# CVEs published 2010-04-14 40 CVEs were published on April 14, 2010: 0 critical, 0 high. Days are UTC. - [CVE-2010-0073](https://cve.now/CVE-2010-0073.md): Unspecified vulnerability in the WebLogic Server in Oracle WebLogic Server 7.0 SP7, 8.1 SP6, 9.0, 9.1, 9.2 MP3, 10.0 MP2, and 10.3.2 allows (no CVSS) - [CVE-2010-0881](https://cve.now/CVE-2010-0881.md): Unspecified vulnerability in the User Interface Components in Oracle Collaboration Suite 10.1.2.4 allows remote attackers to affect integrit (no CVSS) - [CVE-2010-0024](https://cve.now/CVE-2010-0024.md): The SMTP component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Server 2008 Gold, SP2, and R2, and Exchange Server 20 (no CVSS) - [CVE-2010-0025](https://cve.now/CVE-2010-0025.md): The SMTP component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Server 2008 Gold, SP2, and R2, and Exchange Server 20 (no CVSS) - [CVE-2010-0190](https://cve.now/CVE-2010-0190.md): Cross-site scripting (XSS) vulnerability in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows (no CVSS) - [CVE-2010-0191](https://cve.now/CVE-2010-0191.md): Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allow attackers to execute arbitrary code via unspe (no CVSS) - [CVE-2010-0192](https://cve.now/CVE-2010-0192.md): Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows attackers to ca (no CVSS) - [CVE-2010-0193](https://cve.now/CVE-2010-0193.md): Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows attackers to ca (no CVSS) - [CVE-2010-0194](https://cve.now/CVE-2010-0194.md): Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allow attackers to cause a denial of service (memor (no CVSS) - [CVE-2010-0195](https://cve.now/CVE-2010-0195.md): Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, do not properly handle fonts, which allows attacker (no CVSS) - [CVE-2010-0196](https://cve.now/CVE-2010-0196.md): Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows attackers to ca (no CVSS) - [CVE-2010-0197](https://cve.now/CVE-2010-0197.md): Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allow attackers to cause a denial of service (memor (no CVSS) - [CVE-2010-0198](https://cve.now/CVE-2010-0198.md): Buffer overflow in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows attackers to execute arbi (no CVSS) - [CVE-2010-0199](https://cve.now/CVE-2010-0199.md): Buffer overflow in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows attackers to execute arbi (no CVSS) - [CVE-2010-0201](https://cve.now/CVE-2010-0201.md): Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allow attackers to cause a denial of service (memor (no CVSS) - [CVE-2010-0202](https://cve.now/CVE-2010-0202.md): Buffer overflow in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows attackers to execute arbi (no CVSS) - [CVE-2010-0203](https://cve.now/CVE-2010-0203.md): Buffer overflow in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows attackers to execute arbi (no CVSS) - [CVE-2010-0204](https://cve.now/CVE-2010-0204.md): Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allow attackers to cause a denial of service (memor (no CVSS) - [CVE-2010-0234](https://cve.now/CVE-2010-0234.md): The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 does not p (no CVSS) - [CVE-2010-0235](https://cve.now/CVE-2010-0235.md): The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Vista Gold does not perform the expected validation before cr (no CVSS) - [CVE-2010-0236](https://cve.now/CVE-2010-0236.md): The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Vista Gold does not properly allocate memory for the destinat (no CVSS) - [CVE-2010-0237](https://cve.now/CVE-2010-0237.md): The kernel in Microsoft Windows 2000 SP4 and XP SP2 and SP3 allows local users to gain privileges by creating a symbolic link from an untrus (no CVSS) - [CVE-2010-0238](https://cve.now/CVE-2010-0238.md): Unspecified vulnerability in registry-key validation in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Vista (no CVSS) - [CVE-2010-0254](https://cve.now/CVE-2010-0254.md): Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 and SP2 does not properly validate attributes in Visio files, which allows remote at (no CVSS) - [CVE-2010-0256](https://cve.now/CVE-2010-0256.md): Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 and SP2 does not properly calculate unspecified indexes associated with Visio files, (no CVSS) - [CVE-2010-0268](https://cve.now/CVE-2010-0268.md): Unspecified vulnerability in the Windows Media Player ActiveX control in Windows Media Player (WMP) 9 on Microsoft Windows 2000 SP4 and XP S (no CVSS) - [CVE-2010-0269](https://cve.now/CVE-2010-0269.md): The SMB client in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Ser (no CVSS) - [CVE-2010-0270](https://cve.now/CVE-2010-0270.md): The SMB client in Microsoft Windows Server 2008 R2 and Windows 7 does not properly validate fields in SMB transaction responses, which allow (no CVSS) - [CVE-2010-0476](https://cve.now/CVE-2010-0476.md): The SMB client in Microsoft Windows Server 2003 SP2, Vista Gold, SP1, and SP2, and Windows Server 2008 Gold and SP2 allows remote SMB server (no CVSS) - [CVE-2010-0477](https://cve.now/CVE-2010-0477.md): The SMB client in Microsoft Windows Server 2008 R2 and Windows 7 does not properly handle (1) SMBv1 and (2) SMBv2 response packets, which al (no CVSS) - [CVE-2010-0478](https://cve.now/CVE-2010-0478.md): Stack-based buffer overflow in nsum.exe in the Windows Media Unicast Service in Media Services for Microsoft Windows 2000 Server SP4 allows (no CVSS) - [CVE-2010-0479](https://cve.now/CVE-2010-0479.md): Buffer overflow in Microsoft Office Publisher 2002 SP3, 2003 SP3, and 2007 SP1 and SP2 allows remote attackers to execute arbitrary code via (no CVSS) - [CVE-2010-0480](https://cve.now/CVE-2010-0480.md): Multiple stack-based buffer overflows in the MPEG Layer-3 audio codecs in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista (no CVSS) - [CVE-2010-0481](https://cve.now/CVE-2010-0481.md): The kernel in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly translate a (CVSS 5.5) - [CVE-2010-0482](https://cve.now/CVE-2010-0482.md): The kernel in Microsoft Windows Server 2008 R2 and Windows 7 does not properly validate relocation sections of image files, which allows loc (no CVSS) - [CVE-2010-0486](https://cve.now/CVE-2010-0486.md): The WinVerifyTrust function in Authenticode Signature Verification 5.1, 6.0, and 6.1 in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, (no CVSS) - [CVE-2010-0487](https://cve.now/CVE-2010-0487.md): The Authenticode Signature verification functionality in cabview.dll in Cabinet File Viewer Shell Extension 5.1, 6.0, and 6.1 in Microsoft W (no CVSS) - [CVE-2010-0810](https://cve.now/CVE-2010-0810.md): The kernel in Microsoft Windows Vista Gold, SP1, and SP2, and Windows Server 2008 Gold and SP2, does not properly handle unspecified excepti (no CVSS) - [CVE-2010-0812](https://cve.now/CVE-2010-0812.md): Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allow remote attackers to bypass i (no CVSS) - [CVE-2010-1316](https://cve.now/CVE-2010-1316.md): Multiple stack-based buffer overflows in Tembria Server Monitor before 5.6.1 allow remote attackers to cause a denial of service (daemon cra (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2010-04-14 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.