# CVEs published 2010-02-03

12 CVEs were published on February 3, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2009-3387](https://cve.now/CVE-2009-3387.md): Bugzilla 3.3.1 through 3.4.4, 3.5.1, and 3.5.2 does not allow group restrictions to be preserved throughout the process of moving a bug to a (no CVSS)
- [CVE-2009-3989](https://cve.now/CVE-2009-3989.md): Bugzilla before 3.0.11, 3.2.x before 3.2.6, 3.4.x before 3.4.5, and 3.5.x before 3.5.3 does not block access to files and directories that a (no CVSS)
- [CVE-2010-0038](https://cve.now/CVE-2010-0038.md): Recovery Mode in Apple iPhone OS 1.0 through 3.1.2, and iPhone OS for iPod touch 1.1 through 3.1.2, allows physically proximate attackers to (no CVSS)
- [CVE-2010-0295](https://cve.now/CVE-2010-0295.md): lighttpd before 1.4.26, and 1.5.x, allocates a buffer for each read operation that occurs for a request, which allows remote attackers to ca (no CVSS)
- [CVE-2010-0305](https://cve.now/CVE-2010-0305.md): ejabberd\_c2s.erl in ejabberd before 2.1.3 allows remote attackers to cause a denial of service (daemon crash) via a large number of c2s (aka (no CVSS)
- [CVE-2010-0496](https://cve.now/CVE-2010-0496.md): FreeBit ServersMan 3.1.5 on Apple iPhone OS 3.1.2, and iPhone OS for iPod touch, allows remote attackers to cause a denial of service (daemo (no CVSS)
- [CVE-2009-4184](https://cve.now/CVE-2009-4184.md): Unspecified vulnerability in HP Enterprise Cluster Master Toolkit (ECMT) B.05.00 on HP-UX B.11.23 (11i v2) and HP-UX B.11.31 (11i v3) allows (no CVSS)
- [CVE-2010-0185](https://cve.now/CVE-2010-0185.md): The default configuration of Adobe ColdFusion 9.0 does not restrict access to collections that have been created by the Solr Service, which (no CVSS)
- [CVE-2010-0304](https://cve.now/CVE-2010-0304.md): Multiple buffer overflows in the LWRES dissector in Wireshark 0.9.15 through 1.0.10 and 1.2.0 through 1.2.5 allow remote attackers to cause (no CVSS)
- [CVE-2010-0308](https://cve.now/CVE-2010-0308.md): lib/rfc1035.c in Squid 2.x, 3.0 through 3.0.STABLE22, and 3.1 through 3.1.0.15 allows remote attackers to cause a denial of service (asserti (no CVSS)
- [CVE-2010-0440](https://cve.now/CVE-2010-0440.md): Cross-site scripting (XSS) vulnerability in +CSCOT+/translation in Cisco Secure Desktop 3.4.2048, and other versions before 3.5; as used in (no CVSS)
- [CVE-2010-0453](https://cve.now/CVE-2010-0453.md): The ucode\_ioctl function in intel/io/ucode\_drv.c in Sun Solaris 10 and OpenSolaris snv\_69 through snv\_133, when running on x86 architectures (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-02-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.