# CVEs published 2010-04-16

14 CVEs were published on April 16, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-1155](https://cve.now/CVE-2010-1155.md): Irssi before 0.8.15, when SSL is used, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) fiel (no CVSS)
- [CVE-2010-1156](https://cve.now/CVE-2010-1156.md): core/nicklist.c in Irssi before 0.8.15 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) (no CVSS)
- [CVE-2010-1160](https://cve.now/CVE-2010-1160.md): GNU nano before 2.2.4 does not verify whether a file has been changed before it is overwritten in a file-save operation, which allows local (no CVSS)
- [CVE-2010-1161](https://cve.now/CVE-2010-1161.md): Race condition in GNU nano before 2.2.4, when run by root to edit a file that is not owned by root, allows local user-assisted attackers to (no CVSS)
- [CVE-2010-1163](https://cve.now/CVE-2010-1163.md): The command matching functionality in sudo 1.6.8 through 1.7.2p5 does not properly handle when a file in the current working directory has t (no CVSS)
- [CVE-2010-1461](https://cve.now/CVE-2010-1461.md): Directory traversal vulnerability in the Photo Battle (com\_photobattle) component 1.0.1 for Joomla! allows remote attackers to read arbitrar (no CVSS)
- [CVE-2010-1462](https://cve.now/CVE-2010-1462.md): Directory traversal vulnerability in WebAsyst Shop-Script FREE has unknown impact and attack vectors via the sub parameter. (no CVSS)
- [CVE-2010-1463](https://cve.now/CVE-2010-1463.md): Multiple SQL injection vulnerabilities in WebAsyst Shop-Script FREE allow attackers to execute arbitrary SQL commands via the (1) add2cart, (no CVSS)
- [CVE-2010-1464](https://cve.now/CVE-2010-1464.md): Multiple cross-site scripting (XSS) vulnerabilities in WebAsyst Shop-Script FREE allow remote attackers to inject arbitrary web script or HT (no CVSS)
- [CVE-2010-1465](https://cve.now/CVE-2010-1465.md): Stack-based buffer overflow in Trellian FTP client 3.01, including 3.1.3.1789, allows remote attackers to execute arbitrary code via a long (no CVSS)
- [CVE-2010-1466](https://cve.now/CVE-2010-1466.md): Directory traversal vulnerability in scr/soustab.php in openUrgence Vaccin 1.03 allows remote attackers to read arbitrary files via the dsn\[ (no CVSS)
- [CVE-2010-1467](https://cve.now/CVE-2010-1467.md): Multiple PHP remote file inclusion vulnerabilities in openUrgence Vaccin 1.03 allow remote attackers to execute arbitrary PHP code via a URL (no CVSS)
- [CVE-2010-0739](https://cve.now/CVE-2010-0739.md): Integer overflow in the predospecial function in dospecial.c in dvips in (1) TeX Live and (2) teTeX might allow user-assisted remote attacke (no CVSS)
- [CVE-2010-1460](https://cve.now/CVE-2010-1460.md): The IBM BladeCenter with Advanced Management Module (AMM) firmware before bpet50g does not properly perform interrupt sharing for USB and iS (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-04-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.