# CVEs published 2010-04-06 24 CVEs were published on April 6, 2010: 0 critical, 0 high. Days are UTC. - [CVE-2009-4737](https://cve.now/CVE-2009-4737.md): Stack-based buffer overflow in JustSystems Corporation Ichitaro 13, 2004 through 2009, Viewer 2009 19.0.1.0 and earlier, and other versions (no CVSS) - [CVE-2010-1083](https://cve.now/CVE-2010-1083.md): The processcompl\_compat function in drivers/usb/core/devio.c in Linux kernel 2.6.x through 2.6.32, and possibly other versions, does not cle (no CVSS) - [CVE-2010-1084](https://cve.now/CVE-2010-1084.md): Linux kernel 2.6.18 through 2.6.33, and possibly other versions, allows remote attackers to cause a denial of service (memory corruption) vi (no CVSS) - [CVE-2010-1085](https://cve.now/CVE-2010-1085.md): The azx\_position\_ok function in hda\_intel.c in Linux kernel 2.6.33-rc4 and earlier, when running on the AMD780V chip set, allows context-dep (no CVSS) - [CVE-2010-1086](https://cve.now/CVE-2010-1086.md): The ULE decapsulation functionality in drivers/media/dvb/dvb-core/dvb\_net.c in dvb-core in Linux kernel 2.6.33 and earlier allows attackers (no CVSS) - [CVE-2010-1087](https://cve.now/CVE-2010-1087.md): The nfs\_wait\_on\_request function in fs/nfs/pagelist.c in Linux kernel 2.6.x through 2.6.33-rc5 allows attackers to cause a denial of service (no CVSS) - [CVE-2010-1088](https://cve.now/CVE-2010-1088.md): fs/namei.c in Linux kernel 2.6.18 through 2.6.34 does not always follow NFS automount "symlinks," which allows attackers to have an unknown (no CVSS) - [CVE-2010-1298](https://cve.now/CVE-2010-1298.md): Directory traversal vulnerability in view.php in Pulse CMS 1.2.2 allows remote attackers to read arbitrary files via directory traversal seq (no CVSS) - [CVE-2010-0750](https://cve.now/CVE-2010-0750.md): pkexec.c in pkexec in libpolkit in PolicyKit 0.96 allows local users to determine the existence of arbitrary files via the argument. (no CVSS) - [CVE-2010-0751](https://cve.now/CVE-2010-0751.md): The ip\_evictor function in ip\_fragment.c in libnids before 1.24, as used in dsniff and possibly other products, allows remote attackers to c (no CVSS) - [CVE-2010-1147](https://cve.now/CVE-2010-1147.md): Stack-based buffer overflow in Open Direct Connect Hub (aka Open DC Hub or OpenDCHub) 0.8.1 allows remote authenticated users to execute arb (no CVSS) - [CVE-2010-1271](https://cve.now/CVE-2010-1271.md): SQL injection vulnerability in showplugs.php in smartplugs 1.3 allows remote attackers to execute arbitrary SQL commands via the domain para (no CVSS) - [CVE-2010-1272](https://cve.now/CVE-2010-1272.md): PHP remote file inclusion vulnerability in includes/tgpinc.php in Gnat-TGP 1.2.20 and earlier allows remote attackers to execute arbitrary P (no CVSS) - [CVE-2010-1273](https://cve.now/CVE-2010-1273.md): Emweb Wt before 3.1.1 does not validate the UTF-8 encoding of (1) form values and (2) JSignal arguments, which has unspecified impact and re (no CVSS) - [CVE-2010-1274](https://cve.now/CVE-2010-1274.md): Cross-site scripting (XSS) vulnerability in Emweb Wt before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via vectors (no CVSS) - [CVE-2010-1275](https://cve.now/CVE-2010-1275.md): Cross-site scripting (XSS) vulnerability in ShowPost.asp in BBSXP 2008 allows remote attackers to inject arbitrary web script or HTML via th (no CVSS) - [CVE-2010-1276](https://cve.now/CVE-2010-1276.md): Multiple cross-site scripting (XSS) vulnerabilities in BBSXP 2008 SP2 allow remote attackers to inject arbitrary web script or HTML via the (no CVSS) - [CVE-2010-1277](https://cve.now/CVE-2010-1277.md): SQL injection vulnerability in the user.authenticate method in the API in Zabbix 1.8 before 1.8.2 allows remote attackers to execute arbitra (no CVSS) - [CVE-2010-1265](https://cve.now/CVE-2010-1265.md): SQL injection vulnerability in Adam Corley dcsFlashGames (com\_dcs\_flashgames) allows remote attackers to execute arbitrary SQL commands via (no CVSS) - [CVE-2010-1266](https://cve.now/CVE-2010-1266.md): Multiple PHP remote file inclusion vulnerabilities in WebMaid CMS 0.2-6 Beta and earlier allow remote attackers to execute arbitrary PHP cod (no CVSS) - [CVE-2010-1267](https://cve.now/CVE-2010-1267.md): Multiple directory traversal vulnerabilities in WebMaid CMS 0.2-6 Beta and earlier allow remote attackers to read arbitrary files via direct (no CVSS) - [CVE-2010-1268](https://cve.now/CVE-2010-1268.md): Directory traversal vulnerability in index.php in justVisual CMS 2.0, when magic\_quotes\_gpc is disabled, allows remote attackers to include (no CVSS) - [CVE-2010-1269](https://cve.now/CVE-2010-1269.md): SQL injection vulnerability in auktion.php in phpscripte24 Niedrig Gebote Pro Auktions System II allows remote attackers to execute arbitrar (no CVSS) - [CVE-2010-1270](https://cve.now/CVE-2010-1270.md): SQL injection vulnerability in auktion.php in Multi Auktions Komplett System 2 allows remote attackers to execute arbitrary SQL commands via (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2010-04-06 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.