# CVEs published 2010-12-30

38 CVEs were published on December 30, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-3708](https://cve.now/CVE-2010-3708.md): The serialization implementation in JBoss Drools in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 before 4.3.0. (no CVSS, org.drools:drools-core)
- [CVE-2010-3862](https://cve.now/CVE-2010-3862.md): The org.jboss.remoting.transport.bisocket.BisocketServerInvoker$SecondaryServerSocketThread.run method in JBoss Remoting 2.2.x before 2.2.3. (no CVSS)
- [CVE-2010-3878](https://cve.now/CVE-2010-3878.md): Cross-site request forgery (CSRF) vulnerability in the JMX Console in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) (no CVSS)
- [CVE-2010-3923](https://cve.now/CVE-2010-3923.md): Untrusted search path vulnerability in AttacheCase before 2.70 allows local users to gain privileges via a Trojan horse executable file in t (no CVSS)
- [CVE-2010-4265](https://cve.now/CVE-2010-4265.md): The org.jboss.remoting.transport.bisocket.BisocketServerInvoker$SecondaryServerSocketThread.run method in JBoss Remoting 2.2.x before 2.2.3. (no CVSS)
- [CVE-2010-4522](https://cve.now/CVE-2010-4522.md): Multiple cross-site scripting (XSS) vulnerabilities in MyBB (aka MyBulletinBoard) 1.4.14, and 1.6.x before 1.6.1, allow remote attackers to (no CVSS)
- [CVE-2010-4624](https://cve.now/CVE-2010-4624.md): MyBB (aka MyBulletinBoard) before 1.4.12 allows remote authenticated users to bypass intended restrictions on the number of \[img\] MyCodes by (no CVSS)
- [CVE-2010-4625](https://cve.now/CVE-2010-4625.md): MyBB (aka MyBulletinBoard) before 1.4.12 does not properly handle a configuration with a visible forum that contains hidden threads, which a (no CVSS)
- [CVE-2010-4626](https://cve.now/CVE-2010-4626.md): The my\_rand function in functions.php in MyBB (aka MyBulletinBoard) before 1.4.12 does not properly use the PHP mt\_rand function, which make (no CVSS)
- [CVE-2010-4627](https://cve.now/CVE-2010-4627.md): Cross-site request forgery (CSRF) vulnerability in usercp2.php in MyBB (aka MyBulletinBoard) before 1.4.12 allows remote attackers to hijack (no CVSS)
- [CVE-2010-4628](https://cve.now/CVE-2010-4628.md): member.php in MyBB (aka MyBulletinBoard) before 1.4.12 makes a certain superfluous call to the SQL COUNT function, which allows remote attac (no CVSS)
- [CVE-2010-4629](https://cve.now/CVE-2010-4629.md): MyBB (aka MyBulletinBoard) before 1.4.12 does not properly restrict uid values for group join requests, which allows remote attackers to cau (no CVSS)
- [CVE-2010-4630](https://cve.now/CVE-2010-4630.md): Cross-site scripting (XSS) vulnerability in pages/admin/surveys/create.php in the WP Survey And Quiz Tool plugin 1.2.1 for WordPress allows (no CVSS)
- [CVE-2010-4631](https://cve.now/CVE-2010-4631.md): Multiple cross-site scripting (XSS) vulnerabilities in ASPilot Pilot Cart 7.3 allow remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2010-4632](https://cve.now/CVE-2010-4632.md): Multiple SQL injection vulnerabilities in ASPilot Pilot Cart 7.3 allow remote attackers to execute arbitrary SQL commands via the (1) articl (no CVSS)
- [CVE-2010-4633](https://cve.now/CVE-2010-4633.md): SQL injection vulnerability in cart.php in digiSHOP 2.0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter, a (no CVSS)
- [CVE-2010-4634](https://cve.now/CVE-2010-4634.md): Directory traversal vulnerability in osTicket 1.6 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2010-4635](https://cve.now/CVE-2010-4635.md): SQL injection vulnerability in detail.asp in Site2Nite Vacation Rental (VRBO) Listings allows remote attackers to execute arbitrary SQL comm (no CVSS)
- [CVE-2010-4636](https://cve.now/CVE-2010-4636.md): SQL injection vulnerability in detail.asp in Site2Nite Business e-Listings allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2010-4637](https://cve.now/CVE-2010-4637.md): Cross-site scripting (XSS) vulnerability in feedlist/handler\_image.php in the FeedList plugin 2.61.01 for WordPress allows remote attackers (no CVSS)
- [CVE-2010-4638](https://cve.now/CVE-2010-4638.md): SQL injection vulnerability in the submitSurvey function in controller.php in JQuarks4s (com\_jquarks4s) component 1.0.0 for Joomla!, when ma (no CVSS)
- [CVE-2010-4639](https://cve.now/CVE-2010-4639.md): SQL injection vulnerability in index.php in MySource Matrix allows remote attackers to execute arbitrary SQL commands via the id parameter. (no CVSS)
- [CVE-2010-4640](https://cve.now/CVE-2010-4640.md): Multiple cross-site scripting (XSS) vulnerabilities in XWiki Watch 1.0 allow remote attackers to inject arbitrary web script or HTML via the (no CVSS)
- [CVE-2010-4641](https://cve.now/CVE-2010-4641.md): SQL injection vulnerability in XWiki Enterprise before 2.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors (no CVSS)
- [CVE-2010-4642](https://cve.now/CVE-2010-4642.md): Cross-site scripting (XSS) vulnerability in XWiki Enterprise before 2.5 allows remote attackers to inject arbitrary web script or HTML via u (no CVSS)
- [CVE-2010-3848](https://cve.now/CVE-2010-3848.md): Stack-based buffer overflow in the econet\_sendmsg function in net/econet/af\_econet.c in the Linux kernel before 2.6.36.2, when an econet add (no CVSS)
- [CVE-2010-3849](https://cve.now/CVE-2010-3849.md): The econet\_sendmsg function in net/econet/af\_econet.c in the Linux kernel before 2.6.36.2, when an econet address is configured, allows loca (no CVSS)
- [CVE-2010-3850](https://cve.now/CVE-2010-3850.md): The ec\_dev\_ioctl function in net/econet/af\_econet.c in the Linux kernel before 2.6.36.2 does not require the CAP\_NET\_ADMIN capability, which (no CVSS)
- [CVE-2010-4158](https://cve.now/CVE-2010-4158.md): The sk\_run\_filter function in net/core/filter.c in the Linux kernel before 2.6.36.2 does not check whether a certain memory location has bee (no CVSS)
- [CVE-2010-4161](https://cve.now/CVE-2010-4161.md): The udp\_queue\_rcv\_skb function in net/ipv4/udp.c in a certain Red Hat build of the Linux kernel 2.6.18 in Red Hat Enterprise Linux (RHEL) 5 (no CVSS)
- [CVE-2010-4258](https://cve.now/CVE-2010-4258.md): The do\_exit function in kernel/exit.c in the Linux kernel before 2.6.36.2 does not properly handle a KERNEL\_DS get\_fs value, which allows lo (no CVSS)
- [CVE-2010-4276](https://cve.now/CVE-2010-4276.md): Cross-site scripting (XSS) vulnerability in the lz\_tracking\_set\_sessid function in templates/jscript/jstrack.tpl in LiveZilla 3.2.0.2 allows (no CVSS)
- [CVE-2010-4321](https://cve.now/CVE-2010-4321.md): Stack-based buffer overflow in an ActiveX control in ienipp.ocx in Novell iPrint Client 5.52 allows remote attackers to execute arbitrary co (no CVSS)
- [CVE-2010-4342](https://cve.now/CVE-2010-4342.md): The aun\_incoming function in net/econet/af\_econet.c in the Linux kernel before 2.6.37-rc6, when Econet is enabled, allows remote attackers t (no CVSS)
- [CVE-2010-4352](https://cve.now/CVE-2010-4352.md): Stack consumption vulnerability in D-Bus (aka DBus) before 1.4.1 allows local users to cause a denial of service (daemon crash) via a messag (no CVSS)
- [CVE-2010-4507](https://cve.now/CVE-2010-4507.md): Multiple cross-site request forgery (CSRF) vulnerabilities on the iSpot 2.0.0.0 R1679, and the ClearSpot 2.0.0.0 R1512 and R1786, with firmw (no CVSS)
- [CVE-2010-4622](https://cve.now/CVE-2010-4622.md): Directory traversal vulnerability in WebSEAL in IBM Tivoli Access Manager for e-business 6.1.1 before 6.1.1-TIV-AWS-FP0001 on AIX allows rem (no CVSS)
- [CVE-2010-4623](https://cve.now/CVE-2010-4623.md): WebSEAL in IBM Tivoli Access Manager for e-business 6.1.1 before 6.1.1-TIV-AWS-FP0001 allows remote authenticated users to cause a denial of (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-12-30
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.