# CVEs published 2010-01-21 19 CVEs were published on January 21, 2010: 0 critical, 1 high. 1 is now in CISA KEV. Days are UTC. - [CVE-2010-0378](https://cve.now/CVE-2010-0378.md): Use-after-free vulnerability in Adobe Flash Player 6.0.79, as distributed in Microsoft Windows XP SP2 and SP3, allows remote attackers to… (no CVSS) - [CVE-2010-0379](https://cve.now/CVE-2010-0379.md): Multiple unspecified vulnerabilities in the Macromedia Flash ActiveX control in Adobe Flash Player 6, as distributed in Microsoft Windows… (no CVSS) - [CVE-2010-0137](https://cve.now/CVE-2010-0137.md): Unspecified vulnerability in the sshd\_child\_handler process in the SSH server in Cisco IOS XR 3.4.1 through 3.7.0 allows remote attackers… (no CVSS) - [CVE-2010-0138](https://cve.now/CVE-2010-0138.md): Buffer overflow in Cisco CiscoWorks Internetwork Performance Monitor (IPM) 2.6 and earlier on Windows, as distributed in CiscoWorks LAN… (no CVSS) - [CVE-2010-0370](https://cve.now/CVE-2010-0370.md): Cross-site scripting (XSS) vulnerability in the Node Blocks module 5.x-1.1 and earlier, and 6.x-1.3 and earlier, a module for Drupal… (no CVSS) - [CVE-2010-0371](https://cve.now/CVE-2010-0371.md): Multiple cross-site scripting (XSS) vulnerabilities in index.php in Hitmaaan Gallery 1.3 allow remote attackers to inject arbitrary web… (no CVSS) - [CVE-2010-0372](https://cve.now/CVE-2010-0372.md): SQL injection vulnerability in the Articlemanager (com\_articlemanager) component for Joomla! allows remote attackers to execute arbitrary… (no CVSS) - [CVE-2010-0373](https://cve.now/CVE-2010-0373.md): SQL injection vulnerability in the libros (com\_libros) component for Joomla! allows remote attackers to execute arbitrary SQL commands via… (no CVSS) - [CVE-2010-0374](https://cve.now/CVE-2010-0374.md): Cross-site scripting (XSS) vulnerability in the Marketplace (com\_marketplace) component 1.2 for Joomla! allows remote attackers to inject… (no CVSS) - [CVE-2010-0375](https://cve.now/CVE-2010-0375.md): SQL injection vulnerability in product\_list.php in JCE-Tech PHP Calendars, downloaded 2010-01-11, allows remote attackers to execute… (no CVSS) - [CVE-2010-0376](https://cve.now/CVE-2010-0376.md): Cross-site scripting (XSS) vulnerability in product\_list.php in JCE-Tech PHP Calendars, downloaded 2010-01-11, allows remote attackers to… (no CVSS) - [CVE-2010-0377](https://cve.now/CVE-2010-0377.md): SQL injection vulnerability in modules/arcade/index.php in PHP MySpace Gold Edition 8.0 and 8.10 allows remote attackers to execute… (no CVSS) - [CVE-2010-0364](https://cve.now/CVE-2010-0364.md): Stack-based buffer overflow in VideoLAN VLC Media Player 0.8.6 allows user-assisted remote attackers to execute arbitrary code via an ogg… (no CVSS) - [CVE-2010-0365](https://cve.now/CVE-2010-0365.md): Cross-site scripting (XSS) vulnerability in search.php in BitScripts Bits Video Script 2.04 and 2.05 Gold Beta allows remote attackers to… (no CVSS) - [CVE-2010-0366](https://cve.now/CVE-2010-0366.md): Multiple unrestricted file upload vulnerabilities in (1) register.php and (2) addvideo.php in BitScripts Bits Video Script 2.04 and 2.05… (no CVSS) - [CVE-2010-0367](https://cve.now/CVE-2010-0367.md): Multiple PHP remote file inclusion vulnerabilities in BitScripts Bits Video Script 2.05 Gold Beta, and possibly 2.04, allow remote… (no CVSS) - [CVE-2009-4002](https://cve.now/CVE-2009-4002.md): Heap-based buffer overflow in Adobe Shockwave Player before 11.5.6.606 allows remote attackers to execute arbitrary code via a crafted 3D… (no CVSS) - [CVE-2009-4003](https://cve.now/CVE-2009-4003.md): Multiple integer overflows in Adobe Shockwave Player before 11.5.6.606 allow remote attackers to execute arbitrary code via (1) an… (no CVSS) - [CVE-2010-0232](https://cve.now/CVE-2010-0232.md): The kernel in Microsoft Windows NT 3.1 through Windows 7, including Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windo (CVSS 7.8, KEV) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/archive/2010-01-21 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.