# CVEs published 2010-04-21

19 CVEs were published on April 21, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2009-4774](https://cve.now/CVE-2009-4774.md): Unspecified vulnerability in Sun Solaris 10 and OpenSolaris snv\_49 through snv\_117, when 64bit mode is used on the Intel x86 platform and a (no CVSS)
- [CVE-2009-4775](https://cve.now/CVE-2009-4775.md): Format string vulnerability in Ipswitch WS\_FTP Professional 12 before 12.2 allows remote attackers to cause a denial of service (crash) via (no CVSS)
- [CVE-2009-4776](https://cve.now/CVE-2009-4776.md): Buffer overflow in Hitachi Cosminexus V4 through V8, Processing Kit for XML, and Developer's Kit for Java, as used in products such as uCosm (no CVSS)
- [CVE-2009-4777](https://cve.now/CVE-2009-4777.md): Unspecified vulnerability in multiple versions of Hitachi JP1/Automatic Job Management System 2 - View, JP1/Integrated Management - View, an (no CVSS)
- [CVE-2009-4778](https://cve.now/CVE-2009-4778.md): Multiple unspecified vulnerabilities in the PDF distiller in the Attachment Service component in Research In Motion (RIM) BlackBerry Enterpr (no CVSS)
- [CVE-2009-4779](https://cve.now/CVE-2009-4779.md): Multiple PHP remote file inclusion vulnerabilities in NukeHall 0.3 and earlier allow remote attackers to execute arbitrary PHP code via a UR (no CVSS)
- [CVE-2009-4780](https://cve.now/CVE-2009-4780.md): Multiple cross-site scripting (XSS) vulnerabilities in index.php in phpMyFAQ before 2.5.5 allow remote attackers to inject arbitrary web scr (no CVSS)
- [CVE-2009-4781](https://cve.now/CVE-2009-4781.md): TUKEVA Password Reminder before 1.0.0.4 uses a hard-coded password for rem.accdb, which allows local users to discover credentials via a DBI (no CVSS)
- [CVE-2009-4782](https://cve.now/CVE-2009-4782.md): Multiple cross-site scripting (XSS) vulnerabilities in Theeta CMS, possibly 0.01, allow remote attackers to inject arbitrary web script or H (no CVSS)
- [CVE-2009-4783](https://cve.now/CVE-2009-4783.md): Multiple SQL injection vulnerabilities in Theeta CMS, possibly 0.01, allow remote attackers to execute arbitrary SQL commands via the start (no CVSS)
- [CVE-2009-4784](https://cve.now/CVE-2009-4784.md): SQL injection vulnerability in the Joaktree (com\_joaktree) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL comman (no CVSS)
- [CVE-2009-4785](https://cve.now/CVE-2009-4785.md): SQL injection vulnerability in the Quick News (com\_quicknews) component for Joomla! allows remote attackers to execute arbitrary SQL command (no CVSS)
- [CVE-2009-4786](https://cve.now/CVE-2009-4786.md): Multiple cross-site scripting (XSS) vulnerabilities in Pligg before 1.0.3 allow remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2009-4787](https://cve.now/CVE-2009-4787.md): Multiple cross-site request forgery (CSRF) vulnerabilities in Pligg before 1.0.3 allow remote attackers to hijack the authentication of admi (no CVSS)
- [CVE-2009-4788](https://cve.now/CVE-2009-4788.md): Multiple open redirect vulnerabilities in Pligg 1.0.2 and earlier allow remote attackers to redirect users to arbitrary web sites and conduc (no CVSS)
- [CVE-2009-4789](https://cve.now/CVE-2009-4789.md): Multiple PHP remote file inclusion vulnerabilities in the MojoBlog component RC 0.15 for Joomla! allow remote attackers to execute arbitrary (no CVSS)
- [CVE-2010-1032](https://cve.now/CVE-2010-1032.md): Unspecified vulnerability in HP HP-UX B.11.11 allows local users to cause a denial of service via unknown vectors. (no CVSS)
- [CVE-2010-1033](https://cve.now/CVE-2010-1033.md): Multiple stack-based buffer overflows in a certain Tetradyne ActiveX control in HP Operations Manager 7.5, 8.10, and 8.16 might allow remote (no CVSS)
- [CVE-2010-1490](https://cve.now/CVE-2010-1490.md): Unspecified vulnerability in IBM Cognos 8 Business Intelligence before 8.4.1 FP1 has unknown impact and attack vectors. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-04-21
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.