# CVEs published 2010-03-12

21 CVEs were published on March 12, 2010: 0 critical, 2 high. Days are UTC.

- [CVE-2010-0049](https://cve.now/CVE-2010-0049.md): Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of s (no CVSS)
- [CVE-2010-0050](https://cve.now/CVE-2010-0050.md): Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of s (no CVSS)
- [CVE-2010-0051](https://cve.now/CVE-2010-0051.md): WebKit in Apple Safari before 4.0.5 does not properly validate the cross-origin loading of stylesheets, which allows remote attackers to obt (no CVSS)
- [CVE-2010-0052](https://cve.now/CVE-2010-0052.md): Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of s (no CVSS)
- [CVE-2010-0053](https://cve.now/CVE-2010-0053.md): Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of s (no CVSS)
- [CVE-2010-0054](https://cve.now/CVE-2010-0054.md): Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of s (no CVSS)
- [CVE-2009-4001](https://cve.now/CVE-2009-4001.md): Integer overflow in XnView before 1.97.2 might allow remote attackers to execute arbitrary code via a DICOM image with crafted dimensions, l (no CVSS)
- [CVE-2010-0040](https://cve.now/CVE-2010-0040.md): Integer overflow in ColorSync in Apple Safari before 4.0.5 on Windows, and iTunes before 9.1, allows remote attackers to execute arbitrary c (no CVSS)
- [CVE-2010-0041](https://cve.now/CVE-2010-0041.md): ImageIO in Apple Safari before 4.0.5 and iTunes before 9.1 on Windows does not ensure that memory access is associated with initialized memo (no CVSS)
- [CVE-2010-0042](https://cve.now/CVE-2010-0042.md): ImageIO in Apple Safari before 4.0.5 and iTunes before 9.1 on Windows does not ensure that memory access is associated with initialized memo (no CVSS)
- [CVE-2010-0043](https://cve.now/CVE-2010-0043.md): ImageIO in Apple Safari before 4.0.5 and iTunes before 9.1 on Windows allows remote attackers to execute arbitrary code or cause a denial of (no CVSS)
- [CVE-2010-0044](https://cve.now/CVE-2010-0044.md): PubSub in Apple Safari before 4.0.5 does not properly implement use of the Accept Cookies preference to block cookies, which makes it easier (no CVSS)
- [CVE-2010-0045](https://cve.now/CVE-2010-0045.md): Apple Safari before 4.0.5 on Windows does not properly validate external URL schemes, which allows remote attackers to open local files and (no CVSS)
- [CVE-2010-0046](https://cve.now/CVE-2010-0046.md): The Cascading Style Sheets (CSS) implementation in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or (no CVSS)
- [CVE-2010-0047](https://cve.now/CVE-2010-0047.md): Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of s (CVSS 8.8)
- [CVE-2010-0048](https://cve.now/CVE-2010-0048.md): Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of s (CVSS 8.8)
- [CVE-2010-0122](https://cve.now/CVE-2010-0122.md): Multiple SQL injection vulnerabilities in Employee Timeclock Software 0.99 allow remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2010-0123](https://cve.now/CVE-2010-0123.md): The database backup implementation in Employee Timeclock Software 0.99 stores sensitive information under the web root with insufficient acc (no CVSS)
- [CVE-2010-0124](https://cve.now/CVE-2010-0124.md): Employee Timeclock Software 0.99 places the database password on the mysqldump command line, which allows local users to obtain sensitive in (no CVSS)
- [CVE-2010-0396](https://cve.now/CVE-2010-0396.md): Directory traversal vulnerability in the dpkg-source component in dpkg before 1.14.29 allows remote attackers to modify arbitrary files via (no CVSS)
- [CVE-2010-0624](https://cve.now/CVE-2010-0624.md): Heap-based buffer overflow in the rmt\_read\_\_ function in lib/rtapelib.c in the rmt client functionality in GNU tar before 1.23 and GNU cpio (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-03-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.