# CVEs published 2010-02-23

22 CVEs were published on February 23, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2009-3036](https://cve.now/CVE-2009-3036.md): Cross-site scripting (XSS) vulnerability in the console in Symantec IM Manager 8.3 and 8.4 before 8.4.13 allows remote attackers to inject a (no CVSS)
- [CVE-2010-0107](https://cve.now/CVE-2010-0107.md): Buffer overflow in an ActiveX control (SYMLTCOM.dll) in Symantec N360 1.0 and 2.0; Norton Internet Security, AntiVirus, SystemWorks, and Con (no CVSS)
- [CVE-2010-0146](https://cve.now/CVE-2010-0146.md): Directory traversal vulnerability in the Management Center for Cisco Security Agents 6.0 allows remote authenticated users to read arbitrary (no CVSS)
- [CVE-2010-0147](https://cve.now/CVE-2010-0147.md): SQL injection vulnerability in the Management Center for Cisco Security Agents 5.1 before 5.1.0.117, 5.2 before 5.2.0.296, and 6.0 before 6. (no CVSS)
- [CVE-2010-0148](https://cve.now/CVE-2010-0148.md): Unspecified vulnerability in Cisco Security Agent 5.2 before 5.2.0.285, when running on Linux, allows remote attackers to cause a denial of (no CVSS)
- [CVE-2010-0189](https://cve.now/CVE-2010-0189.md): A certain ActiveX control in NOS Microsystems getPlus Download Manager (aka DLM or Downloader) 1.5.2.35, as used in Adobe Download Manager, (no CVSS)
- [CVE-2010-0682](https://cve.now/CVE-2010-0682.md): WordPress 2.9 before 2.9.2 allows remote authenticated users to read trash posts from other authors via a direct request with a modified p p (no CVSS)
- [CVE-2010-0685](https://cve.now/CVE-2010-0685.md): The design of the dialplan functionality in Asterisk Open Source 1.2.x, 1.4.x, and 1.6.x; and Asterisk Business Edition B.x.x and C.x.x, whe (no CVSS)
- [CVE-2010-0697](https://cve.now/CVE-2010-0697.md): Cross-site scripting (XSS) vulnerability in the iTweak Upload module 6.x-1.x before 6.x-1.2 and 6.x-2.x before 6.x-2.3 for Drupal allows rem (no CVSS)
- [CVE-2010-0698](https://cve.now/CVE-2010-0698.md): SQL injection vulnerability in backoffice/login.asp in Dynamicsoft WSC CMS 2.2 allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2010-0699](https://cve.now/CVE-2010-0699.md): Cross-site scripting (XSS) vulnerability in index.php in VideoSearchScript Pro 3.5 allows remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2010-0700](https://cve.now/CVE-2010-0700.md): Cross-site scripting (XSS) vulnerability in index.php in WampServer 2.0i allows remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2010-0701](https://cve.now/CVE-2010-0701.md): SQL injection vulnerability in ForceChangePassword.jsp in Newgen Software OmniDocs allows remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2010-0702](https://cve.now/CVE-2010-0702.md): SQL injection vulnerability in cisco/services/PhonecDirectory.php in Fonality Trixbox 2.2.4 allows remote attackers to execute arbitrary SQL (no CVSS)
- [CVE-2010-0703](https://cve.now/CVE-2010-0703.md): Cross-site scripting (XSS) vulnerability in wa/auth in PortWise SSL VPN 4.6 allows remote attackers to inject arbitrary web script or HTML v (no CVSS)
- [CVE-2010-0690](https://cve.now/CVE-2010-0690.md): SQL injection vulnerability in index.php in CommodityRentals Video Games Rentals allows remote attackers to execute arbitrary SQL commands v (no CVSS)
- [CVE-2010-0691](https://cve.now/CVE-2010-0691.md): SQL injection vulnerability in druckansicht.php in JTL-Shop 2 allows remote attackers to execute arbitrary SQL commands via the s parameter. (no CVSS)
- [CVE-2010-0692](https://cve.now/CVE-2010-0692.md): SQL injection vulnerability in the IP-Tech JQuarks (com\_jquarks) Component 0.2.3, and possibly earlier, for Joomla! allows remote attackers (no CVSS)
- [CVE-2010-0693](https://cve.now/CVE-2010-0693.md): SQL injection vulnerability in products.php in CommodityRentals Trade Manager Script allows remote attackers to execute arbitrary SQL comman (no CVSS)
- [CVE-2010-0694](https://cve.now/CVE-2010-0694.md): SQL injection vulnerability in the PerchaGallery (com\_perchagallery) component before 1.5b for Joomla! allows remote attackers to execute ar (no CVSS)
- [CVE-2010-0695](https://cve.now/CVE-2010-0695.md): Cross-site scripting (XSS) vulnerability in pages/index.php in BASIC-CMS allows remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2010-0696](https://cve.now/CVE-2010-0696.md): Directory traversal vulnerability in includes/download.php in the JoomlaWorks AllVideos (Jw\_allVideos) plugin 3.0 through 3.2 for Joomla! al (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-02-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.