# CVEs published 2010-01-22

12 CVEs were published on January 22, 2010: 0 critical, 1 high. Days are UTC.

- [CVE-2010-0027](https://cve.now/CVE-2010-0027.md): The URL validation functionality in Microsoft Internet Explorer 5.01, 6, 6 SP1, 7 and 8, and the ShellExecute API function in Windows 2000 S (no CVSS)
- [CVE-2010-0097](https://cve.now/CVE-2010-0097.md): ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta does not properly validate DNSSE (no CVSS)
- [CVE-2010-0244](https://cve.now/CVE-2010-0244.md): Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrar (no CVSS)
- [CVE-2010-0245](https://cve.now/CVE-2010-0245.md): Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessi (no CVSS)
- [CVE-2010-0246](https://cve.now/CVE-2010-0246.md): Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessi (no CVSS)
- [CVE-2010-0247](https://cve.now/CVE-2010-0247.md): Microsoft Internet Explorer 5.01 SP4, 6, and 6 SP1 does not properly handle objects in memory, which allows remote attackers to execute arbi (no CVSS)
- [CVE-2010-0248](https://cve.now/CVE-2010-0248.md): Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrar (CVSS 8.1)
- [CVE-2010-0290](https://cve.now/CVE-2010-0290.md): Unspecified vulnerability in ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta, wi (no CVSS)
- [CVE-2010-0380](https://cve.now/CVE-2010-0380.md): install.php in JCE-Tech PHP Calendars, downloaded 20100121, allows remote attackers to bypass intended access restrictions and modify applic (no CVSS)
- [CVE-2010-0381](https://cve.now/CVE-2010-0381.md): SQL injection vulnerability in modules/arcade/index.php in PHP MySpace Gold Edition 8.0 and 8.10 allows remote attackers to execute arbitrar (no CVSS)
- [CVE-2010-0382](https://cve.now/CVE-2010-0382.md): ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta handles out-of-bailiwick data ac (no CVSS)
- [CVE-2010-0230](https://cve.now/CVE-2010-0230.md): SUSE Linux Enterprise 10 SP3 (SLE10-SP3) and openSUSE 11.2 configures postfix to listen on all network interfaces, which might allow remote (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-01-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.