# CVEs published 2010-03-29

24 CVEs were published on March 29, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-0451](https://cve.now/CVE-2010-0451.md): The installation process for NFS/ONCplus B.11.31\_08 and earlier on HP HP-UX B.11.31 changes the NFS\_SERVER setting in the nfsconf file, whic (no CVSS)
- [CVE-2010-1183](https://cve.now/CVE-2010-1183.md): Certain patch-installation scripts in Oracle Solaris allow local users to append data to arbitrary files via a symlink attack on the /tmp/CL (no CVSS)
- [CVE-2010-1184](https://cve.now/CVE-2010-1184.md): The Microsoft wireless keyboard uses XOR encryption with a key derived from the MAC address, which makes it easier for remote attackers to o (no CVSS)
- [CVE-2010-1185](https://cve.now/CVE-2010-1185.md): Stack-based buffer overflow in serv.exe in SAP MaxDB 7.4.3.32, and 7.6.0.37 through 7.6.06 allows remote attackers to execute arbitrary code (no CVSS)
- [CVE-2009-4762](https://cve.now/CVE-2009-4762.md): MoinMoin 1.7.x before 1.7.3 and 1.8.x before 1.8.3 checks parent ACLs in certain inappropriate circumstances during processing of hierarchic (no CVSS, moin)
- [CVE-2010-1182](https://cve.now/CVE-2010-1182.md): Multiple unspecified vulnerabilities in the administrative console in IBM WebSphere Application Server (WAS) 7.0.x before 7.0.0.9 on z/OS ha (no CVSS)
- [CVE-2010-1174](https://cve.now/CVE-2010-1174.md): Cisco TFTP Server 1.1 allows remote attackers to cause a denial of service (daemon crash) via a crafted (1) read (aka RRQ) or (2) write (aka (no CVSS)
- [CVE-2010-1175](https://cve.now/CVE-2010-1175.md): Microsoft Internet Explorer 7.0 on Windows XP and Windows Server 2003 allows remote attackers to have an unspecified impact via a certain XM (no CVSS)
- [CVE-2010-1176](https://cve.now/CVE-2010-1176.md): Safari on Apple iPhone OS 3.1.3 for iPod touch allows remote attackers to cause a denial of service (application crash) or possibly execute (no CVSS)
- [CVE-2010-1177](https://cve.now/CVE-2010-1177.md): Safari on Apple iPhone OS 3.1.3 for iPod touch allows remote attackers to cause a denial of service (application crash) or possibly execute (no CVSS)
- [CVE-2010-1178](https://cve.now/CVE-2010-1178.md): Safari on Apple iPhone OS 3.1.3 for iPod touch allows remote attackers to cause a denial of service (application crash) via a JavaScript loo (no CVSS)
- [CVE-2010-1179](https://cve.now/CVE-2010-1179.md): Safari on Apple iPhone OS 3.1.3 for iPod touch allows remote attackers to cause a denial of service (application crash) or possibly execute (no CVSS)
- [CVE-2010-1180](https://cve.now/CVE-2010-1180.md): Safari on Apple iPhone OS 3.1.3 for iPod touch allows remote attackers to cause a denial of service (application crash) or possibly execute (no CVSS)
- [CVE-2010-1181](https://cve.now/CVE-2010-1181.md): Safari on Apple iPhone OS 3.1.3 for iPod touch allows remote attackers to cause a denial of service (application crash) or possibly execute (no CVSS)
- [CVE-2009-4753](https://cve.now/CVE-2009-4753.md): Multiple buffer overflows in the FTP server on the Addonics NAS Adapter NASU2FW41 with loader 1.17 allow remote attackers to cause a denial (no CVSS)
- [CVE-2009-4754](https://cve.now/CVE-2009-4754.md): Stack-based buffer overflow in Mercury Audio Player 1.21 allows remote attackers to execute arbitrary code via a long string in a malformed (no CVSS)
- [CVE-2009-4755](https://cve.now/CVE-2009-4755.md): Multiple stack-based buffer overflows in Mercury Audio Player 1.21 allow remote attackers to execute arbitrary code via a long string in a m (no CVSS)
- [CVE-2009-4756](https://cve.now/CVE-2009-4756.md): Stack-based buffer overflow in TraktorBeatport.exe 1.0.0.283 in Beatport Player 1.0.0.0 allows remote attackers to execute arbitrary code vi (no CVSS)
- [CVE-2009-4757](https://cve.now/CVE-2009-4757.md): Stack-based buffer overflow in BrotherSoft EW-MusicPlayer 0.8 allows remote attackers to cause a denial of service (application crash) or po (no CVSS)
- [CVE-2009-4758](https://cve.now/CVE-2009-4758.md): Stack-based buffer overflow in dicas Mpegable Player 2.12 allows remote attackers to cause a denial of service (application crash) or possib (no CVSS)
- [CVE-2009-4759](https://cve.now/CVE-2009-4759.md): Buffer overflow in BrotherSoft BMXPlay 0.4.4b allows remote attackers to cause a denial of service (application crash) or possibly execute a (no CVSS)
- [CVE-2009-4760](https://cve.now/CVE-2009-4760.md): Winn ASP Guestbook 1.01 Beta stores sensitive information under the web root with insufficient access control, which allows remote attackers (no CVSS)
- [CVE-2009-4761](https://cve.now/CVE-2009-4761.md): Stack-based buffer overflow in Mini-stream RM Downloader allows remote attackers to execute arbitrary code via a long string in a .smi file. (no CVSS)
- [CVE-2010-0452](https://cve.now/CVE-2010-0452.md): Multiple cross-site scripting (XSS) vulnerabilities in HP Project and Portfolio Management Center (PPMC, formerly Mercury IT Governance) 7.1 (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-03-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.
