# CVEs published 2010-04-01

48 CVEs were published on April 1, 2010: 1 critical, 0 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2010-1225](https://cve.now/CVE-2010-1225.md): The memory-management implementation in the Virtual Machine Monitor (aka VMM or hypervisor) in Microsoft Virtual PC 2007 Gold and SP1… (no CVSS)
- [CVE-2010-1226](https://cve.now/CVE-2010-1226.md): The HTTP client functionality in Apple iPhone OS 3.1 on the iPhone 2G and 3.1.3 on the iPhone 3GS allows remote attackers to cause a… (no CVSS)
- [CVE-2010-1227](https://cve.now/CVE-2010-1227.md): Cross-site scripting (XSS) vulnerability in Sun Java System Communications Express 6.2 and 6.3 allows remote attackers to inject arbitrary… (no CVSS)
- [CVE-2010-1228](https://cve.now/CVE-2010-1228.md): Multiple race conditions in the sandbox infrastructure in Google Chrome before 4.1.249.1036 have unspecified impact and attack vectors. (no CVSS)
- [CVE-2010-1229](https://cve.now/CVE-2010-1229.md): The sandbox infrastructure in Google Chrome before 4.1.249.1036 does not properly use pointers, which has unspecified impact and attack… (no CVSS)
- [CVE-2010-1230](https://cve.now/CVE-2010-1230.md): Google Chrome before 4.1.249.1036 does not have the expected behavior for attempts to delete Web SQL Databases and clear the Strict… (no CVSS)
- [CVE-2010-1231](https://cve.now/CVE-2010-1231.md): Google Chrome before 4.1.249.1036 processes HTTP headers before invoking the SafeBrowsing feature, which allows remote attackers to have… (no CVSS)
- [CVE-2010-1232](https://cve.now/CVE-2010-1232.md): Google Chrome before 4.1.249.1036 allows remote attackers to cause a denial of service (memory error) or possibly have unspecified other… (no CVSS)
- [CVE-2010-1233](https://cve.now/CVE-2010-1233.md): Multiple integer overflows in Google Chrome before 4.1.249.1036 allow remote attackers to have an unspecified impact via vectors involving… (no CVSS)
- [CVE-2010-1234](https://cve.now/CVE-2010-1234.md): Unspecified vulnerability in Google Chrome before 4.1.249.1036 allows remote attackers to truncate the URL shown in the HTTP Basic… (no CVSS)
- [CVE-2010-1235](https://cve.now/CVE-2010-1235.md): Unspecified vulnerability in Google Chrome before 4.1.249.1036 allows remote attackers to trigger the omission of a download warning… (no CVSS)
- [CVE-2010-1236](https://cve.now/CVE-2010-1236.md): The protocolIs function in platform/KURLGoogle.cpp in WebCore in WebKit before r55822, as used in Google Chrome before 4.1.249.1036 and… (no CVSS)
- [CVE-2010-1237](https://cve.now/CVE-2010-1237.md): Google Chrome 4.1 BETA before 4.1.249.1036 allows remote attackers to cause a denial of service (memory error) or possibly have… (no CVSS)
- [CVE-2010-1224](https://cve.now/CVE-2010-1224.md): main/acl.c in Asterisk Open Source 1.6.0.x before 1.6.0.25, 1.6.1.x before 1.6.1.17, and 1.6.2.x before 1.6.2.5 does not properly enforce… (no CVSS)
- [CVE-2009-2277](https://cve.now/CVE-2009-2277.md): Cross-site scripting (XSS) vulnerability in WebAccess in VMware VirtualCenter 2.0.2 and 2.5 and VMware ESX 3.0.3 and 3.5 allows remote… (no CVSS)
- [CVE-2010-0686](https://cve.now/CVE-2010-0686.md): WebAccess in VMware VirtualCenter 2.0.2 and 2.5, VMware Server 2.0, and VMware ESX 3.0.3 and 3.5 allows remote attackers to leverage… (no CVSS)
- [CVE-2010-0768](https://cve.now/CVE-2010-0768.md): Cross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.41, 6.1… (no CVSS)
- [CVE-2010-0769](https://cve.now/CVE-2010-0769.md): IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.41, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.9 does not properly define wsadmin… (no CVSS)
- [CVE-2010-0770](https://cve.now/CVE-2010-0770.md): IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.41, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.9 allows remote authenticated users… (no CVSS)
- [CVE-2010-1031](https://cve.now/CVE-2010-1031.md): Unspecified vulnerability in HP Insight Control for Linux (aka IC-Linux or ICE-LX) 2.11 and earlier allows local users to gain privileges… (no CVSS)
- [CVE-2010-1137](https://cve.now/CVE-2010-1137.md): Cross-site scripting (XSS) vulnerability in WebAccess in VMware VirtualCenter 2.0.2 and 2.5 and VMware ESX 3.0.3 and 3.5, and the Server… (no CVSS)
- [CVE-2010-1193](https://cve.now/CVE-2010-1193.md): Cross-site scripting (XSS) vulnerability in WebAccess in VMware Server 2.0 allows remote attackers to inject arbitrary web script or HTML… (no CVSS)
- [CVE-2010-0082](https://cve.now/CVE-2010-0082.md): Unspecified vulnerability in the HotSpot Server component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2\_25… (no CVSS)
- [CVE-2010-0084](https://cve.now/CVE-2010-0084.md): Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23… (no CVSS)
- [CVE-2010-0085](https://cve.now/CVE-2010-0085.md): Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23… (no CVSS)
- [CVE-2010-0087](https://cve.now/CVE-2010-0087.md): Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update… (no CVSS)
- [CVE-2010-0088](https://cve.now/CVE-2010-0088.md): Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23… (no CVSS)
- [CVE-2010-0089](https://cve.now/CVE-2010-0089.md): Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update… (no CVSS)
- [CVE-2010-0090](https://cve.now/CVE-2010-0090.md): Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18 allows remote… (no CVSS)
- [CVE-2010-0091](https://cve.now/CVE-2010-0091.md): Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23… (no CVSS)
- [CVE-2010-0092](https://cve.now/CVE-2010-0092.md): Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, and 5.0 Update 23… (no CVSS)
- [CVE-2010-0093](https://cve.now/CVE-2010-0093.md): Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23… (no CVSS)
- [CVE-2010-0094](https://cve.now/CVE-2010-0094.md): Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18 and 5.0 Update 23… (no CVSS)
- [CVE-2010-0095](https://cve.now/CVE-2010-0095.md): Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23… (no CVSS)
- [CVE-2010-0837](https://cve.now/CVE-2010-0837.md): Unspecified vulnerability in the Pack200 component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote… (no CVSS)
- [CVE-2010-0838](https://cve.now/CVE-2010-0838.md): Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote… (no CVSS)
- [CVE-2010-0839](https://cve.now/CVE-2010-0839.md): Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2\_25, and… (no CVSS)
- [CVE-2010-0840](https://cve.now/CVE-2010-0840.md): Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and (CVSS 9.8, KEV)
- [CVE-2010-0841](https://cve.now/CVE-2010-0841.md): Unspecified vulnerability in the ImageIO component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2\_25 allows… (no CVSS)
- [CVE-2010-0842](https://cve.now/CVE-2010-0842.md): Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2\_25, and… (no CVSS)
- [CVE-2010-0843](https://cve.now/CVE-2010-0843.md): Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2\_25, and… (no CVSS)
- [CVE-2010-0844](https://cve.now/CVE-2010-0844.md): Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2\_25, and… (no CVSS)
- [CVE-2010-0845](https://cve.now/CVE-2010-0845.md): Unspecified vulnerability in the HotSpot Server component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows… (no CVSS)
- [CVE-2010-0846](https://cve.now/CVE-2010-0846.md): Unspecified vulnerability in the ImageIO component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2\_25, and… (no CVSS)
- [CVE-2010-0847](https://cve.now/CVE-2010-0847.md): Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2\_25, and… (no CVSS)
- [CVE-2010-0848](https://cve.now/CVE-2010-0848.md): Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2\_25, and… (no CVSS)
- [CVE-2010-0849](https://cve.now/CVE-2010-0849.md): Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2\_25, and… (no CVSS)
- [CVE-2010-0850](https://cve.now/CVE-2010-0850.md): Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 1.3.1\_27 allows remote attackers to affect… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2010-04-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.