2010-3760](https://cve.now/CVE-2010-3760.md): FastBackMount.exe in the Mount service in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 does (no CVSS) - [CVE-2010-3761](https://cve.now/CVE-2010-3761.md): Unspecified vulnerability in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 allows remote att (no CVSS) - [CVE-2010-3762](https://cve.now/CVE-2010-3762.md): ISC BIND before 9.7.2-P2, when DNSSEC validation is enabled, does not properly handle certain bad signatures if multiple trust anchors exist (no CVSS) - [CVE-2010-3763](https://cve.now/CVE-2010-3763.md): Cross-site scripting (XSS) vulnerability in core/summary\_api.php in MantisBT before 1.2.3 allows remote attackers to inject arbitrary web sc (no CVSS) - [CVE-2010-2535](https://cve.now/CVE-2010-2535.md): Multiple cross-site scripting (XSS) vulnerabilities in the Back End in Joomla! 1.5.x before 1.5.20 allow remote authenticated users to injec (no CVSS) - [CVE-2010-2653](https://cve.now/CVE-2010-2653.md): Race condition in the hvc\_close function in drivers/char/hvc\_console.c in the Linux kernel before 2.6.34 allows local users to cause a denia (no CVSS) - [CVE-2010-3307](https://cve.now/CVE-2010-3307.md): Multiple PHP remote file inclusion vulnerabilities in themes/default/index.php in Free Simple CMS 1.0 and earlier allow remote attackers to (no CVSS) - [CVE-2010-3729](https://cve.now/CVE-2010-3729.md): The SPDY protocol implementation in Google Chrome before 6.0.472.62 does not properly manage buffers, which might allow remote attackers to (no CVSS) - [CVE-2010-3730](https://cve.now/CVE-2010-3730.md): Google Chrome before 6.0.472.62 does not properly use information about the origin of a document to manage properties, which allows remote a (no CVSS) - [CVE-2010-3731](https://cve.now/CVE-2010-3731.md): Stack-based buffer overflow in the validateUser implementation in the com.ibm.db2.das.core.DasSysCmd function in db2dasrrm in the DB2 Admini (no CVSS) - [CVE-2010-3732](https://cve.now/CVE-2010-3732.md): The DRDA Services component in IBM DB2 UDB 9.5 before FP6a allows remote authenticated users to cause a denial of service (database server A (no CVSS) - [CVE-2010-3733](https://cve.now/CVE-2010-3733.md): The Engine Utilities component in IBM DB2 UDB 9.5 before FP6a uses world-writable permissions for the sqllib/cfg/db2sprf file, which might a (no CVSS) - [CVE-2010-3734](https://cve.now/CVE-2010-3734.md): The Install component in IBM DB2 UDB 9.5 before FP6a on Linux, UNIX, and Windows enforces an unintended limit on password length, which make (no CVSS) - [CVE-2010-3735](https://cve.now/CVE-2010-3735.md): The "Query Compiler, Rewrite, Optimizer" component in IBM DB2 UDB 9.5 before FP6a allows remote authenticated users to cause a denial of ser (no CVSS) - [CVE-2010-3736](https://cve.now/CVE-2010-3736.md): Memory leak in the Relational Data Services component in IBM DB2 UDB 9.5 before FP6a, when the connection concentrator is enabled, allows re (no CVSS) - [CVE-2010-3737](https://cve.now/CVE-2010-3737.md): Memory leak in the Relational Data Services component in IBM DB2 UDB 9.5 before FP6a allows remote authenticated users to cause a denial of (no CVSS) - [CVE-2010-3738](https://cve.now/CVE-2010-3738.md): The Security component in IBM DB2 UDB 9.5 before FP6a logs AUDIT events by using a USERID and an AUTHID value corresponding to the instance (no CVSS) - [CVE-2010-3739](https://cve.now/CVE-2010-3739.md): The audit facility in the Security component in IBM DB2 UDB 9.5 before FP6a uses instance-level audit settings to capture connection (aka CO (no CVSS) - [CVE-2010-3740](https://cve.now/CVE-2010-3740.md): The Net Search Extender (NSE) implementation in the Text Search component in IBM DB2 UDB 9.5 before FP6a does not properly handle an alphanu (no CVSS) - [CVE-2010-3741](https://cve.now/CVE-2010-3741.md): The offline backup mechanism in Research In Motion (RIM) BlackBerry Desktop Software uses single-iteration PBKDF2, which makes it easier for (no CVSS) - [CVE-2010-3742](https://cve.now/CVE-2010-3742.md): Multiple PHP remote file inclusion vulnerabilities in themes/default/index.php in Free Simple CMS 1.0 allow remote attackers to execute arbi (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2010-10-05 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.