# CVEs published 2010-04-05

43 CVEs were published on April 5, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-0173](https://cve.now/CVE-2010-0173.md): Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4, (no CVSS)
- [CVE-2010-0174](https://cve.now/CVE-2010-0174.md): Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2; Thu (no CVSS)
- [CVE-2010-0175](https://cve.now/CVE-2010-0175.md): Use-after-free vulnerability in the nsTreeSelection implementation in Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.9, Thunderbird befo (no CVSS)
- [CVE-2010-0176](https://cve.now/CVE-2010-0176.md): Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2; Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 do not prope (no CVSS)
- [CVE-2010-0177](https://cve.now/CVE-2010-0177.md): Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, frees the contents of the window.navi (no CVSS)
- [CVE-2010-0178](https://cve.now/CVE-2010-0178.md): Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, does not prevent applets from interpr (no CVSS)
- [CVE-2010-0179](https://cve.now/CVE-2010-0179.md): Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, when the XMLHttpRequestSpy module in the Firebug add-on is (no CVSS)
- [CVE-2010-0181](https://cve.now/CVE-2010-0181.md): Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, executes a mail application in situations where an IMG elem (no CVSS)
- [CVE-2010-0182](https://cve.now/CVE-2010-0182.md): The XMLDocument::load function in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4 (no CVSS)
- [CVE-2009-2822](https://cve.now/CVE-2009-2822.md): AirPort Utility before 5.5.1 for Apple AirPort Base Station does not properly distribute MAC address ACLs to network extenders, which allows (no CVSS)
- [CVE-2009-2936](https://cve.now/CVE-2009-2936.md): The Command Line Interface (aka Server CLI or administration interface) in the master process in the reverse proxy server in Varnish before (no CVSS)
- [CVE-2010-0009](https://cve.now/CVE-2010-0009.md): Apache CouchDB 0.8.0 through 0.10.1 allows remote attackers to obtain sensitive information by measuring the completion time of operations t (no CVSS)
- [CVE-2010-0625](https://cve.now/CVE-2010-0625.md): Stack-based buffer overflow in NWFTPD.nlm before 5.10.01 in the FTP server in Novell NetWare 5.1 through 6.5 SP8 allows remote authenticated (no CVSS)
- [CVE-2010-0684](https://cve.now/CVE-2010-0684.md): Cross-site scripting (XSS) vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1 allows remote authenticated users to in (no CVSS, org.apache.activemq:activemq-parent)
- [CVE-2010-1244](https://cve.now/CVE-2010-1244.md): Cross-site request forgery (CSRF) vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1 allows remote attackers to hijac (no CVSS, org.apache.activemq:activemq-parent)
- [CVE-2000-1245](https://cve.now/CVE-2000-1245.md): Multiple unspecified vulnerabilities in NWFTPD.nlm before 5.01o in the FTP server in Novell NetWare 5.1 SP3 allow remote attackers to bypass (no CVSS)
- [CVE-2000-1246](https://cve.now/CVE-2000-1246.md): NWFTPD.nlm before 5.01o in the FTP server in Novell NetWare 5.1 SP3 allows remote authenticated users to cause a denial of service (abend) b (no CVSS)
- [CVE-2001-1587](https://cve.now/CVE-2001-1587.md): NWFTPD.nlm before 5.01w in the FTP server in Novell NetWare allows remote attackers to cause a denial of service (abend) via an anonymous ST (no CVSS)
- [CVE-2002-2432](https://cve.now/CVE-2002-2432.md): Unspecified vulnerability in NWFTPD.nlm before 5.03b in the FTP server in Novell NetWare allows remote attackers to cause a denial of servic (no CVSS)
- [CVE-2002-2433](https://cve.now/CVE-2002-2433.md): NWFTPD.nlm before 5.03b in the FTP server in Novell NetWare allows remote authenticated users to cause a denial of service (abend) via a cra (no CVSS)
- [CVE-2002-2434](https://cve.now/CVE-2002-2434.md): NWFTPD.nlm before 5.02i in the FTP server in Novell NetWare does not properly listen for data connections, which allows remote attackers to (no CVSS)
- [CVE-2003-1591](https://cve.now/CVE-2003-1591.md): NWFTPD.nlm in the FTP server in Novell NetWare 6.0 before SP4 and 6.5 before SP1 allows user-assisted remote attackers to cause a denial of (no CVSS)
- [CVE-2003-1592](https://cve.now/CVE-2003-1592.md): Multiple buffer overflows in NWFTPD.nlm in the FTP server in Novell NetWare 6.0 before SP4 and 6.5 before SP1 allow remote attackers to caus (no CVSS)
- [CVE-2003-1593](https://cve.now/CVE-2003-1593.md): NWFTPD.nlm in the FTP server in Novell NetWare 6.0 before SP4 and 6.5 before SP1 does not enforce domain-name login restrictions, which allo (no CVSS)
- [CVE-2003-1594](https://cve.now/CVE-2003-1594.md): NWFTPD.nlm before 5.04.05 in the FTP server in Novell NetWare 6.5 does not properly enforce FTPREST.TXT settings, which allows remote attack (no CVSS)
- [CVE-2003-1595](https://cve.now/CVE-2003-1595.md): NWFTPD.nlm before 5.04.05 in the FTP server in Novell NetWare 6.5 does not properly perform "intruder detection," which has unspecified impa (no CVSS)
- [CVE-2003-1596](https://cve.now/CVE-2003-1596.md): NWFTPD.nlm before 5.03.12 in the FTP server in Novell NetWare does not properly restrict filesystem use by anonymous users with NFS Gateway (no CVSS)
- [CVE-2004-2767](https://cve.now/CVE-2004-2767.md): NWFTPD.nlm before 5.04.25 in the FTP server in Novell NetWare does not promptly close DS sessions, which allows remote attackers to cause a (no CVSS)
- [CVE-2005-4887](https://cve.now/CVE-2005-4887.md): NWFTPD.nlm before 5.06.05 in the FTP server in Novell NetWare 6.5 SP5 allows attackers to have an unspecified impact via vectors related to (no CVSS)
- [CVE-2005-4888](https://cve.now/CVE-2005-4888.md): NWFTPD.nlm before 5.06.04 in the FTP server in Novell NetWare allows remote attackers to cause a denial of service (excessive stale connecti (no CVSS)
- [CVE-2007-6734](https://cve.now/CVE-2007-6734.md): NWFTPD.nlm before 5.08.07 in the FTP server in Novell NetWare 6.5 SP7 does not properly implement the FTPREST.TXT NOREMOTE restriction, whic (no CVSS)
- [CVE-2007-6735](https://cve.now/CVE-2007-6735.md): NWFTPD.nlm before 5.08.06 in the FTP server in Novell NetWare does not properly handle partial matches for container names in the FTPREST.TX (no CVSS)
- [CVE-2008-3279](https://cve.now/CVE-2008-3279.md): Untrusted search path vulnerability in libbrlttybba.so in brltty 3.7.2 allows local users to gain privileges via a crafted library, related (no CVSS)
- [CVE-2009-4764](https://cve.now/CVE-2009-4764.md): Adobe Reader 8.x and 9.x on Windows is able to execute EXE files that are embedded in a PDF document, which makes it easier for remote attac (no CVSS)
- [CVE-2010-0825](https://cve.now/CVE-2010-0825.md): lib-src/movemail.c in movemail in emacs 22 and 23 allows local users to read, modify, or delete arbitrary mailbox files via a symlink attack (no CVSS)
- [CVE-2010-0826](https://cve.now/CVE-2010-0826.md): The Free Software Foundation (FSF) Berkeley DB NSS module (aka libnss-db) 2.2.3pre1 reads the DB\_CONFIG file in the current working director (no CVSS)
- [CVE-2010-0828](https://cve.now/CVE-2010-0828.md): Cross-site scripting (XSS) vulnerability in action/Despam.py in the Despam action module in MoinMoin 1.8.7 and 1.9.2 allows remote authentic (no CVSS, moin)
- [CVE-2010-1238](https://cve.now/CVE-2010-1238.md): MoinMoin 1.7.1 allows remote attackers to bypass the textcha protection mechanism by modifying the textcha-question and textcha-answer field (no CVSS)
- [CVE-2010-1239](https://cve.now/CVE-2010-1239.md): Foxit Reader before 3.2.1.0401 allows remote attackers to (1) execute arbitrary local programs via a certain "/Type /Action /S /Launch" sequ (no CVSS)
- [CVE-2010-1240](https://cve.now/CVE-2010-1240.md): Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, do not restrict the contents of one text field in t (no CVSS)
- [CVE-2010-1241](https://cve.now/CVE-2010-1241.md): Heap-based buffer overflow in the custom heap management system in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Window (no CVSS)
- [CVE-2010-1242](https://cve.now/CVE-2010-1242.md): Multiple cross-site scripting (XSS) vulnerabilities in the IBM Web Interface for Content Management (aka WEBi) before 1.0.4 allow remote att (no CVSS)
- [CVE-2010-1243](https://cve.now/CVE-2010-1243.md): The IBM Web Interface for Content Management (aka WEBi) before 1.0.4 creates persistent cookies on client workstations, which has unspecifie (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-04-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.