# CVEs published 2010-04-01

48 CVEs were published on April 1, 2010: 1 critical, 0 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2010-1225](https://cve.now/CVE-2010-1225.md): The memory-management implementation in the Virtual Machine Monitor (aka VMM or hypervisor) in Microsoft Virtual PC 2007 Gold and SP1, Virtu (no CVSS)
- [CVE-2010-1226](https://cve.now/CVE-2010-1226.md): The HTTP client functionality in Apple iPhone OS 3.1 on the iPhone 2G and 3.1.3 on the iPhone 3GS allows remote attackers to cause a denial (no CVSS)
- [CVE-2010-1227](https://cve.now/CVE-2010-1227.md): Cross-site scripting (XSS) vulnerability in Sun Java System Communications Express 6.2 and 6.3 allows remote attackers to inject arbitrary w (no CVSS)
- [CVE-2010-1228](https://cve.now/CVE-2010-1228.md): Multiple race conditions in the sandbox infrastructure in Google Chrome before 4.1.249.1036 have unspecified impact and attack vectors. (no CVSS)
- [CVE-2010-1229](https://cve.now/CVE-2010-1229.md): The sandbox infrastructure in Google Chrome before 4.1.249.1036 does not properly use pointers, which has unspecified impact and attack vect (no CVSS)
- [CVE-2010-1230](https://cve.now/CVE-2010-1230.md): Google Chrome before 4.1.249.1036 does not have the expected behavior for attempts to delete Web SQL Databases and clear the Strict Transpor (no CVSS)
- [CVE-2010-1231](https://cve.now/CVE-2010-1231.md): Google Chrome before 4.1.249.1036 processes HTTP headers before invoking the SafeBrowsing feature, which allows remote attackers to have an (no CVSS)
- [CVE-2010-1232](https://cve.now/CVE-2010-1232.md): Google Chrome before 4.1.249.1036 allows remote attackers to cause a denial of service (memory error) or possibly have unspecified other imp (no CVSS)
- [CVE-2010-1233](https://cve.now/CVE-2010-1233.md): Multiple integer overflows in Google Chrome before 4.1.249.1036 allow remote attackers to have an unspecified impact via vectors involving W (no CVSS)
- [CVE-2010-1234](https://cve.now/CVE-2010-1234.md): Unspecified vulnerability in Google Chrome before 4.1.249.1036 allows remote attackers to truncate the URL shown in the HTTP Basic Authentic (no CVSS)
- [CVE-2010-1235](https://cve.now/CVE-2010-1235.md): Unspecified vulnerability in Google Chrome before 4.1.249.1036 allows remote attackers to trigger the omission of a download warning dialog (no CVSS)
- [CVE-2010-1236](https://cve.now/CVE-2010-1236.md): The protocolIs function in platform/KURLGoogle.cpp in WebCore in WebKit before r55822, as used in Google Chrome before 4.1.249.1036 and Floc (no CVSS)
- [CVE-2010-1237](https://cve.now/CVE-2010-1237.md): Google Chrome 4.1 BETA before 4.1.249.1036 allows remote attackers to cause a denial of service (memory error) or possibly have unspecified (no CVSS)
- [CVE-2010-1224](https://cve.now/CVE-2010-1224.md): main/acl.c in Asterisk Open Source 1.6.0.x before 1.6.0.25, 1.6.1.x before 1.6.1.17, and 1.6.2.x before 1.6.2.5 does not properly enforce re (no CVSS)
- [CVE-2009-2277](https://cve.now/CVE-2009-2277.md): Cross-site scripting (XSS) vulnerability in WebAccess in VMware VirtualCenter 2.0.2 and 2.5 and VMware ESX 3.0.3 and 3.5 allows remote attac (no CVSS)
- [CVE-2010-0686](https://cve.now/CVE-2010-0686.md): WebAccess in VMware VirtualCenter 2.0.2 and 2.5, VMware Server 2.0, and VMware ESX 3.0.3 and 3.5 allows remote attackers to leverage proxy-s (no CVSS)
- [CVE-2010-0768](https://cve.now/CVE-2010-0768.md): Cross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.41, 6.1 be (no CVSS)
- [CVE-2010-0769](https://cve.now/CVE-2010-0769.md): IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.41, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.9 does not properly define wsadmin scr (no CVSS)
- [CVE-2010-0770](https://cve.now/CVE-2010-0770.md): IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.41, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.9 allows remote authenticated users to (no CVSS)
- [CVE-2010-1031](https://cve.now/CVE-2010-1031.md): Unspecified vulnerability in HP Insight Control for Linux (aka IC-Linux or ICE-LX) 2.11 and earlier allows local users to gain privileges vi (no CVSS)
- [CVE-2010-1137](https://cve.now/CVE-2010-1137.md): Cross-site scripting (XSS) vulnerability in WebAccess in VMware VirtualCenter 2.0.2 and 2.5 and VMware ESX 3.0.3 and 3.5, and the Server Con (no CVSS)
- [CVE-2010-1193](https://cve.now/CVE-2010-1193.md): Cross-site scripting (XSS) vulnerability in WebAccess in VMware Server 2.0 allows remote attackers to inject arbitrary web script or HTML vi (no CVSS)
- [CVE-2010-0082](https://cve.now/CVE-2010-0082.md): Unspecified vulnerability in the HotSpot Server component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2\_25, and (no CVSS)
- [CVE-2010-0084](https://cve.now/CVE-2010-0084.md): Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and (no CVSS)
- [CVE-2010-0085](https://cve.now/CVE-2010-0085.md): Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4. (no CVSS)
- [CVE-2010-0087](https://cve.now/CVE-2010-0087.md): Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, (no CVSS)
- [CVE-2010-0088](https://cve.now/CVE-2010-0088.md): Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4. (no CVSS)
- [CVE-2010-0089](https://cve.now/CVE-2010-0089.md): Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, (no CVSS)
- [CVE-2010-0090](https://cve.now/CVE-2010-0090.md): Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18 allows remote at (no CVSS)
- [CVE-2010-0091](https://cve.now/CVE-2010-0091.md): Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and (no CVSS)
- [CVE-2010-0092](https://cve.now/CVE-2010-0092.md): Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, and 5.0 Update 23 a (no CVSS)
- [CVE-2010-0093](https://cve.now/CVE-2010-0093.md): Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and (no CVSS)
- [CVE-2010-0094](https://cve.now/CVE-2010-0094.md): Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18 and 5.0 Update 23 al (no CVSS)
- [CVE-2010-0095](https://cve.now/CVE-2010-0095.md): Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and (no CVSS)
- [CVE-2010-0837](https://cve.now/CVE-2010-0837.md): Unspecified vulnerability in the Pack200 component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote at (no CVSS)
- [CVE-2010-0838](https://cve.now/CVE-2010-0838.md): Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote at (no CVSS)
- [CVE-2010-0839](https://cve.now/CVE-2010-0839.md): Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2\_25, and 1.3.1\_27 (no CVSS)
- [CVE-2010-0840](https://cve.now/CVE-2010-0840.md): Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and (CVSS 9.8, KEV)
- [CVE-2010-0841](https://cve.now/CVE-2010-0841.md): Unspecified vulnerability in the ImageIO component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2\_25 allows r (no CVSS)
- [CVE-2010-0842](https://cve.now/CVE-2010-0842.md): Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2\_25, and 1.3.1\_27 (no CVSS)
- [CVE-2010-0843](https://cve.now/CVE-2010-0843.md): Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2\_25, and 1.3.1\_27 (no CVSS)
- [CVE-2010-0844](https://cve.now/CVE-2010-0844.md): Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2\_25, and 1.3.1\_27 (no CVSS)
- [CVE-2010-0845](https://cve.now/CVE-2010-0845.md): Unspecified vulnerability in the HotSpot Server component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows re (no CVSS)
- [CVE-2010-0846](https://cve.now/CVE-2010-0846.md): Unspecified vulnerability in the ImageIO component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2\_25, and 1.3.1\_2 (no CVSS)
- [CVE-2010-0847](https://cve.now/CVE-2010-0847.md): Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2\_25, and 1.3.1\_2 (no CVSS)
- [CVE-2010-0848](https://cve.now/CVE-2010-0848.md): Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2\_25, and 1.3.1\_2 (no CVSS)
- [CVE-2010-0849](https://cve.now/CVE-2010-0849.md): Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2\_25, and 1.3.1\_2 (no CVSS)
- [CVE-2010-0850](https://cve.now/CVE-2010-0850.md): Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 1.3.1\_27 allows remote attackers to affect confid (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-04-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.