# CVEs published 2010-02-11

21 CVEs were published on February 11, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2009-4641](https://cve.now/CVE-2009-4641.md): gnome-screensaver 2.28.0 does not resume adherence to its activation settings after an inhibiting application becomes unavailable on the ses (no CVSS)
- [CVE-2009-4642](https://cve.now/CVE-2009-4642.md): gnome-screensaver 2.26.1 relies on the gnome-session D-Bus interface to determine session idle time, even when an Xfce desktop such as Xubun (no CVSS)
- [CVE-2010-0414](https://cve.now/CVE-2010-0414.md): gnome-screensaver before 2.28.2 allows physically proximate attackers to bypass screen locking and access an unattended workstation by movin (no CVSS)
- [CVE-2009-3735](https://cve.now/CVE-2009-3735.md): The ActiveScan Installer ActiveX control in as2stubie.dll before 1.3.3.0 in PandaActiveScan Installer 2.0 in Panda ActiveScan downloads soft (no CVSS)
- [CVE-2010-0143](https://cve.now/CVE-2010-0143.md): Unspecified vulnerability in the administrative interface in the embedded HTTPS server on the Cisco IronPort Encryption Appliance 6.2.x befo (no CVSS)
- [CVE-2010-0144](https://cve.now/CVE-2010-0144.md): Unspecified vulnerability in the WebSafe DistributorServlet in the embedded HTTPS server on the Cisco IronPort Encryption Appliance 6.2.x be (no CVSS)
- [CVE-2010-0145](https://cve.now/CVE-2010-0145.md): Unspecified vulnerability in the embedded HTTPS server on the Cisco IronPort Encryption Appliance 6.2.x before 6.2.9.1 and 6.5.x before 6.5. (no CVSS)
- [CVE-2010-0445](https://cve.now/CVE-2010-0445.md): Unspecified vulnerability in HP Network Node Manager (NNM) 8.10, 8.11, 8.12, and 8.13 allows remote attackers to execute arbitrary commands (no CVSS)
- [CVE-2010-0605](https://cve.now/CVE-2010-0605.md): SQL injection vulnerability in scp/ajax.php in osTicket before 1.6.0 Stable allows remote authenticated users, with "Staff" permissions, to (no CVSS)
- [CVE-2010-0606](https://cve.now/CVE-2010-0606.md): Cross-site scripting (XSS) vulnerability in scp/ajax.php in osTicket before 1.6.0 Stable allows remote authenticated users to inject arbitra (no CVSS)
- [CVE-2010-0607](https://cve.now/CVE-2010-0607.md): Cross-site scripting (XSS) vulnerability in Forms/status\_statistics\_1 in the Sterlite SAM300 AX Router allows remote attackers to inject arb (no CVSS)
- [CVE-2010-0608](https://cve.now/CVE-2010-0608.md): SQL injection vulnerability in index.php in NovaBoard 1.1.2 allows remote attackers to execute arbitrary SQL commands via the forums\[\] param (no CVSS)
- [CVE-2010-0609](https://cve.now/CVE-2010-0609.md): SQL injection vulnerability in header.php in NovaBoard 1.1.2 allows remote attackers to execute arbitrary SQL commands via the nova\_name coo (no CVSS)
- [CVE-2010-0610](https://cve.now/CVE-2010-0610.md): Multiple SQL injection vulnerabilities in the Photoblog (com\_photoblog) component for Joomla! allow remote attackers to execute arbitrary SQ (no CVSS)
- [CVE-2010-0611](https://cve.now/CVE-2010-0611.md): Multiple SQL injection vulnerabilities in adminlogin.php in Baal Systems 3.8 and earlier allow remote attackers to execute arbitrary SQL com (no CVSS)
- [CVE-2010-0612](https://cve.now/CVE-2010-0612.md): Unspecified vulnerability in DocumentManager before 4.0 has unknown impact and attack vectors, related to file rights. (no CVSS)
- [CVE-2010-0613](https://cve.now/CVE-2010-0613.md): Directory traversal vulnerability in viewfile.php in ARWScripts Fonts Script allows remote attackers to read arbitrary local files via direc (no CVSS)
- [CVE-2010-0614](https://cve.now/CVE-2010-0614.md): SQL injection vulnerability in ajax.php in evalSMSI 2.1.03 allows remote attackers to execute arbitrary SQL commands via the query parameter (no CVSS)
- [CVE-2010-0615](https://cve.now/CVE-2010-0615.md): Cross-site scripting (XSS) vulnerability in assess.php in evalSMSI 2.1.03 allows remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2010-0616](https://cve.now/CVE-2010-0616.md): evalSMSI 2.1.03 stores passwords in cleartext in the database, which allows attackers with database access to gain privileges. (no CVSS)
- [CVE-2010-0617](https://cve.now/CVE-2010-0617.md): Cross-site scripting (XSS) vulnerability in ajax.php in evalSMSI 2.1.03 allows remote attackers to inject arbitrary web script or HTML via t (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-02-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.