# CVEs published 2010-04-12

21 CVEs were published on April 12, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2009-1564](https://cve.now/CVE-2009-1564.md): Heap-based buffer overflow in vmnc.dll in the VMnc media codec in VMware Movie Decoder before 6.5.4 Build 246459 on Windows, and the movie d (no CVSS)
- [CVE-2009-1565](https://cve.now/CVE-2009-1565.md): vmnc.dll in the VMnc media codec in VMware Movie Decoder before 6.5.4 Build 246459 on Windows, and the movie decoder in VMware Workstation 6 (no CVSS)
- [CVE-2009-3732](https://cve.now/CVE-2009-3732.md): Format string vulnerability in vmware-vmrc.exe build 158248 in VMware Remote Console (aka VMrc) allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2010-0741](https://cve.now/CVE-2010-0741.md): The virtio\_net\_bad\_features function in hw/virtio-net.c in the virtio-net driver in the Linux kernel before 2.6.26, when used on a guest OS (no CVSS)
- [CVE-2010-1138](https://cve.now/CVE-2010-1138.md): The virtual networking stack in VMware Workstation 7.0 before 7.0.1 build 227600, VMware Workstation 6.5.x before 6.5.4 build 246459 on Wind (no CVSS)
- [CVE-2010-1139](https://cve.now/CVE-2010-1139.md): Format string vulnerability in vmrun in VMware VIX API 1.6.x, VMware Workstation 6.5.x before 6.5.4 build 246459, VMware Player 2.5.x before (no CVSS)
- [CVE-2010-1140](https://cve.now/CVE-2010-1140.md): The USB service in VMware Workstation 7.0 before 7.0.1 build 227600 and VMware Player 3.0 before 3.0.1 build 227600 on Windows might allow h (no CVSS)
- [CVE-2010-1141](https://cve.now/CVE-2010-1141.md): VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; VMware Player 2.5.x before 2.5.4 build 246459; VMware ACE 2.5.x before 2 (no CVSS)
- [CVE-2010-1142](https://cve.now/CVE-2010-1142.md): VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; VMware Player 2.5.x before 2.5.4 build 246459; VMware ACE 2.5.x before 2 (no CVSS)
- [CVE-2010-1146](https://cve.now/CVE-2010-1146.md): The Linux kernel 2.6.33.2 and earlier, when a ReiserFS filesystem exists, does not restrict read or write access to the .reiserfs\_priv direc (no CVSS)
- [CVE-2010-1149](https://cve.now/CVE-2010-1149.md): probers/udisks-dm-export.c in udisks before 1.0.1 exports UDISKS\_DM\_TARGETS\_PARAMS information to udev even for a crypt UDISKS\_DM\_TARGETS\_TY (no CVSS)
- [CVE-2010-1152](https://cve.now/CVE-2010-1152.md): memcached.c in memcached before 1.4.3 allows remote attackers to cause a denial of service (daemon hang or crash) via a long line that trigg (no CVSS)
- [CVE-2010-1349](https://cve.now/CVE-2010-1349.md): Integer overflow in Opera 10.10 through 10.50 allows remote attackers to execute arbitrary code via a large Content-Length value, which trig (no CVSS)
- [CVE-2010-1350](https://cve.now/CVE-2010-1350.md): SQL injection vulnerability in the JP Jobs (com\_jp\_jobs) component 1.4.1 and earlier for Joomla! allows remote attackers to execute arbitrar (no CVSS)
- [CVE-2010-1351](https://cve.now/CVE-2010-1351.md): Multiple PHP remote file inclusion vulnerabilities in Nodesforum 1.033 and 1.045, when register\_globals is enabled, allow remote attackers t (no CVSS)
- [CVE-2010-1352](https://cve.now/CVE-2010-1352.md): Directory traversal vulnerability in the JOOFORGE Jutebox (com\_jukebox) component 1.0 and 1.7 for Joomla! allows remote attackers to read ar (no CVSS)
- [CVE-2010-1353](https://cve.now/CVE-2010-1353.md): Directory traversal vulnerability in the LoginBox Pro (com\_loginbox) component for Joomla! allows remote attackers to read arbitrary files v (no CVSS)
- [CVE-2010-1354](https://cve.now/CVE-2010-1354.md): Directory traversal vulnerability in the VJDEO (com\_vjdeo) component 1.0 and 1.0.1 for Joomla! allows remote attackers to read arbitrary fil (no CVSS)
- [CVE-2010-1148](https://cve.now/CVE-2010-1148.md): The cifs\_create function in fs/cifs/dir.c in the Linux kernel 2.6.33.2 and earlier allows local users to cause a denial of service (NULL poi (no CVSS)
- [CVE-2010-1347](https://cve.now/CVE-2010-1347.md): Director Agent 6.1 before 6.1.2.3 in IBM Systems Director on AIX and Linux uses incorrect permissions for the (1) diruninstall and (2) opt/i (no CVSS)
- [CVE-2010-1348](https://cve.now/CVE-2010-1348.md): Unspecified vulnerability in the login process in IBM WebSphere Portal 6.0.1.1, and 6.1.0.x before 6.1.0.3 Cumulative Fix 03, has unknown im (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-04-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.