# CVEs published 2010-03-19

35 CVEs were published on March 19, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-1028](https://cve.now/CVE-2010-1028.md): Integer overflow in the decompression functionality in the Web Open Fonts Format (WOFF) decoder in Mozilla Firefox 3.6 before 3.6.2 and 3.7 (no CVSS)
- [CVE-2010-1029](https://cve.now/CVE-2010-1029.md): Stack consumption vulnerability in the WebCore::CSSSelector function in WebKit, as used in Apple Safari 4.0.4, Apple Safari on iPhone OS and (no CVSS)
- [CVE-2010-0688](https://cve.now/CVE-2010-0688.md): Stack-based buffer overflow in Orbital Viewer 1.04 allows user-assisted remote attackers to execute arbitrary code via a crafted (1) .orb or (no CVSS)
- [CVE-2010-1003](https://cve.now/CVE-2010-1003.md): Directory traversal vulnerability in www/editor/tiny\_mce/langs/language.php in eFront 3.5.x through 3.5.5 allows remote attackers to include (no CVSS)
- [CVE-2009-4271](https://cve.now/CVE-2009-4271.md): The Linux kernel 2.6.9 through 2.6.17 on the x86\_64 and amd64 platforms allows local users to cause a denial of service (panic) via a 32-bit (no CVSS)
- [CVE-2010-0008](https://cve.now/CVE-2010-0008.md): The sctp\_rcv\_ootb function in the SCTP implementation in the Linux kernel before 2.6.23 allows remote attackers to cause a denial of service (no CVSS)
- [CVE-2010-0465](https://cve.now/CVE-2010-0465.md): Cross-site scripting (XSS) vulnerability in the online Documents functionality in SugarCRM 5.2.x before 5.2.0l and 5.5.x before 5.5.0a allow (no CVSS)
- [CVE-2010-0732](https://cve.now/CVE-2010-0732.md): gdk/gdkwindow.c in GTK+ before 2.18.5, as used in gnome-screensaver before 2.28.1, performs implicit paints on windows of type GDK\_WINDOW\_FO (no CVSS)
- [CVE-2010-0733](https://cve.now/CVE-2010-0733.md): Integer overflow in src/backend/executor/nodeHash.c in PostgreSQL 8.4.1 and earlier, and 8.5 through 8.5alpha2, allows remote authenticated (no CVSS)
- [CVE-2010-0734](https://cve.now/CVE-2010-0734.md): content\_encoding.c in libcurl 7.10.5 through 7.19.7, when zlib is enabled, does not properly restrict the amount of callback data sent to an (no CVSS)
- [CVE-2010-0736](https://cve.now/CVE-2010-0736.md): Cross-site scripting (XSS) vulnerability in the view\_queryform function in lib/viewvc.py in ViewVC before 1.0.10, and 1.1.x before 1.1.4, al (no CVSS)
- [CVE-2010-1004](https://cve.now/CVE-2010-1004.md): SQL injection vulnerability in the Yet another TYPO3 search engine (YATSE) extension before 0.3.2 for TYPO3 allows remote attackers to execu (no CVSS)
- [CVE-2010-1005](https://cve.now/CVE-2010-1005.md): Cross-site scripting (XSS) vulnerability in the Yet another TYPO3 search engine (YATSE) extension before 0.3.2 for TYPO3 allows remote attac (no CVSS)
- [CVE-2010-1006](https://cve.now/CVE-2010-1006.md): SQL injection vulnerability in the Brainstorming extension 0.1.8 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL comm (no CVSS)
- [CVE-2010-1007](https://cve.now/CVE-2010-1007.md): Unspecified vulnerability in the Power Extension Manager (ch\_lightem) extension 1.0.34 and earlier for TYPO3 allows remote attackers to obta (no CVSS)
- [CVE-2010-1008](https://cve.now/CVE-2010-1008.md): Cross-site scripting (XSS) vulnerability in the Sellector.com Widget Integration (chsellector) extension before 0.1.2 for TYPO3 allows remot (no CVSS)
- [CVE-2010-1009](https://cve.now/CVE-2010-1009.md): SQL injection vulnerability in the Educator extension 0.1.5 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecif (no CVSS)
- [CVE-2010-1010](https://cve.now/CVE-2010-1010.md): SQL injection vulnerability in the MK Wastebasket (mk\_wastebasket) extension 2.1.0 and earlier for TYPO3 allows remote attackers to execute (no CVSS)
- [CVE-2010-1011](https://cve.now/CVE-2010-1011.md): Cross-site scripting (XSS) vulnerability in the myDashboard (mydashboard) extension 0.1.13 and earlier for TYPO3 allows remote attackers to (no CVSS)
- [CVE-2010-1012](https://cve.now/CVE-2010-1012.md): SQL injection vulnerability in the CleanDB (nf\_cleandb) extension 1.0.7 and earlier for TYPO3 allows remote attackers to execute arbitrary S (no CVSS)
- [CVE-2010-1013](https://cve.now/CVE-2010-1013.md): SQL injection vulnerability in the Diocese of Portsmouth Database (pd\_diocesedatabase) extension before 0.7.13 for TYPO3 allows remote attac (no CVSS)
- [CVE-2010-1014](https://cve.now/CVE-2010-1014.md): Cross-site scripting (XSS) vulnerability in the Reports Logfile View (reports\_logview) extension 1.2.1 and earlier for TYPO3 allows remote a (no CVSS)
- [CVE-2010-1015](https://cve.now/CVE-2010-1015.md): SQL injection vulnerability in the SAV Filter Alphabetic (sav\_filter\_abc) extension before 1.0.9 for TYPO3 allows remote attackers to execut (no CVSS)
- [CVE-2010-1016](https://cve.now/CVE-2010-1016.md): SQL injection vulnerability in the SAV Filter Selectors (sav\_filter\_selectors) extension before 1.0.5 for TYPO3 allows remote attackers to e (no CVSS)
- [CVE-2010-1017](https://cve.now/CVE-2010-1017.md): SQL injection vulnerability in the SAV Filter Months (sav\_filter\_months) extension before 1.0.5 for TYPO3 allows remote attackers to execute (no CVSS)
- [CVE-2010-1018](https://cve.now/CVE-2010-1018.md): SQL injection vulnerability in the Book Reviews (sk\_bookreview) extension 0.0.12 and earlier for TYPO3 allows remote attackers to execute ar (no CVSS)
- [CVE-2010-1019](https://cve.now/CVE-2010-1019.md): SQL injection vulnerability in the Simple Gallery (sk\_simplegallery) extension 0.0.9 and earlier for TYPO3 allows remote attackers to execut (no CVSS)
- [CVE-2010-1020](https://cve.now/CVE-2010-1020.md): Cross-site scripting (XSS) vulnerability in the Simple Gallery (sk\_simplegallery) extension 0.0.9 and earlier for TYPO3 allows remote attack (no CVSS)
- [CVE-2010-1021](https://cve.now/CVE-2010-1021.md): Cross-site scripting (XSS) vulnerability in the Typo3 Quixplorer (t3quixplorer) extension before 1.7.1 for TYPO3 allows remote attackers to (no CVSS)
- [CVE-2010-1022](https://cve.now/CVE-2010-1022.md): The TYPO3 Security - Salted user password hashes (t3sec\_saltedpw) extension before 0.2.13 for TYPO3 allows remote attackers to bypass authen (no CVSS)
- [CVE-2010-1023](https://cve.now/CVE-2010-1023.md): Cross-site scripting (XSS) vulnerability in the UserTask Center, Recent (taskcenter\_recent) extension 0.1.0 and earlier for TYPO3 allows rem (no CVSS)
- [CVE-2010-1024](https://cve.now/CVE-2010-1024.md): SQL injection vulnerability in the TGM-Newsletter (tgm\_newsletter) extension 0.0.2 for TYPO3 allows remote attackers to execute arbitrary SQ (no CVSS)
- [CVE-2010-1025](https://cve.now/CVE-2010-1025.md): Cross-site scripting (XSS) vulnerability in the TGM-Newsletter (tgm\_newsletter) extension 0.0.2 for TYPO3 allows remote attackers to inject (no CVSS)
- [CVE-2010-1026](https://cve.now/CVE-2010-1026.md): SQL injection vulnerability in the CleanDB - DBAL (tmsw\_cleandb) extension 2.1.0 and earlier for TYPO3 allows remote attackers to execute ar (no CVSS)
- [CVE-2010-1027](https://cve.now/CVE-2010-1027.md): SQL injection vulnerability in the Meet Travelmates (travelmate) extension 0.1.1 and earlier for TYPO3 allows remote attackers to execute ar (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-03-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.