# CVEs published 2010-04-08

15 CVEs were published on April 8, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-1312](https://cve.now/CVE-2010-1312.md): Directory traversal vulnerability in the iJoomla News Portal (com\_news\_portal) component 1.5.x for Joomla! allows remote attackers to read… (no CVSS)
- [CVE-2010-1313](https://cve.now/CVE-2010-1313.md): Directory traversal vulnerability in the Seber Cart (com\_sebercart) component 1.0.0.12 and 1.0.0.13 for Joomla!, when magic\_quotes\_gpc is… (no CVSS)
- [CVE-2010-1314](https://cve.now/CVE-2010-1314.md): Directory traversal vulnerability in the Highslide JS (com\_hsconfig) component 1.5 and 2.0.9 for Joomla! allows remote attackers to read… (no CVSS)
- [CVE-2010-1315](https://cve.now/CVE-2010-1315.md): Directory traversal vulnerability in weberpcustomer.php in the webERPcustomer (com\_weberpcustomer) component 1.2.1 and 1.x before 1.06.02… (no CVSS)
- [CVE-2010-0098](https://cve.now/CVE-2010-0098.md): ClamAV before 0.96 does not properly handle the (1) CAB and (2) 7z file formats, which allows remote attackers to bypass virus detection… (no CVSS)
- [CVE-2010-0743](https://cve.now/CVE-2010-0743.md): Multiple format string vulnerabilities in isns.c in (1) Linux SCSI target framework (aka tgt or scsi-target-utils) 1.0.3, 0.9.5, and… (no CVSS)
- [CVE-2010-1309](https://cve.now/CVE-2010-1309.md): Directory traversal vulnerability in Irmin CMS (formerly Pepsi CMS) 0.6 BETA2 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2010-1310](https://cve.now/CVE-2010-1310.md): Opera 10.50 allows remote attackers to obtain sensitive information via crafted XSLT constructs, which cause Opera to return cached… (no CVSS)
- [CVE-2010-1311](https://cve.now/CVE-2010-1311.md): The qtm\_decompress function in libclamav/mspack.c in ClamAV before 0.96 allows remote attackers to cause a denial of service (memory… (no CVSS)
- [CVE-2010-1303](https://cve.now/CVE-2010-1303.md): Multiple cross-site scripting (XSS) vulnerabilities in the Taxonomy Filter module 6.x before 6.x-1.1 for Drupal allow remote authenticated… (no CVSS)
- [CVE-2010-1304](https://cve.now/CVE-2010-1304.md): Directory traversal vulnerability in userstatus.php in the User Status (com\_userstatus) component 1.21.16 for Joomla! allows remote… (no CVSS)
- [CVE-2010-1305](https://cve.now/CVE-2010-1305.md): Directory traversal vulnerability in jinventory.php in the JInventory (com\_jinventory) component 1.23.02 and possibly other versions… (no CVSS)
- [CVE-2010-1306](https://cve.now/CVE-2010-1306.md): Directory traversal vulnerability in the Picasa (com\_joomlapicasa2) component 2.0 and 2.0.5 for Joomla! allows remote attackers to read… (no CVSS)
- [CVE-2010-1307](https://cve.now/CVE-2010-1307.md): Directory traversal vulnerability in the Magic Updater (com\_joomlaupdater) component for Joomla! allows remote attackers to read arbitrary… (no CVSS)
- [CVE-2010-1308](https://cve.now/CVE-2010-1308.md): Directory traversal vulnerability in the SVMap (com\_svmap) component 1.1.1 for Joomla! allows remote attackers to read arbitrary files via… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2010-04-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.