# CVEs published 2010-04-15 10 CVEs were published on April 15, 2010: 0 critical, 0 high. Days are UTC. - [CVE-2010-1423](https://cve.now/CVE-2010-1423.md): Argument injection vulnerability in the URI handler in (a) Java NPAPI plugin and (b) Java Deployment Toolkit in Java 6 Update 10, 19, and ot (no CVSS) - [CVE-2010-1424](https://cve.now/CVE-2010-1424.md): Unspecified vulnerability in JustSystems Ichitaro and Ichitaro Government 2006 through 2010 allows user-assisted remote attackers to execute (no CVSS) - [CVE-2010-1425](https://cve.now/CVE-2010-1425.md): F-Secure Internet Security 2010 and earlier; Anti-Virus for Microsoft Exchange 9 and earlier, and for MIMEsweeper 5.61 and earlier; Internet (no CVSS) - [CVE-2010-1426](https://cve.now/CVE-2010-1426.md): SQL injection vulnerability in MODx Evolution before 1.0.3 allows remote attackers to execute arbitrary SQL commands via unknown vectors rel (no CVSS) - [CVE-2010-1427](https://cve.now/CVE-2010-1427.md): Cross-site scripting (XSS) vulnerability in the SearchHighlight plugin in MODx Evolution before 1.0.3 allows remote attackers to inject arbi (no CVSS) - [CVE-2010-0994](https://cve.now/CVE-2010-0994.md): Multiple buffer overflows in src/vl/vlDAT.cpp in Visualization Library 2009.08.812 allow user-assisted remote attackers to execute arbitrary (no CVSS) - [CVE-2010-0432](https://cve.now/CVE-2010-0432.md): Multiple cross-site scripting (XSS) vulnerabilities in the Apache Open For Business Project (aka OFBiz) 09.04 and earlier, as used in Openta (no CVSS) - [CVE-2010-0436](https://cve.now/CVE-2010-0436.md): Race condition in backend/ctrl.c in KDM in KDE Software Compilation (SC) 2.2.0 through 4.4.2 allows local users to change the permissions of (no CVSS) - [CVE-2010-0589](https://cve.now/CVE-2010-0589.md): The Web Install ActiveX control (CSDWebInstaller) in Cisco Secure Desktop (CSD) before 3.5.841 does not properly verify the signatures of do (no CVSS) - [CVE-2010-1329](https://cve.now/CVE-2010-1329.md): Imperva SecureSphere Web Application Firewall and Database Firewall 5.0.0.5082 through 7.0.0.7078 allow remote attackers to bypass intrusion (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2010-04-15 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.