# CVEs published 2010-01-21 19 CVEs were published on January 21, 2010: 0 critical, 1 high. 1 is now in CISA KEV. Days are UTC. - [CVE-2010-0378](https://cve.now/CVE-2010-0378.md): Use-after-free vulnerability in Adobe Flash Player 6.0.79, as distributed in Microsoft Windows XP SP2 and SP3, allows remote attackers to ex (no CVSS) - [CVE-2010-0379](https://cve.now/CVE-2010-0379.md): Multiple unspecified vulnerabilities in the Macromedia Flash ActiveX control in Adobe Flash Player 6, as distributed in Microsoft Windows XP (no CVSS) - [CVE-2010-0137](https://cve.now/CVE-2010-0137.md): Unspecified vulnerability in the sshd\_child\_handler process in the SSH server in Cisco IOS XR 3.4.1 through 3.7.0 allows remote attackers to (no CVSS) - [CVE-2010-0138](https://cve.now/CVE-2010-0138.md): Buffer overflow in Cisco CiscoWorks Internetwork Performance Monitor (IPM) 2.6 and earlier on Windows, as distributed in CiscoWorks LAN Mana (no CVSS) - [CVE-2010-0370](https://cve.now/CVE-2010-0370.md): Cross-site scripting (XSS) vulnerability in the Node Blocks module 5.x-1.1 and earlier, and 6.x-1.3 and earlier, a module for Drupal, allows (no CVSS) - [CVE-2010-0371](https://cve.now/CVE-2010-0371.md): Multiple cross-site scripting (XSS) vulnerabilities in index.php in Hitmaaan Gallery 1.3 allow remote attackers to inject arbitrary web scri (no CVSS) - [CVE-2010-0372](https://cve.now/CVE-2010-0372.md): SQL injection vulnerability in the Articlemanager (com\_articlemanager) component for Joomla! allows remote attackers to execute arbitrary SQ (no CVSS) - [CVE-2010-0373](https://cve.now/CVE-2010-0373.md): SQL injection vulnerability in the libros (com\_libros) component for Joomla! allows remote attackers to execute arbitrary SQL commands via t (no CVSS) - [CVE-2010-0374](https://cve.now/CVE-2010-0374.md): Cross-site scripting (XSS) vulnerability in the Marketplace (com\_marketplace) component 1.2 for Joomla! allows remote attackers to inject ar (no CVSS) - [CVE-2010-0375](https://cve.now/CVE-2010-0375.md): SQL injection vulnerability in product\_list.php in JCE-Tech PHP Calendars, downloaded 2010-01-11, allows remote attackers to execute arbitra (no CVSS) - [CVE-2010-0376](https://cve.now/CVE-2010-0376.md): Cross-site scripting (XSS) vulnerability in product\_list.php in JCE-Tech PHP Calendars, downloaded 2010-01-11, allows remote attackers to in (no CVSS) - [CVE-2010-0377](https://cve.now/CVE-2010-0377.md): SQL injection vulnerability in modules/arcade/index.php in PHP MySpace Gold Edition 8.0 and 8.10 allows remote attackers to execute arbitrar (no CVSS) - [CVE-2010-0364](https://cve.now/CVE-2010-0364.md): Stack-based buffer overflow in VideoLAN VLC Media Player 0.8.6 allows user-assisted remote attackers to execute arbitrary code via an ogg fi (no CVSS) - [CVE-2010-0365](https://cve.now/CVE-2010-0365.md): Cross-site scripting (XSS) vulnerability in search.php in BitScripts Bits Video Script 2.04 and 2.05 Gold Beta allows remote attackers to in (no CVSS) - [CVE-2010-0366](https://cve.now/CVE-2010-0366.md): Multiple unrestricted file upload vulnerabilities in (1) register.php and (2) addvideo.php in BitScripts Bits Video Script 2.04 and 2.05 Gol (no CVSS) - [CVE-2010-0367](https://cve.now/CVE-2010-0367.md): Multiple PHP remote file inclusion vulnerabilities in BitScripts Bits Video Script 2.05 Gold Beta, and possibly 2.04, allow remote attackers (no CVSS) - [CVE-2009-4002](https://cve.now/CVE-2009-4002.md): Heap-based buffer overflow in Adobe Shockwave Player before 11.5.6.606 allows remote attackers to execute arbitrary code via a crafted 3D mo (no CVSS) - [CVE-2009-4003](https://cve.now/CVE-2009-4003.md): Multiple integer overflows in Adobe Shockwave Player before 11.5.6.606 allow remote attackers to execute arbitrary code via (1) an unspecifi (no CVSS) - [CVE-2010-0232](https://cve.now/CVE-2010-0232.md): The kernel in Microsoft Windows NT 3.1 through Windows 7, including Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windo (CVSS 7.8, KEV) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2010-01-21 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.