# CVEs published 2010-02-15

12 CVEs were published on February 15, 2010: 0 critical, 0 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2009-3960](https://cve.now/CVE-2009-3960.md): Unspecified vulnerability in BlazeDS 3.2 and earlier, as used in LiveCycle 8.0.1, 8.2.1, and 9.0, LiveCycle Data Services 2.5.1, 2.6.1, and (CVSS 6.5, KEV)
- [CVE-2009-4643](https://cve.now/CVE-2009-4643.md): Stack-based buffer overflow in dsInstallerService.dll in the Juniper Installer Service, as used in Juniper Odyssey Access Client 4.72.11421. (no CVSS)
- [CVE-2010-0186](https://cve.now/CVE-2010-0186.md): Cross-domain vulnerability in Adobe Flash Player before 10.0.45.2, Adobe AIR before 1.5.3.9130, and Adobe Reader and Acrobat 8.x before 8.2. (no CVSS)
- [CVE-2010-0187](https://cve.now/CVE-2010-0187.md): Adobe Flash Player before 10.0.45.2 and Adobe AIR before 1.5.3.9130 allow remote attackers to cause a denial of service (application crash) (no CVSS)
- [CVE-2010-0287](https://cve.now/CVE-2010-0287.md): Directory traversal vulnerability in the ACL Manager plugin (plugins/acl/ajax.php) in DokuWiki before 2009-12-25b allows remote attackers to (no CVSS)
- [CVE-2010-0288](https://cve.now/CVE-2010-0288.md): A typo in the administrator permission check in the ACL Manager plugin (plugins/acl/ajax.php) in DokuWiki before 2009-12-25b allows remote a (no CVSS)
- [CVE-2010-0289](https://cve.now/CVE-2010-0289.md): Multiple cross-site request forgery (CSRF) vulnerabilities in the ACL Manager plugin (plugins/acl/ajax.php) in DokuWiki before 2009-12-25c a (no CVSS)
- [CVE-2010-0291](https://cve.now/CVE-2010-0291.md): The Linux kernel before 2.6.32.4 allows local users to gain privileges or cause a denial of service (panic) by calling the (1) mmap or (2) m (no CVSS)
- [CVE-2010-0622](https://cve.now/CVE-2010-0622.md): The wake\_futex\_pi function in kernel/futex.c in the Linux kernel before 2.6.33-rc7 does not properly handle certain unlock operations for a (no CVSS)
- [CVE-2010-0623](https://cve.now/CVE-2010-0623.md): The futex\_lock\_pi function in kernel/futex.c in the Linux kernel before 2.6.33-rc7 does not properly manage a certain reference count, which (no CVSS)
- [CVE-2010-0638](https://cve.now/CVE-2010-0638.md): Cross-site request forgery (CSRF) vulnerability in WebCalendar 1.2.0 allows remote attackers to hijack the authentication of administrators (no CVSS)
- [CVE-2010-0639](https://cve.now/CVE-2010-0639.md): The htcpHandleTstRequest function in htcp.c in Squid 2.x before 2.6.STABLE24 and 2.7 before 2.7.STABLE8, and htcp.cc in 3.0 before 3.0.STABL (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-02-15
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.