# CVEs published 2010-04-21 19 CVEs were published on April 21, 2010: 0 critical, 0 high. Days are UTC. - [CVE-2009-4774](https://cve.now/CVE-2009-4774.md): Unspecified vulnerability in Sun Solaris 10 and OpenSolaris snv\_49 through snv\_117, when 64bit mode is used on the Intel x86 platform and… (no CVSS) - [CVE-2009-4775](https://cve.now/CVE-2009-4775.md): Format string vulnerability in Ipswitch WS\_FTP Professional 12 before 12.2 allows remote attackers to cause a denial of service (crash)… (no CVSS) - [CVE-2009-4776](https://cve.now/CVE-2009-4776.md): Buffer overflow in Hitachi Cosminexus V4 through V8, Processing Kit for XML, and Developer's Kit for Java, as used in products such as… (no CVSS) - [CVE-2009-4777](https://cve.now/CVE-2009-4777.md): Unspecified vulnerability in multiple versions of Hitachi JP1/Automatic Job Management System 2 - View, JP1/Integrated Management - View… (no CVSS) - [CVE-2009-4778](https://cve.now/CVE-2009-4778.md): Multiple unspecified vulnerabilities in the PDF distiller in the Attachment Service component in Research In Motion (RIM) BlackBerry… (no CVSS) - [CVE-2009-4779](https://cve.now/CVE-2009-4779.md): Multiple PHP remote file inclusion vulnerabilities in NukeHall 0.3 and earlier allow remote attackers to execute arbitrary PHP code via a… (no CVSS) - [CVE-2009-4780](https://cve.now/CVE-2009-4780.md): Multiple cross-site scripting (XSS) vulnerabilities in index.php in phpMyFAQ before 2.5.5 allow remote attackers to inject arbitrary web… (no CVSS) - [CVE-2009-4781](https://cve.now/CVE-2009-4781.md): TUKEVA Password Reminder before 1.0.0.4 uses a hard-coded password for rem.accdb, which allows local users to discover credentials via a… (no CVSS) - [CVE-2009-4782](https://cve.now/CVE-2009-4782.md): Multiple cross-site scripting (XSS) vulnerabilities in Theeta CMS, possibly 0.01, allow remote attackers to inject arbitrary web script or… (no CVSS) - [CVE-2009-4783](https://cve.now/CVE-2009-4783.md): Multiple SQL injection vulnerabilities in Theeta CMS, possibly 0.01, allow remote attackers to execute arbitrary SQL commands via the… (no CVSS) - [CVE-2009-4784](https://cve.now/CVE-2009-4784.md): SQL injection vulnerability in the Joaktree (com\_joaktree) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL… (no CVSS) - [CVE-2009-4785](https://cve.now/CVE-2009-4785.md): SQL injection vulnerability in the Quick News (com\_quicknews) component for Joomla! allows remote attackers to execute arbitrary SQL… (no CVSS) - [CVE-2009-4786](https://cve.now/CVE-2009-4786.md): Multiple cross-site scripting (XSS) vulnerabilities in Pligg before 1.0.3 allow remote attackers to inject arbitrary web script or HTML… (no CVSS) - [CVE-2009-4787](https://cve.now/CVE-2009-4787.md): Multiple cross-site request forgery (CSRF) vulnerabilities in Pligg before 1.0.3 allow remote attackers to hijack the authentication of… (no CVSS) - [CVE-2009-4788](https://cve.now/CVE-2009-4788.md): Multiple open redirect vulnerabilities in Pligg 1.0.2 and earlier allow remote attackers to redirect users to arbitrary web sites and… (no CVSS) - [CVE-2009-4789](https://cve.now/CVE-2009-4789.md): Multiple PHP remote file inclusion vulnerabilities in the MojoBlog component RC 0.15 for Joomla! allow remote attackers to execute… (no CVSS) - [CVE-2010-1032](https://cve.now/CVE-2010-1032.md): Unspecified vulnerability in HP HP-UX B.11.11 allows local users to cause a denial of service via unknown vectors. (no CVSS) - [CVE-2010-1033](https://cve.now/CVE-2010-1033.md): Multiple stack-based buffer overflows in a certain Tetradyne ActiveX control in HP Operations Manager 7.5, 8.10, and 8.16 might allow… (no CVSS) - [CVE-2010-1490](https://cve.now/CVE-2010-1490.md): Unspecified vulnerability in IBM Cognos 8 Business Intelligence before 8.4.1 FP1 has unknown impact and attack vectors. (no CVSS) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/archive/2010-04-21 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.