# CVEs published 2011-01-03

16 CVEs were published on January 3, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2010-1677](https://cve.now/CVE-2010-1677.md): MHonArc 2.6.16 allows remote attackers to cause a denial of service (CPU consumption) via start tags that are placed within other start tags (no CVSS)
- [CVE-2010-3448](https://cve.now/CVE-2010-3448.md): drivers/platform/x86/thinkpad\_acpi.c in the Linux kernel before 2.6.34 on ThinkPad devices, when the X.Org X server is used, does not proper (no CVSS)
- [CVE-2010-3873](https://cve.now/CVE-2010-3873.md): The X.25 implementation in the Linux kernel before 2.6.36.2 does not properly parse facilities, which allows remote attackers to cause a den (no CVSS)
- [CVE-2010-3875](https://cve.now/CVE-2010-3875.md): The ax25\_getname function in net/ax25/af\_ax25.c in the Linux kernel before 2.6.37-rc2 does not initialize a certain structure, which allows (no CVSS)
- [CVE-2010-3876](https://cve.now/CVE-2010-3876.md): net/packet/af\_packet.c in the Linux kernel before 2.6.37-rc2 does not properly initialize certain structure members, which allows local user (no CVSS)
- [CVE-2010-3877](https://cve.now/CVE-2010-3877.md): The get\_name function in net/tipc/socket.c in the Linux kernel before 2.6.37-rc2 does not initialize a certain structure, which allows local (no CVSS)
- [CVE-2010-3907](https://cve.now/CVE-2010-3907.md): Multiple integer overflows in real.c in the Real demuxer plugin in VideoLAN VLC Media Player before 1.1.6 allow remote attackers to cause a (no CVSS)
- [CVE-2010-4162](https://cve.now/CVE-2010-4162.md): Multiple integer overflows in fs/bio.c in the Linux kernel before 2.6.36.2 allow local users to cause a denial of service (system crash) via (no CVSS)
- [CVE-2010-4163](https://cve.now/CVE-2010-4163.md): The blk\_rq\_map\_user\_iov function in block/blk-map.c in the Linux kernel before 2.6.36.2 allows local users to cause a denial of service (pan (no CVSS)
- [CVE-2010-4164](https://cve.now/CVE-2010-4164.md): Multiple integer underflows in the x25\_parse\_facilities function in net/x25/x25\_facilities.c in the Linux kernel before 2.6.36.2 allow remot (no CVSS)
- [CVE-2010-4348](https://cve.now/CVE-2010-4348.md): Cross-site scripting (XSS) vulnerability in admin/upgrade\_unattended.php in MantisBT before 1.2.4 allows remote attackers to inject arbitrar (no CVSS)
- [CVE-2010-4349](https://cve.now/CVE-2010-4349.md): admin/upgrade\_unattended.php in MantisBT before 1.2.4 allows remote attackers to obtain sensitive information via an invalid db\_type paramet (no CVSS)
- [CVE-2010-4350](https://cve.now/CVE-2010-4350.md): Directory traversal vulnerability in admin/upgrade\_unattended.php in MantisBT before 1.2.4 allows remote attackers to include and execute ar (no CVSS)
- [CVE-2010-4524](https://cve.now/CVE-2010-4524.md): Cross-site scripting (XSS) vulnerability in lib/mhtxthtml.pl in MHonArc 2.6.16 allows remote attackers to inject arbitrary web script or HTM (no CVSS)
- [CVE-2010-4536](https://cve.now/CVE-2010-4536.md): Multiple cross-site scripting (XSS) vulnerabilities in KSES, as used in WordPress before 3.0.4, allow remote attackers to inject arbitrary w (no CVSS)
- [CVE-2010-4668](https://cve.now/CVE-2010-4668.md): The blk\_rq\_map\_user\_iov function in block/blk-map.c in the Linux kernel before 2.6.37-rc7 allows local users to cause a denial of service (p (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-01-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.