# CVEs published 2010-02-12

15 CVEs were published on February 12, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-0630](https://cve.now/CVE-2010-0630.md): SQL injection vulnerability in viewjokes.php in Evernew Free Joke Script 1.2 allows remote attackers to execute arbitrary SQL commands via t (no CVSS)
- [CVE-2010-0631](https://cve.now/CVE-2010-0631.md): Multiple SQL injection vulnerabilities in index.php in Eicra Car Rental-Script, when the plugin\_id parameter is 4, allow remote attackers to (no CVSS)
- [CVE-2010-0632](https://cve.now/CVE-2010-0632.md): SQL injection vulnerability in the Parkview Consultants SimpleFAQ (com\_simplefaq) component for Joomla! allows remote attackers to execute a (no CVSS)
- [CVE-2010-0633](https://cve.now/CVE-2010-0633.md): Unspecified vulnerability in Citrix XenServer 5.0 Update 3 and earlier, and 5.5, allows local users to bypass authentication and execute uns (no CVSS)
- [CVE-2010-0634](https://cve.now/CVE-2010-0634.md): Unspecified vulnerability in Fast Lexical Analyzer Generator (flex) before 2.5.35 has unknown impact and attack vectors. (no CVSS)
- [CVE-2010-0635](https://cve.now/CVE-2010-0635.md): SQL injection vulnerability in the plgSearchEventsearch::onSearch method in eventsearch.php in the JEvents Search plugin 1.5 through 1.5.3 f (no CVSS)
- [CVE-2010-0636](https://cve.now/CVE-2010-0636.md): Multiple cross-site scripting (XSS) vulnerabilities in WebCalendar 1.2.0, and other versions before 1.2.5, allow remote attackers to inject (no CVSS)
- [CVE-2010-0637](https://cve.now/CVE-2010-0637.md): Multiple cross-site request forgery (CSRF) vulnerabilities in WebCalendar 1.2.0, and other versions before 1.2.5, allow remote attackers to (no CVSS)
- [CVE-2001-1586](https://cve.now/CVE-2001-1586.md): Directory traversal vulnerability in SimpleServer:WWW 1.13 and earlier allows remote attackers to execute arbitrary programs via encoded ../ (no CVSS)
- [CVE-2009-4274](https://cve.now/CVE-2009-4274.md): Stack-based buffer overflow in converter/ppm/xpmtoppm.c in netpbm before 10.47.07 allows context-dependent attackers to cause a denial of se (no CVSS)
- [CVE-2010-0297](https://cve.now/CVE-2010-0297.md): Buffer overflow in the usb\_host\_handle\_control function in the USB passthrough handling implementation in usb-linux.c in QEMU before 0.11.1 (no CVSS)
- [CVE-2010-0298](https://cve.now/CVE-2010-0298.md): The x86 emulator in KVM 83 does not use the Current Privilege Level (CPL) and I/O Privilege Level (IOPL) in determining the memory access av (no CVSS)
- [CVE-2010-0306](https://cve.now/CVE-2010-0306.md): The x86 emulator in KVM 83, when a guest is configured for Symmetric Multiprocessing (SMP), does not use the Current Privilege Level (CPL) a (no CVSS)
- [CVE-2010-0309](https://cve.now/CVE-2010-0309.md): The pit\_ioport\_read function in the Programmable Interval Timer (PIT) emulation in i8254.c in KVM 83 does not properly use the pit\_state dat (no CVSS)
- [CVE-2010-0446](https://cve.now/CVE-2010-0446.md): Unspecified vulnerability on the HP DreamScreen 100 and 130 with firmware before 1.6.0.0, when using a web-connected configuration, allows r (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-02-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.