# CVEs published 2010-01-15

37 CVEs were published on January 15, 2010: 0 critical, 1 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2010-0349](https://cve.now/CVE-2010-0349.md): Cross-site scripting (XSS) vulnerability in C3 Corp. (no CVSS)
- [CVE-2010-0350](https://cve.now/CVE-2010-0350.md): Directory traversal vulnerability in the Photo Book (goof\_fotoboek) extension 1.7.14 and earlier for TYPO3 has unknown impact and remote att (no CVSS)
- [CVE-2010-0319](https://cve.now/CVE-2010-0319.md): Cross-site scripting (XSS) vulnerability in index.php in Docmint 1.0 and 2.1 allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2010-0320](https://cve.now/CVE-2010-0320.md): Cross-site scripting (XSS) vulnerability in submitlink.php in Glitter Central Script allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2010-0321](https://cve.now/CVE-2010-0321.md): Cross-site scripting (XSS) vulnerability in jobs/index.php in Jamit Job Board 3.0 allows remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2010-0322](https://cve.now/CVE-2010-0322.md): SQL injection vulnerability in the init function in MK-AnydropdownMenu (mk\_anydropdownmenu) extension 0.3.28 and earlier for TYPO3 allows re (no CVSS)
- [CVE-2010-0323](https://cve.now/CVE-2010-0323.md): Unspecified vulnerability in the Photo Book (goof\_fotoboek) extension 1.7.14 and earlier for TYPO3 allows remote attackers to obtain sensiti (no CVSS)
- [CVE-2010-0324](https://cve.now/CVE-2010-0324.md): SQL injection vulnerability in the Customer Reference List (ref\_list) extension 1.0.1 and earlier for TYPO3 allows remote attackers to execu (no CVSS)
- [CVE-2010-0325](https://cve.now/CVE-2010-0325.md): Unspecified vulnerability in the SB Folderdownload (sb\_folderdownload) extension 0.2.2 and earlier for TYPO3 allows remote attackers to obta (no CVSS)
- [CVE-2010-0326](https://cve.now/CVE-2010-0326.md): Cross-site scripting (XSS) vulnerability in the Developer log (devlog) extension 2.9.1 and earlier for TYPO3 allows remote attackers to inje (no CVSS)
- [CVE-2010-0327](https://cve.now/CVE-2010-0327.md): Cross-site scripting (XSS) vulnerability in the KJ: Imagelightbox (kj\_imagelightbox2) extension 2.0.0 and earlier for TYPO3 allows remote at (no CVSS)
- [CVE-2010-0328](https://cve.now/CVE-2010-0328.md): Cross-site scripting (XSS) vulnerability in the Unit Converter (cs2\_unitconv) extension 1.0.4 for TYPO3 allows remote attackers to inject ar (no CVSS)
- [CVE-2010-0329](https://cve.now/CVE-2010-0329.md): SQL injection vulnerability in the powermail extension 1.5.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands (no CVSS, in2code/powermail)
- [CVE-2010-0330](https://cve.now/CVE-2010-0330.md): SQL injection vulnerability in the Googlemaps for tt\_news (jf\_easymaps) extension 1.0.2 and earlier for TYPO3 allows remote attackers to exe (no CVSS)
- [CVE-2010-0331](https://cve.now/CVE-2010-0331.md): Cross-site scripting (XSS) vulnerability in the TV21 Talkshow (tv21\_talkshow) extension 1.0.1 and earlier for TYPO3 allows remote attackers (no CVSS)
- [CVE-2010-0332](https://cve.now/CVE-2010-0332.md): SQL injection vulnerability in the TV21 Talkshow (tv21\_talkshow) extension 1.0.1 and earlier for TYPO3 allows remote attackers to execute ar (no CVSS)
- [CVE-2010-0333](https://cve.now/CVE-2010-0333.md): SQL injection vulnerability in the Helpdesk (mg\_help) extension 1.1.6 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL (no CVSS)
- [CVE-2010-0334](https://cve.now/CVE-2010-0334.md): SQL injection vulnerability in the Vote rank for news (vote\_for\_tt\_news) extension 1.0.1 and earlier for TYPO3 allows remote attackers to ex (no CVSS)
- [CVE-2010-0335](https://cve.now/CVE-2010-0335.md): Cross-site scripting (XSS) vulnerability in the Vote rank for news (vote\_for\_tt\_news) extension 1.0.1 and earlier for TYPO3 allows remote at (no CVSS)
- [CVE-2010-0336](https://cve.now/CVE-2010-0336.md): Unspecified vulnerability in the kiddog\_mysqldumper (kiddog\_mysqldumper) extension 0.0.3 and earlier for TYPO3 allows remote attackers to ob (no CVSS)
- [CVE-2010-0337](https://cve.now/CVE-2010-0337.md): SQL injection vulnerability in the tt\_news Mail alert (dl3\_tt\_news\_alerts) extension 0.2.0 and earlier for TYPO3 allows remote attackers to (no CVSS)
- [CVE-2010-0338](https://cve.now/CVE-2010-0338.md): SQL injection vulnerability in the TT\_Products editor (ttpedit) extension 0.0.2 and earlier for TYPO3 allows remote attackers to execute arb (no CVSS)
- [CVE-2010-0339](https://cve.now/CVE-2010-0339.md): SQL injection vulnerability in the User Links (vm19\_userlinks) extension 0.1.1 and earlier for TYPO3 allows remote attackers to execute arbi (no CVSS)
- [CVE-2010-0340](https://cve.now/CVE-2010-0340.md): SQL injection vulnerability in the MJS Event Pro (mjseventpro) extension 0.2.1 and earlier for TYPO3 allows remote attackers to execute arbi (no CVSS)
- [CVE-2010-0341](https://cve.now/CVE-2010-0341.md): SQL injection vulnerability in the BB Simple Jobs (bb\_simplejobs) extension 0.1.0 and earlier for TYPO3 allows remote attackers to execute a (no CVSS)
- [CVE-2010-0342](https://cve.now/CVE-2010-0342.md): SQL injection vulnerability in the Reports for Job (job\_reports) extension 0.1.0 and earlier for TYPO3 allows remote attackers to execute ar (no CVSS)
- [CVE-2010-0343](https://cve.now/CVE-2010-0343.md): SQL injection vulnerability in the Clan Users List (pb\_clanlist) extension 0.0.1 for TYPO3 allows remote attackers to execute arbitrary SQL (no CVSS)
- [CVE-2010-0344](https://cve.now/CVE-2010-0344.md): SQL injection vulnerability in the zak\_store\_management extension 1.0.0 and earlier TYPO3 allows remote attackers to execute arbitrary SQL c (no CVSS)
- [CVE-2010-0345](https://cve.now/CVE-2010-0345.md): Cross-site scripting (XSS) vulnerability in the Majordomo extension 1.1.3 and earlier for TYPO3 allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2010-0346](https://cve.now/CVE-2010-0346.md): Cross-site scripting (XSS) vulnerability in the Tip many friends (mimi\_tipfriends) extension 0.0.2 and earlier for TYPO3 allows remote attac (no CVSS)
- [CVE-2010-0347](https://cve.now/CVE-2010-0347.md): Cross-site scripting (XSS) vulnerability in the VD / Geomap (vd\_geomap) extension 0.3.1 and earlier for TYPO3 allows remote attackers to inj (no CVSS)
- [CVE-2010-0348](https://cve.now/CVE-2010-0348.md): Directory traversal vulnerability in C3 Corp. (no CVSS)
- [CVE-2010-0317](https://cve.now/CVE-2010-0317.md): Novell Netware 6.5 SP8 allows remote attackers to cause a denial of service (NULL pointer dereference, memory consumption, ABEND, and crash) (no CVSS)
- [CVE-2010-0318](https://cve.now/CVE-2010-0318.md): The replay functionality for ZFS Intent Log (ZIL) in FreeBSD 7.1, 7.2, and 8.0, when creating files during replay of a setattr transaction, (no CVSS)
- [CVE-2010-0249](https://cve.now/CVE-2010-0249.md): Use-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 on Windows 2000 SP4; Windows XP SP2 and SP3; Windows Server 2 (CVSS 8.8, KEV)
- [CVE-2010-0280](https://cve.now/CVE-2010-0280.md): Array index error in Jan Eric Kyprianidis lib3ds 1.x, as used in Google SketchUp 7.x before 7.1 M2, allows remote attackers to cause a denia (no CVSS)
- [CVE-2010-0316](https://cve.now/CVE-2010-0316.md): Integer overflow in Google SketchUp before 7.1 M2 allows remote attackers to cause a denial of service (heap memory corruption) or possibly (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-01-15
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.