# CVEs published 2010-04-08

15 CVEs were published on April 8, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-1312](https://cve.now/CVE-2010-1312.md): Directory traversal vulnerability in the iJoomla News Portal (com\_news\_portal) component 1.5.x for Joomla! allows remote attackers to read a (no CVSS)
- [CVE-2010-1313](https://cve.now/CVE-2010-1313.md): Directory traversal vulnerability in the Seber Cart (com\_sebercart) component 1.0.0.12 and 1.0.0.13 for Joomla!, when magic\_quotes\_gpc is di (no CVSS)
- [CVE-2010-1314](https://cve.now/CVE-2010-1314.md): Directory traversal vulnerability in the Highslide JS (com\_hsconfig) component 1.5 and 2.0.9 for Joomla! allows remote attackers to read arb (no CVSS)
- [CVE-2010-1315](https://cve.now/CVE-2010-1315.md): Directory traversal vulnerability in weberpcustomer.php in the webERPcustomer (com\_weberpcustomer) component 1.2.1 and 1.x before 1.06.02 fo (no CVSS)
- [CVE-2010-0098](https://cve.now/CVE-2010-0098.md): ClamAV before 0.96 does not properly handle the (1) CAB and (2) 7z file formats, which allows remote attackers to bypass virus detection via (no CVSS)
- [CVE-2010-0743](https://cve.now/CVE-2010-0743.md): Multiple format string vulnerabilities in isns.c in (1) Linux SCSI target framework (aka tgt or scsi-target-utils) 1.0.3, 0.9.5, and earlier (no CVSS)
- [CVE-2010-1309](https://cve.now/CVE-2010-1309.md): Directory traversal vulnerability in Irmin CMS (formerly Pepsi CMS) 0.6 BETA2 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2010-1310](https://cve.now/CVE-2010-1310.md): Opera 10.50 allows remote attackers to obtain sensitive information via crafted XSLT constructs, which cause Opera to return cached contents (no CVSS)
- [CVE-2010-1311](https://cve.now/CVE-2010-1311.md): The qtm\_decompress function in libclamav/mspack.c in ClamAV before 0.96 allows remote attackers to cause a denial of service (memory corrupt (no CVSS)
- [CVE-2010-1303](https://cve.now/CVE-2010-1303.md): Multiple cross-site scripting (XSS) vulnerabilities in the Taxonomy Filter module 6.x before 6.x-1.1 for Drupal allow remote authenticated u (no CVSS)
- [CVE-2010-1304](https://cve.now/CVE-2010-1304.md): Directory traversal vulnerability in userstatus.php in the User Status (com\_userstatus) component 1.21.16 for Joomla! allows remote attacker (no CVSS)
- [CVE-2010-1305](https://cve.now/CVE-2010-1305.md): Directory traversal vulnerability in jinventory.php in the JInventory (com\_jinventory) component 1.23.02 and possibly other versions before (no CVSS)
- [CVE-2010-1306](https://cve.now/CVE-2010-1306.md): Directory traversal vulnerability in the Picasa (com\_joomlapicasa2) component 2.0 and 2.0.5 for Joomla! allows remote attackers to read arbi (no CVSS)
- [CVE-2010-1307](https://cve.now/CVE-2010-1307.md): Directory traversal vulnerability in the Magic Updater (com\_joomlaupdater) component for Joomla! allows remote attackers to read arbitrary f (no CVSS)
- [CVE-2010-1308](https://cve.now/CVE-2010-1308.md): Directory traversal vulnerability in the SVMap (com\_svmap) component 1.1.1 for Joomla! allows remote attackers to read arbitrary files via a (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-04-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.