# CVEs published 2010-01-20

11 CVEs were published on January 20, 2010: 0 critical, 2 high. Days are UTC.

- [CVE-2009-3999](https://cve.now/CVE-2009-3999.md): Stack-based buffer overflow in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to execute arbitrary… (no CVSS)
- [CVE-2009-4000](https://cve.now/CVE-2009-4000.md): Directory traversal vulnerability in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to overwrite… (no CVSS)
- [CVE-2010-0036](https://cve.now/CVE-2010-0036.md): Buffer overflow in CoreAudio in Apple Mac OS X 10.5.8 and 10.6.2 allows remote attackers to execute arbitrary code or cause a denial of… (CVSS 7.8)
- [CVE-2010-0037](https://cve.now/CVE-2010-0037.md): Buffer overflow in Image RAW in Apple Mac OS X 10.5.8 and 10.6.2 allows remote attackers to execute arbitrary code or cause a denial of… (CVSS 8.8)
- [CVE-2010-0357](https://cve.now/CVE-2010-0357.md): Cross-site scripting (XSS) vulnerability in the Login page in IBM Lotus Web Content Management (WCM) 6.0.1.4, 6.0.1.5, and 6.0.1.6 before… (no CVSS)
- [CVE-2010-0358](https://cve.now/CVE-2010-0358.md): Heap-based buffer overflow in the server in IBM Lotus Domino 7 and 8.5 FP1 allows remote attackers to cause a denial of service (daemon… (no CVSS)
- [CVE-2010-0359](https://cve.now/CVE-2010-0359.md): Buffer overflow in the SSLv2 support in Zeus Web Server before 4.3r5 allows remote attackers to cause a denial of service (daemon crash)… (no CVSS)
- [CVE-2010-0360](https://cve.now/CVE-2010-0360.md): Sun Java System Web Server (aka SJWS) 7.0 Update 7 allows remote attackers to overwrite memory locations in the heap, and discover the… (no CVSS)
- [CVE-2010-0361](https://cve.now/CVE-2010-0361.md): Stack-based buffer overflow in the WebDAV implementation in webservd in Sun Java System Web Server (aka SJWS) 7.0 Update 7 allows remote… (no CVSS)
- [CVE-2010-0362](https://cve.now/CVE-2010-0362.md): Zeus Web Server before 4.3r5 does not use random transaction IDs for DNS requests, which makes it easier for remote attackers to spoof DNS… (no CVSS)
- [CVE-2010-0363](https://cve.now/CVE-2010-0363.md): Cross-site scripting (XSS) vulnerability in Zeus Web Server before 4.3r5, when SSL is enabled for the admin server, allows remote… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2010-01-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.