# CVEs published 2010-03-26

34 CVEs were published on March 26, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-1131](https://cve.now/CVE-2010-1131.md): JavaScriptCore.dll, as used in Apple Safari 4.0.5 on Windows XP SP3, allows remote attackers to cause a denial of service (application… (no CVSS)
- [CVE-2010-1132](https://cve.now/CVE-2010-1132.md): The mlfi\_envrcpt function in spamass-milter.cpp in SpamAssassin Milter Plugin 0.3.1, when using the expand option, allows remote attackers… (no CVSS)
- [CVE-2010-1133](https://cve.now/CVE-2010-1133.md): Multiple SQL injection vulnerabilities in TikiWiki CMS/Groupware 4.x before 4.2 allow remote attackers to execute arbitrary SQL commands… (no CVSS)
- [CVE-2010-1134](https://cve.now/CVE-2010-1134.md): SQL injection vulnerability in the \_find function in searchlib.php in TikiWiki CMS/Groupware 3.x before 3.5 allows remote attackers to… (no CVSS)
- [CVE-2010-1135](https://cve.now/CVE-2010-1135.md): The user\_logout function in TikiWiki CMS/Groupware 4.x before 4.2 does not properly delete user login cookies, which allows remote… (no CVSS)
- [CVE-2010-1136](https://cve.now/CVE-2010-1136.md): The Standard Remember method in TikiWiki CMS/Groupware 3.x before 3.5 allows remote attackers to bypass access restrictions related to… (no CVSS)
- [CVE-2009-4739](https://cve.now/CVE-2009-4739.md): PHP remote file inclusion vulnerability in index.php in SkaDate Dating allows remote attackers to execute arbitrary PHP code via a URL in… (no CVSS)
- [CVE-2009-4740](https://cve.now/CVE-2009-4740.md): Directory traversal vulnerability in the Webesse E-Card (ws\_ecard) extension 1.0.2 and earlier for TYPO3 has unspecified impact and remote… (no CVSS)
- [CVE-2009-4741](https://cve.now/CVE-2009-4741.md): Unspecified vulnerability in the Extras Manager before 2.0.0.67 in Skype before 4.1.0.179 on Windows has unknown impact and attack vectors. (no CVSS)
- [CVE-2009-4742](https://cve.now/CVE-2009-4742.md): Multiple SQL injection vulnerabilities in Docebo 3.6.0.3 allow remote attackers to execute arbitrary SQL commands via (1) the word… (no CVSS)
- [CVE-2009-4743](https://cve.now/CVE-2009-4743.md): Multiple cross-site scripting (XSS) vulnerabilities in history-storage.aspx in AfterLogic WebMail Pro 4.7.10 and earlier allow remote… (no CVSS)
- [CVE-2009-4744](https://cve.now/CVE-2009-4744.md): Cross-site scripting (XSS) vulnerability in the Contact module in Exponent CMS 0.97-GA20090213 allows remote attackers to inject arbitrary… (no CVSS)
- [CVE-2009-4745](https://cve.now/CVE-2009-4745.md): Multiple SQL injection vulnerabilities in index.php in Dreamlevels DreamPoll 3.1 allow remote attackers to execute arbitrary SQL commands… (no CVSS)
- [CVE-2009-4746](https://cve.now/CVE-2009-4746.md): Cross-site scripting (XSS) vulnerability in index.php in Dreamlevels DreamPoll 3.1 allows remote attackers to inject arbitrary web script… (no CVSS)
- [CVE-2009-4747](https://cve.now/CVE-2009-4747.md): PHP remote file inclusion vulnerability in public/code/cp\_html2xhtmlbasic.php in All In One Control Panel (AIOCP) 1.4.001 allows remote… (no CVSS)
- [CVE-2009-4748](https://cve.now/CVE-2009-4748.md): SQL injection vulnerability in mycategoryorder.php in the My Category Order plugin 2.8 and earlier for WordPress allows remote attackers… (no CVSS)
- [CVE-2009-4749](https://cve.now/CVE-2009-4749.md): Multiple SQL injection vulnerabilities in PHP Live! 3.2.1 and 3.2.2 allow remote attackers to execute arbitrary SQL commands via the x… (no CVSS)
- [CVE-2009-4750](https://cve.now/CVE-2009-4750.md): PHP remote file inclusion vulnerability in home.php in Top Paidmailer allows remote attackers to execute arbitrary PHP code via a URL in… (no CVSS)
- [CVE-2009-4751](https://cve.now/CVE-2009-4751.md): SQL injection vulnerability in anzeiger/start.php in Swinger Club Portal allows remote attackers to execute arbitrary SQL commands via the… (no CVSS)
- [CVE-2009-4752](https://cve.now/CVE-2009-4752.md): PHP remote file inclusion vulnerability in anzeiger/start.php in Swinger Club Portal allows remote attackers to execute arbitrary PHP code… (no CVSS)
- [CVE-2010-1125](https://cve.now/CVE-2010-1125.md): The JavaScript implementation in Mozilla Firefox 3.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote… (no CVSS)
- [CVE-2010-1126](https://cve.now/CVE-2010-1126.md): The JavaScript implementation in WebKit allows remote attackers to send selected keystrokes to a form field in a hidden frame, instead of… (no CVSS)
- [CVE-2010-1127](https://cve.now/CVE-2010-1127.md): Microsoft Internet Explorer 6 and 7 does not initialize certain data structures during execution of the createElement method, which allows… (no CVSS)
- [CVE-2010-1128](https://cve.now/CVE-2010-1128.md): The Linear Congruential Generator (LCG) in PHP before 5.2.13 does not provide the expected entropy, which makes it easier for… (no CVSS)
- [CVE-2010-1129](https://cve.now/CVE-2010-1129.md): The safe\_mode implementation in PHP before 5.2.13 does not properly handle directory pathnames that lack a trailing / (slash) character… (no CVSS)
- [CVE-2010-1130](https://cve.now/CVE-2010-1130.md): session.c in the session extension in PHP before 5.2.13, and 5.3.1, does not properly interpret ; (semicolon) characters in the argument… (no CVSS)
- [CVE-2009-4505](https://cve.now/CVE-2009-4505.md): Multiple cross-site scripting (XSS) vulnerabilities in OpenCMS OAMP Comments Module 1.0.1 allow remote attackers to inject arbitrary web… (no CVSS)
- [CVE-2010-0439](https://cve.now/CVE-2010-0439.md): Chip Salzenberg Deliver allows local users to cause a denial of service, obtain sensitive information, and possibly change the ownership… (no CVSS)
- [CVE-2010-0731](https://cve.now/CVE-2010-0731.md): The gnutls\_x509\_crt\_get\_serial function in the GnuTLS library before 1.2.1, when running on big-endian, 64-bit platforms, calls the… (no CVSS)
- [CVE-2010-0740](https://cve.now/CVE-2010-0740.md): The ssl3\_get\_record function in ssl/s3\_pkt.c in OpenSSL 0.9.8f through 0.9.8m allows remote attackers to cause a denial of service (crash)… (no CVSS)
- [CVE-2010-0988](https://cve.now/CVE-2010-0988.md): Multiple unspecified vulnerabilities in Pulse CMS before 1.2.3 allow (1) remote attackers to write to arbitrary files and execute… (no CVSS)
- [CVE-2010-0989](https://cve.now/CVE-2010-0989.md): Directory traversal vulnerability in delete.php in Pulse CMS before 1.2.3 allows remote authenticated users to delete arbitrary files via… (no CVSS)
- [CVE-2010-1123](https://cve.now/CVE-2010-1123.md): Chip Salzenberg Deliver does not properly associate a lockfile with the user who created the file, which allows local users to cause a… (no CVSS)
- [CVE-2010-1124](https://cve.now/CVE-2010-1124.md): bos.rte.libc 5.3.9.4 on IBM AIX 5.3 does not properly support reading a certain address field after a successful getaddrinfo function… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2010-03-26
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.