# CVEs published 2010-04-05

43 CVEs were published on April 5, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-0173](https://cve.now/CVE-2010-0173.md): Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before… (no CVSS)
- [CVE-2010-0174](https://cve.now/CVE-2010-0174.md): Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2… (no CVSS)
- [CVE-2010-0175](https://cve.now/CVE-2010-0175.md): Use-after-free vulnerability in the nsTreeSelection implementation in Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.9, Thunderbird… (no CVSS)
- [CVE-2010-0176](https://cve.now/CVE-2010-0176.md): Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2; Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 do not… (no CVSS)
- [CVE-2010-0177](https://cve.now/CVE-2010-0177.md): Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, frees the contents of the… (no CVSS)
- [CVE-2010-0178](https://cve.now/CVE-2010-0178.md): Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, does not prevent applets from… (no CVSS)
- [CVE-2010-0179](https://cve.now/CVE-2010-0179.md): Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, when the XMLHttpRequestSpy module in the Firebug add-on… (no CVSS)
- [CVE-2010-0181](https://cve.now/CVE-2010-0181.md): Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, executes a mail application in situations where an IMG… (no CVSS)
- [CVE-2010-0182](https://cve.now/CVE-2010-0182.md): The XMLDocument::load function in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4, and SeaMonkey before… (no CVSS)
- [CVE-2009-2822](https://cve.now/CVE-2009-2822.md): AirPort Utility before 5.5.1 for Apple AirPort Base Station does not properly distribute MAC address ACLs to network extenders, which… (no CVSS)
- [CVE-2009-2936](https://cve.now/CVE-2009-2936.md): The Command Line Interface (aka Server CLI or administration interface) in the master process in the reverse proxy server in Varnish… (no CVSS)
- [CVE-2010-0009](https://cve.now/CVE-2010-0009.md): Apache CouchDB 0.8.0 through 0.10.1 allows remote attackers to obtain sensitive information by measuring the completion time of operations… (no CVSS)
- [CVE-2010-0625](https://cve.now/CVE-2010-0625.md): Stack-based buffer overflow in NWFTPD.nlm before 5.10.01 in the FTP server in Novell NetWare 5.1 through 6.5 SP8 allows remote… (no CVSS)
- [CVE-2010-0684](https://cve.now/CVE-2010-0684.md): Cross-site scripting (XSS) vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1 allows remote authenticated users to… (no CVSS, org.apache.activemq:activemq-parent)
- [CVE-2010-1244](https://cve.now/CVE-2010-1244.md): Cross-site request forgery (CSRF) vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1 allows remote attackers to… (no CVSS, org.apache.activemq:activemq-parent)
- [CVE-2000-1245](https://cve.now/CVE-2000-1245.md): Multiple unspecified vulnerabilities in NWFTPD.nlm before 5.01o in the FTP server in Novell NetWare 5.1 SP3 allow remote attackers to… (no CVSS)
- [CVE-2000-1246](https://cve.now/CVE-2000-1246.md): NWFTPD.nlm before 5.01o in the FTP server in Novell NetWare 5.1 SP3 allows remote authenticated users to cause a denial of service (abend)… (no CVSS)
- [CVE-2001-1587](https://cve.now/CVE-2001-1587.md): NWFTPD.nlm before 5.01w in the FTP server in Novell NetWare allows remote attackers to cause a denial of service (abend) via an anonymous… (no CVSS)
- [CVE-2002-2432](https://cve.now/CVE-2002-2432.md): Unspecified vulnerability in NWFTPD.nlm before 5.03b in the FTP server in Novell NetWare allows remote attackers to cause a denial of… (no CVSS)
- [CVE-2002-2433](https://cve.now/CVE-2002-2433.md): NWFTPD.nlm before 5.03b in the FTP server in Novell NetWare allows remote authenticated users to cause a denial of service (abend) via a… (no CVSS)
- [CVE-2002-2434](https://cve.now/CVE-2002-2434.md): NWFTPD.nlm before 5.02i in the FTP server in Novell NetWare does not properly listen for data connections, which allows remote attackers… (no CVSS)
- [CVE-2003-1591](https://cve.now/CVE-2003-1591.md): NWFTPD.nlm in the FTP server in Novell NetWare 6.0 before SP4 and 6.5 before SP1 allows user-assisted remote attackers to cause a denial… (no CVSS)
- [CVE-2003-1592](https://cve.now/CVE-2003-1592.md): Multiple buffer overflows in NWFTPD.nlm in the FTP server in Novell NetWare 6.0 before SP4 and 6.5 before SP1 allow remote attackers to… (no CVSS)
- [CVE-2003-1593](https://cve.now/CVE-2003-1593.md): NWFTPD.nlm in the FTP server in Novell NetWare 6.0 before SP4 and 6.5 before SP1 does not enforce domain-name login restrictions, which… (no CVSS)
- [CVE-2003-1594](https://cve.now/CVE-2003-1594.md): NWFTPD.nlm before 5.04.05 in the FTP server in Novell NetWare 6.5 does not properly enforce FTPREST.TXT settings, which allows remote… (no CVSS)
- [CVE-2003-1595](https://cve.now/CVE-2003-1595.md): NWFTPD.nlm before 5.04.05 in the FTP server in Novell NetWare 6.5 does not properly perform "intruder detection," which has unspecified… (no CVSS)
- [CVE-2003-1596](https://cve.now/CVE-2003-1596.md): NWFTPD.nlm before 5.03.12 in the FTP server in Novell NetWare does not properly restrict filesystem use by anonymous users with NFS… (no CVSS)
- [CVE-2004-2767](https://cve.now/CVE-2004-2767.md): NWFTPD.nlm before 5.04.25 in the FTP server in Novell NetWare does not promptly close DS sessions, which allows remote attackers to cause… (no CVSS)
- [CVE-2005-4887](https://cve.now/CVE-2005-4887.md): NWFTPD.nlm before 5.06.05 in the FTP server in Novell NetWare 6.5 SP5 allows attackers to have an unspecified impact via vectors related… (no CVSS)
- [CVE-2005-4888](https://cve.now/CVE-2005-4888.md): NWFTPD.nlm before 5.06.04 in the FTP server in Novell NetWare allows remote attackers to cause a denial of service (excessive stale… (no CVSS)
- [CVE-2007-6734](https://cve.now/CVE-2007-6734.md): NWFTPD.nlm before 5.08.07 in the FTP server in Novell NetWare 6.5 SP7 does not properly implement the FTPREST.TXT NOREMOTE restriction… (no CVSS)
- [CVE-2007-6735](https://cve.now/CVE-2007-6735.md): NWFTPD.nlm before 5.08.06 in the FTP server in Novell NetWare does not properly handle partial matches for container names in the… (no CVSS)
- [CVE-2008-3279](https://cve.now/CVE-2008-3279.md): Untrusted search path vulnerability in libbrlttybba.so in brltty 3.7.2 allows local users to gain privileges via a crafted library… (no CVSS)
- [CVE-2009-4764](https://cve.now/CVE-2009-4764.md): Adobe Reader 8.x and 9.x on Windows is able to execute EXE files that are embedded in a PDF document, which makes it easier for remote… (no CVSS)
- [CVE-2010-0825](https://cve.now/CVE-2010-0825.md): lib-src/movemail.c in movemail in emacs 22 and 23 allows local users to read, modify, or delete arbitrary mailbox files via a symlink… (no CVSS)
- [CVE-2010-0826](https://cve.now/CVE-2010-0826.md): The Free Software Foundation (FSF) Berkeley DB NSS module (aka libnss-db) 2.2.3pre1 reads the DB\_CONFIG file in the current working… (no CVSS)
- [CVE-2010-0828](https://cve.now/CVE-2010-0828.md): Cross-site scripting (XSS) vulnerability in action/Despam.py in the Despam action module in MoinMoin 1.8.7 and 1.9.2 allows remote… (no CVSS, moin)
- [CVE-2010-1238](https://cve.now/CVE-2010-1238.md): MoinMoin 1.7.1 allows remote attackers to bypass the textcha protection mechanism by modifying the textcha-question and textcha-answer… (no CVSS)
- [CVE-2010-1239](https://cve.now/CVE-2010-1239.md): Foxit Reader before 3.2.1.0401 allows remote attackers to (1) execute arbitrary local programs via a certain "/Type /Action /S /Launch"… (no CVSS)
- [CVE-2010-1240](https://cve.now/CVE-2010-1240.md): Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, do not restrict the contents of one text field in… (no CVSS)
- [CVE-2010-1241](https://cve.now/CVE-2010-1241.md): Heap-based buffer overflow in the custom heap management system in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on… (no CVSS)
- [CVE-2010-1242](https://cve.now/CVE-2010-1242.md): Multiple cross-site scripting (XSS) vulnerabilities in the IBM Web Interface for Content Management (aka WEBi) before 1.0.4 allow remote… (no CVSS)
- [CVE-2010-1243](https://cve.now/CVE-2010-1243.md): The IBM Web Interface for Content Management (aka WEBi) before 1.0.4 creates persistent cookies on client workstations, which has… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2010-04-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.