# CVEs published 2010-12-29 24 CVEs were published on December 29, 2010: 0 critical, 0 high. Days are UTC. - [CVE-2010-4607](https://cve.now/CVE-2010-4607.md): Multiple cross-site scripting (XSS) vulnerabilities in Habari 0.6.5, when register\_globals is enabled, allow remote attackers to inject arbi (no CVSS) - [CVE-2010-4608](https://cve.now/CVE-2010-4608.md): Habari 0.6.5 allows remote attackers to obtain sensitive information via a direct request to (1) header.php and (2) comments\_items.php in sy (no CVSS) - [CVE-2010-4609](https://cve.now/CVE-2010-4609.md): SQL injection vulnerability in index.php in Html-edit CMS 3.1.8 allows remote attackers to execute arbitrary SQL commands via the nuser para (no CVSS) - [CVE-2010-4610](https://cve.now/CVE-2010-4610.md): Cross-site scripting (XSS) vulnerability in index.php in Html-edit CMS 3.1.8 allows remote attackers to inject arbitrary web script or HTML (no CVSS) - [CVE-2010-4611](https://cve.now/CVE-2010-4611.md): Html-edit CMS 3.1.8 allows remote attackers to obtain sensitive information via a direct request to (1) pages.php and (2) menu.php in includ (no CVSS) - [CVE-2010-4612](https://cve.now/CVE-2010-4612.md): Multiple SQL injection vulnerabilities in index.php in Hycus CMS 1.0.3, when magic\_quotes\_gpc is disabled, allow remote attackers to execute (no CVSS) - [CVE-2010-4613](https://cve.now/CVE-2010-4613.md): Multiple directory traversal vulnerabilities in Hycus CMS 1.0.3 allow remote attackers to include and execute arbitrary local files via a .. (no CVSS) - [CVE-2010-4614](https://cve.now/CVE-2010-4614.md): SQL injection vulnerability in item.php in Ero Auktion 2010 allows remote attackers to execute arbitrary SQL commands via the id parameter, (no CVSS) - [CVE-2010-4615](https://cve.now/CVE-2010-4615.md): Multiple SQL injection vulnerabilities in Oto Galeri Sistemi 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) arac p (no CVSS) - [CVE-2010-4616](https://cve.now/CVE-2010-4616.md): Cross-site scripting (XSS) vulnerability in modules/content/admin/content.php in ImpressCMS 1.2.3 Final, and possibly other versions before (no CVSS, impresscms/impresscms) - [CVE-2010-4617](https://cve.now/CVE-2010-4617.md): Directory traversal vulnerability in the JotLoader (com\_jotloader) component 2.2.1 for Joomla! allows remote attackers to read arbitrary fil (no CVSS) - [CVE-2010-4618](https://cve.now/CVE-2010-4618.md): Cross-site scripting (XSS) vulnerability in the Algis Info aiContactSafe component before 2.0.14 for Joomla! allows remote attackers to inje (no CVSS) - [CVE-2010-4619](https://cve.now/CVE-2010-4619.md): SQL injection vulnerability in profil.php in Mafya Oyun Scrpti (aka Mafia Game Script) allows remote attackers to execute arbitrary SQL comm (no CVSS) - [CVE-2010-3859](https://cve.now/CVE-2010-3859.md): Multiple integer signedness errors in the TIPC implementation in the Linux kernel before 2.6.36.2 allow local users to gain privileges via a (no CVSS) - [CVE-2010-3874](https://cve.now/CVE-2010-3874.md): Heap-based buffer overflow in the bcm\_connect function in net/can/bcm.c (aka the Broadcast Manager) in the Controller Area Network (CAN) imp (no CVSS) - [CVE-2010-4343](https://cve.now/CVE-2010-4343.md): drivers/scsi/bfa/bfa\_core.c in the Linux kernel before 2.6.35 does not initialize a certain port data structure, which allows local users to (no CVSS) - [CVE-2010-4565](https://cve.now/CVE-2010-4565.md): The bcm\_connect function in net/can/bcm.c (aka the Broadcast Manager) in the Controller Area Network (CAN) implementation in the Linux kerne (no CVSS) - [CVE-2010-4600](https://cve.now/CVE-2010-4600.md): Dojo Toolkit, as used in the Web client in IBM Rational ClearQuest 7.1.1.x before 7.1.1.4 and 7.1.2.x before 7.1.2.1, allows remote attacker (no CVSS) - [CVE-2010-4601](https://cve.now/CVE-2010-4601.md): Multiple unspecified vulnerabilities in IBM Rational ClearQuest 7.0.x before 7.0.1.11, 7.1.1.x before 7.1.1.4, and 7.1.2.x before 7.1.2.1 al (no CVSS) - [CVE-2010-4602](https://cve.now/CVE-2010-4602.md): The Web client in IBM Rational ClearQuest 7.1.1.x before 7.1.1.4 and 7.1.2.x before 7.1.2.1 allows remote authenticated users to bypass "res (no CVSS) - [CVE-2010-4603](https://cve.now/CVE-2010-4603.md): IBM Rational ClearQuest 7.0.x before 7.0.1.11, 7.1.1.x before 7.1.1.4, and 7.1.2.x before 7.1.2.1 does not prevent modification of back-refe (no CVSS) - [CVE-2010-4604](https://cve.now/CVE-2010-4604.md): Stack-based buffer overflow in the GeneratePassword function in dsmtca (aka the Trusted Communications Agent or TCA) in the backup-archive c (no CVSS) - [CVE-2010-4605](https://cve.now/CVE-2010-4605.md): Unspecified vulnerability in the backup-archive client in IBM Tivoli Storage Manager (TSM) 5.3.x before 5.3.6.10, 5.4.x before 5.4.3.4, 5.5. (no CVSS) - [CVE-2010-4606](https://cve.now/CVE-2010-4606.md): Unspecified vulnerability in the Space Management client in the Hierarchical Storage Management (HSM) component in IBM Tivoli Storage Manage (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2010-12-29 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.