# CVEs published 2010-04-13

66 CVEs were published on April 13, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-0086](https://cve.now/CVE-2010-0086.md): Unspecified vulnerability in the Portal component in Oracle Fusion Middleware 10.1.2.3 allows remote attackers to affect integrity via unkno (no CVSS)
- [CVE-2010-0851](https://cve.now/CVE-2010-0851.md): Unspecified vulnerability in the XML DB component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated (no CVSS)
- [CVE-2010-0852](https://cve.now/CVE-2010-0852.md): Unspecified vulnerability in the XML DB component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated (no CVSS)
- [CVE-2010-0853](https://cve.now/CVE-2010-0853.md): Unspecified vulnerability in the Oracle Internet Directory component in Oracle Database 9.2.0.8, 9.2.0.8, and DV; and Oracle Fusion Middlewa (no CVSS)
- [CVE-2010-0854](https://cve.now/CVE-2010-0854.md): Unspecified vulnerability in the Audit component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authe (no CVSS)
- [CVE-2010-0855](https://cve.now/CVE-2010-0855.md): Unspecified vulnerability in the Portal component in Oracle Fusion Middleware 10.1.2.3 allows remote attackers to affect integrity via unkno (no CVSS)
- [CVE-2010-0856](https://cve.now/CVE-2010-0856.md): Unspecified vulnerability in the Portal component in Oracle Fusion Middleware 10.1.2.3 and 10.1.4.2 allows remote attackers to affect availa (no CVSS)
- [CVE-2010-0857](https://cve.now/CVE-2010-0857.md): Unspecified vulnerability in the Oracle Workflow Cartridge component in Oracle E-Business Suite 11.5.10.2 allows remote authenticated users (no CVSS)
- [CVE-2010-0858](https://cve.now/CVE-2010-0858.md): Unspecified vulnerability in the E-Business Intelligence component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.2 allows remote au (no CVSS)
- [CVE-2010-0859](https://cve.now/CVE-2010-0859.md): Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2 ATG RUP6 allows remote att (no CVSS)
- [CVE-2010-0860](https://cve.now/CVE-2010-0860.md): Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote (no CVSS)
- [CVE-2010-0861](https://cve.now/CVE-2010-0861.md): Unspecified vulnerability in the Oracle HRMS (Self Service) component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.2 allows remote (no CVSS)
- [CVE-2010-0862](https://cve.now/CVE-2010-0862.md): Unspecified vulnerability in the Retail - Oracle Retail Markdown Optimization component in Oracle Industry Product Suite 13.1 allows remote (no CVSS)
- [CVE-2010-0863](https://cve.now/CVE-2010-0863.md): Unspecified vulnerability in the Retail - Oracle Retail Plan In-Season component in Oracle Industry Product Suite 12.2 allows remote attacke (no CVSS)
- [CVE-2010-0864](https://cve.now/CVE-2010-0864.md): Unspecified vulnerability in the Retail - Oracle Retail Place In-Season component in Oracle Industry Product Suite 12.2 allows remote attack (no CVSS)
- [CVE-2010-0865](https://cve.now/CVE-2010-0865.md): Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle E-Business Suite 6.1.1.0 allows remote attacke (no CVSS)
- [CVE-2010-0866](https://cve.now/CVE-2010-0866.md): Unspecified vulnerability in the JavaVM component in Oracle Database 11.1.0.7 and 11.2.0.1 allows remote authenticated users to affect confi (no CVSS)
- [CVE-2010-0867](https://cve.now/CVE-2010-0867.md): Unspecified vulnerability in the JavaVM component in Oracle Database 10.2.0.4, 11.1.0.7, and 11.2.0.1.0 allows remote authenticated users to (no CVSS)
- [CVE-2010-0868](https://cve.now/CVE-2010-0868.md): Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.2 allows remote attackers to (no CVSS)
- [CVE-2010-0869](https://cve.now/CVE-2010-0869.md): Unspecified vulnerability in the Oracle Transportation Management component in Oracle E-Business Suite 5.5.05.07, 5.5.06.00, and 6.0.03 allo (no CVSS)
- [CVE-2010-0870](https://cve.now/CVE-2010-0870.md): Unspecified vulnerability in the Change Data Capture component in Oracle Database 9.2.0.8 and 9.2.0.8DV allows remote authenticated users to (no CVSS)
- [CVE-2010-0871](https://cve.now/CVE-2010-0871.md): Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.2 allows (no CVSS)
- [CVE-2010-0872](https://cve.now/CVE-2010-0872.md): Unspecified vulnerability in the Oracle Internet Directory component in Oracle Fusion Middleware 10.1.2.3 and 10.1.4.3 allows remote attacke (no CVSS)
- [CVE-2010-0874](https://cve.now/CVE-2010-0874.md): Unspecified vulnerability in the Communications - Oracle Communications Unified Inventory Management component in Oracle Industry Product Su (no CVSS)
- [CVE-2010-0875](https://cve.now/CVE-2010-0875.md): Unspecified vulnerability in the Life Sciences - Oracle Thesaurus Management System component in Oracle Industry Product Suite 4.5.2, 4.6, a (no CVSS)
- [CVE-2010-0876](https://cve.now/CVE-2010-0876.md): Unspecified vulnerability in the Life Sciences - Oracle Clinical Remote Data Capture Option component in Oracle Industry Product Suite 4.5.3 (no CVSS)
- [CVE-2010-0877](https://cve.now/CVE-2010-0877.md): Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.49.26 and 8.50.07 allo (no CVSS)
- [CVE-2010-0878](https://cve.now/CVE-2010-0878.md): Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.49.26 and 8.50.07 allo (no CVSS)
- [CVE-2010-0879](https://cve.now/CVE-2010-0879.md): Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.49.26 and 8.50.07 allo (no CVSS)
- [CVE-2010-0880](https://cve.now/CVE-2010-0880.md): Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.49.26 and 8.50.07 allo (no CVSS)
- [CVE-2010-0882](https://cve.now/CVE-2010-0882.md): Unspecified vulnerability in the Solaris component in Oracle Sun Product Suite 10 and OpenSolaris snv\_134 allows local users to affect confi (no CVSS)
- [CVE-2010-0883](https://cve.now/CVE-2010-0883.md): Unspecified vulnerability in the Sun Cluster component in Oracle Sun Product Suite 3.1 and 3.2 allows local users to affect confidentiality (no CVSS)
- [CVE-2010-0884](https://cve.now/CVE-2010-0884.md): Unspecified vulnerability in the Sun Cluster component in Oracle Sun Product Suite 3.1 and 3.2 allows local users to affect confidentiality (no CVSS)
- [CVE-2010-0885](https://cve.now/CVE-2010-0885.md): Unspecified vulnerability in the Sun Java System Communications Express component in Oracle Sun Product Suite 6 2005Q4 (6.2) and and 6.3 all (no CVSS)
- [CVE-2010-0888](https://cve.now/CVE-2010-0888.md): Unspecified vulnerability in the Sun Ray Server Software component in Oracle Sun Product Suite 4.0, 4.1, and 4.2 allows remote attackers to (no CVSS)
- [CVE-2010-0889](https://cve.now/CVE-2010-0889.md): Unspecified vulnerability in the Solaris component in Oracle Sun Product Suite OpenSolaris snv\_68 through snv\_128 allows local users to affe (no CVSS)
- [CVE-2010-0890](https://cve.now/CVE-2010-0890.md): Unspecified vulnerability in the Solaris component in Oracle Sun Product Suite 10 and OpenSolaris snv\_01 through snv\_98 allows local users t (no CVSS)
- [CVE-2010-0891](https://cve.now/CVE-2010-0891.md): Unspecified vulnerability in the Sun Management Center component in Oracle Sun Product Suite 3.6.1 and 4.0 allows remote attackers to affect (no CVSS)
- [CVE-2010-0893](https://cve.now/CVE-2010-0893.md): Unspecified vulnerability in the Sun Convergence component in Oracle Sun Product Suite 1.0 allows remote attackers to affect confidentiality (no CVSS)
- [CVE-2010-0894](https://cve.now/CVE-2010-0894.md): Unspecified vulnerability in the Sun Java System Access Manager component in Oracle Sun Product Suite 7.1, 7 2005Q4, and OpenSSO Enterprise (no CVSS)
- [CVE-2010-0895](https://cve.now/CVE-2010-0895.md): Unspecified vulnerability in the Solaris component in Oracle Sun Product Suite OpenSolaris snv\_119 allows local users to affect integrity an (no CVSS)
- [CVE-2010-0896](https://cve.now/CVE-2010-0896.md): Unspecified vulnerability in the Sun Convergence component in Oracle Sun Product Suite 1.0 allows remote attackers to affect confidentiality (no CVSS)
- [CVE-2010-0897](https://cve.now/CVE-2010-0897.md): Unspecified vulnerability in the Sun Java System Directory Server component in Oracle Sun Product Suite 5.2, 6.0, 6.1, 6.2, 6.3, and 6.3.1 a (no CVSS)
- [CVE-2010-1364](https://cve.now/CVE-2010-1364.md): SQL injection vulnerability in index.php in Uiga Personal Portal, as downloaded on 20100301, allows remote attackers to execute arbitrary SQ (no CVSS)
- [CVE-2010-1365](https://cve.now/CVE-2010-1365.md): SQL injection vulnerability in index.php in Uiga Fan Club, as downloaded on 20100310, allows remote attackers to execute arbitrary SQL comma (no CVSS)
- [CVE-2010-1366](https://cve.now/CVE-2010-1366.md): Multiple SQL injection vulnerabilities in admin/admin\_login.php in Uiga Fan Club 1.0 and earlier allow remote attackers to execute arbitrary (no CVSS)
- [CVE-2010-1367](https://cve.now/CVE-2010-1367.md): Multiple cross-site scripting (XSS) vulnerabilities in admin/admin\_login.php in Uiga Fan Club, as downloaded on 20100310, allow remote attac (no CVSS)
- [CVE-2010-1368](https://cve.now/CVE-2010-1368.md): SQL injection vulnerability in index.php in GameScript (GS) 3.0 allows remote attackers to execute arbitrary SQL commands via the id paramet (no CVSS)
- [CVE-2010-1369](https://cve.now/CVE-2010-1369.md): SQL injection vulnerability in signup.asp in Pre Classified Listings ASP allows remote attackers to execute arbitrary SQL commands via the e (no CVSS)
- [CVE-2010-1370](https://cve.now/CVE-2010-1370.md): SQL injection vulnerability in detailad.asp in Pre Classified Listings ASP allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2010-1371](https://cve.now/CVE-2010-1371.md): Cross-site scripting (XSS) vulnerability in signup.asp in Pre Classified Listings ASP allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2010-1372](https://cve.now/CVE-2010-1372.md): SQL injection vulnerability in the HD FLV Player (com\_hdflvplayer) component 1.3 for Joomla! allows remote attackers to execute arbitrary SQ (no CVSS)
- [CVE-2009-4765](https://cve.now/CVE-2009-4765.md): CNR Hikaye Portal 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to dow (no CVSS)
- [CVE-2009-4766](https://cve.now/CVE-2009-4766.md): YP Portal MS-Pro Surumu (aka MS-Pro Portal Scripti) 1.0 and 1.2 stores sensitive information under the web root with insufficient access con (no CVSS)
- [CVE-2010-1357](https://cve.now/CVE-2010-1357.md): Cross-site scripting (XSS) vulnerability in editors/logindialogue.php in SBD Directory Software 4.0 allows remote attackers to inject arbitr (no CVSS)
- [CVE-2010-1358](https://cve.now/CVE-2010-1358.md): Cross-site scripting (XSS) vulnerability in the Bibliography (Biblio) module 5.x through 5.x-1.17 and 6.x through 6.x-1.9 for Drupal allows (no CVSS)
- [CVE-2010-1359](https://cve.now/CVE-2010-1359.md): SQL injection vulnerability in bluegate\_seo.inc.php in the Direct URL module for xt:Commerce, when magic\_quotes\_gpc is disabled, allows remo (no CVSS)
- [CVE-2010-1360](https://cve.now/CVE-2010-1360.md): Multiple PHP remote file inclusion vulnerabilities in FAQEngine 4.24.00 allow remote attackers to execute arbitrary PHP code via a URL in th (no CVSS)
- [CVE-2010-1361](https://cve.now/CVE-2010-1361.md): Cross-site scripting (XSS) vulnerability in shop/USER\_ARTIKEL\_HANDLING\_AUFRUF.php in PHPepperShop 2.5 allows remote attackers to inject arbi (no CVSS)
- [CVE-2010-1362](https://cve.now/CVE-2010-1362.md): Cross-site scripting (XSS) vulnerability in the Own Term module 6.x-1.0 for Drupal allows remote authenticated users, with "create additiona (no CVSS)
- [CVE-2010-1363](https://cve.now/CVE-2010-1363.md): SQL injection vulnerability in the JProjects (com\_j-projects) component for Joomla! allows remote attackers to execute arbitrary SQL command (no CVSS)
- [CVE-2009-4509](https://cve.now/CVE-2009-4509.md): The administrative web console on the TANDBERG Video Communication Server (VCS) before X4.3 uses predictable session cookies in (1) tandberg (no CVSS)
- [CVE-2009-4510](https://cve.now/CVE-2009-4510.md): The SSH service on the TANDBERG Video Communication Server (VCS) before X5.1 uses a fixed DSA key, which makes it easier for remote attacker (no CVSS)
- [CVE-2009-4511](https://cve.now/CVE-2009-4511.md): Multiple directory traversal vulnerabilities in the web administration interface on the TANDBERG Video Communication Server (VCS) before X5. (no CVSS)
- [CVE-2010-1355](https://cve.now/CVE-2010-1355.md): Cross-site scripting (XSS) vulnerability on the TANDBERG Video Communication Server (VCS) before X5.0 allows remote attackers to inject arbi (no CVSS)
- [CVE-2010-1356](https://cve.now/CVE-2010-1356.md): Unspecified vulnerability on the TANDBERG Video Communication Server (VCS) before X5.0 allows remote attackers to execute arbitrary code via (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-04-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.