# CVEs published 2010-01-20

11 CVEs were published on January 20, 2010: 0 critical, 2 high. Days are UTC.

- [CVE-2009-3999](https://cve.now/CVE-2009-3999.md): Stack-based buffer overflow in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to execute arbitrary code (no CVSS)
- [CVE-2009-4000](https://cve.now/CVE-2009-4000.md): Directory traversal vulnerability in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to overwrite arbitr (no CVSS)
- [CVE-2010-0036](https://cve.now/CVE-2010-0036.md): Buffer overflow in CoreAudio in Apple Mac OS X 10.5.8 and 10.6.2 allows remote attackers to execute arbitrary code or cause a denial of serv (CVSS 7.8)
- [CVE-2010-0037](https://cve.now/CVE-2010-0037.md): Buffer overflow in Image RAW in Apple Mac OS X 10.5.8 and 10.6.2 allows remote attackers to execute arbitrary code or cause a denial of serv (CVSS 8.8)
- [CVE-2010-0357](https://cve.now/CVE-2010-0357.md): Cross-site scripting (XSS) vulnerability in the Login page in IBM Lotus Web Content Management (WCM) 6.0.1.4, 6.0.1.5, and 6.0.1.6 before iF (no CVSS)
- [CVE-2010-0358](https://cve.now/CVE-2010-0358.md): Heap-based buffer overflow in the server in IBM Lotus Domino 7 and 8.5 FP1 allows remote attackers to cause a denial of service (daemon exit (no CVSS)
- [CVE-2010-0359](https://cve.now/CVE-2010-0359.md): Buffer overflow in the SSLv2 support in Zeus Web Server before 4.3r5 allows remote attackers to cause a denial of service (daemon crash) or (no CVSS)
- [CVE-2010-0360](https://cve.now/CVE-2010-0360.md): Sun Java System Web Server (aka SJWS) 7.0 Update 7 allows remote attackers to overwrite memory locations in the heap, and discover the conte (no CVSS)
- [CVE-2010-0361](https://cve.now/CVE-2010-0361.md): Stack-based buffer overflow in the WebDAV implementation in webservd in Sun Java System Web Server (aka SJWS) 7.0 Update 7 allows remote att (no CVSS)
- [CVE-2010-0362](https://cve.now/CVE-2010-0362.md): Zeus Web Server before 4.3r5 does not use random transaction IDs for DNS requests, which makes it easier for remote attackers to spoof DNS r (no CVSS)
- [CVE-2010-0363](https://cve.now/CVE-2010-0363.md): Cross-site scripting (XSS) vulnerability in Zeus Web Server before 4.3r5, when SSL is enabled for the admin server, allows remote attackers (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-01-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.