# CVEs published 2010-02-24

6 CVEs were published on February 24, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-0285](https://cve.now/CVE-2010-0285.md): gnome-screensaver 2.14.3, 2.22.2, 2.27.x, 2.28.0, and 2.28.3, when the X configuration enables the extend screen option, allows physically p (no CVSS)
- [CVE-2010-0420](https://cve.now/CVE-2010-0420.md): libpurple in Finch in Pidgin before 2.6.6, when an XMPP multi-user chat (MUC) room is used, does not properly parse nicknames containing \<br (no CVSS)
- [CVE-2010-0422](https://cve.now/CVE-2010-0422.md): gnome-screensaver 2.28.x before 2.28.3 does not properly synchronize the state of screen locking and the unlock dialog in situations involvi (no CVSS)
- [CVE-2010-0423](https://cve.now/CVE-2010-0423.md): gtkimhtml.c in Pidgin before 2.6.6 allows remote attackers to cause a denial of service (CPU consumption and application hang) by sending ma (no CVSS)
- [CVE-2010-0426](https://cve.now/CVE-2010-0426.md): sudo 1.6.x before 1.6.9p21 and 1.7.x before 1.7.2p4, when a pseudo-command is enabled, permits a match between the name of the pseudo-comman (no CVSS)
- [CVE-2010-0640](https://cve.now/CVE-2010-0640.md): Cross-site scripting (XSS) vulnerability in CA eHealth Performance Manager 6.0.x through 6.2.x, when malicious HTML detection is disabled, a (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-02-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.