CVEs published March 12, 2010
21 CVEs were published on March 12, 2010: 0 critical, 2 high.
- Published
- 21
- Critical
- 0
- High
- 2
- Medium
- 0
- Low
- 0
- Unrated
- 19
- Now in CISA KEV
- 0
- Fix available
- 0
High 2
- CVE-2010-0047Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of s
- CVE-2010-0048Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of s
Medium, low and unrated 19
- CVE-2010-0049Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of s
- CVE-2010-0050Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of s
- CVE-2010-0051WebKit in Apple Safari before 4.0.5 does not properly validate the cross-origin loading of stylesheets, which allows remote attackers to obt
- CVE-2010-0052Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of s
- CVE-2010-0053Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of s
- CVE-2010-0054Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of s
- CVE-2009-4001Integer overflow in XnView before 1.97.2 might allow remote attackers to execute arbitrary code via a DICOM image with crafted dimensions, l
- CVE-2010-0040Integer overflow in ColorSync in Apple Safari before 4.0.5 on Windows, and iTunes before 9.1, allows remote attackers to execute arbitrary c
- CVE-2010-0041ImageIO in Apple Safari before 4.0.5 and iTunes before 9.1 on Windows does not ensure that memory access is associated with initialized memo
- CVE-2010-0042ImageIO in Apple Safari before 4.0.5 and iTunes before 9.1 on Windows does not ensure that memory access is associated with initialized memo
- CVE-2010-0043ImageIO in Apple Safari before 4.0.5 and iTunes before 9.1 on Windows allows remote attackers to execute arbitrary code or cause a denial of
- CVE-2010-0044PubSub in Apple Safari before 4.0.5 does not properly implement use of the Accept Cookies preference to block cookies, which makes it easier
- CVE-2010-0045Apple Safari before 4.0.5 on Windows does not properly validate external URL schemes, which allows remote attackers to open local files and
- CVE-2010-0046The Cascading Style Sheets (CSS) implementation in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or
- CVE-2010-0122Multiple SQL injection vulnerabilities in Employee Timeclock Software 0.99 allow remote attackers to execute arbitrary SQL commands via the
- CVE-2010-0123The database backup implementation in Employee Timeclock Software 0.99 stores sensitive information under the web root with insufficient acc
- CVE-2010-0124Employee Timeclock Software 0.99 places the database password on the mysqldump command line, which allows local users to obtain sensitive in
- CVE-2010-0396Directory traversal vulnerability in the dpkg-source component in dpkg before 1.14.29 allows remote attackers to modify arbitrary files via
- CVE-2010-0624Heap-based buffer overflow in the rmt_read__ function in lib/rtapelib.c in the rmt client functionality in GNU tar before 1.23 and GNU cpio