Skip to content
OpenAdvisories

Archive

January 2010

Vulnerabilities first published in this month (UTC), newest first.

← December 2009 2010 / January February 2010 →
  1. 1 
  2. 2 
  3. 3 
  4. 428
  5. 57
  6. 615
  7. 720
  8. 88
  9. 96
  10. 10 
  11. 11 
  12. 1214
  13. 1350
  14. 1413
  15. 1537
  16. 16 
  17. 17 
  18. 1816
  19. 197
  20. 2011
  21. 2119
  22. 2212
  23. 23 
  24. 24 
  25. 2518
  26. 266
  27. 272
  28. 2822
  29. 298
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

319 results · Feed

  • Unscored —
    CVE-2010-0464

    Roundcube 0.3.1 and earlier does not request that the web browser avoid DNS prefetching of domain names contained in e-…

    roundcube Debian
  • Unscored —
    CVE-2010-0001

    Integer underflow in the unlzw function in unlzw.c in gzip before 1.4 on 64-bit platforms, as used in ncompress and pro…

    gzip ncompress Debian
  • Unscored —
    CVE-2010-0463

    Horde IMP 4.3.6 and earlier does not request that the web browser avoid DNS prefetching of domain names contained in e-…

  • Unscored —
    CVE-2010-0005

    query.py in the query interface in ViewVC before 1.1.3 does not reject configurations that specify an unsupported autho…

  • Unscored —
    CVE-2010-0004

    ViewVC before 1.1.3 composes the root listing view without using the authorizer for each root, which might allow remote…

  • Unscored —
    CVE-2009-4629

    Mozilla Necko, as used in Thunderbird 3.0.1, SeaMonkey, and other applications, performs DNS prefetching even when the …

  • Unscored —
    CVE-2009-4630

    Mozilla Necko, as used in Firefox, SeaMonkey, and other applications, performs DNS prefetching of domain names containe…

  • Unscored —
    CVE-2009-2624

    The huft_build function in inflate.c in gzip before 1.3.13 creates a hufts (aka huffman) table that is too small, which…

    gzip Debian
  • Unscored —
    CVE-2004-2766

    Webmail in Sun ONE Messaging Server 6.1 and iPlanet Messaging Server 5.2 before 5.2hf2.02 allows remote attackers to ob…

  • Unscored —
    CVE-2004-2765

    Cross-site scripting (XSS) vulnerability in Webmail in Sun ONE Messaging Server 6.1 and iPlanet Messaging Server 5.2 be…

  • Unscored —
    CVE-2005-4885

    Unspecified vulnerability on certain Sun StorEdge 6130 (SE6130) Controller Arrays allows remote attackers to delete dat…

  • Unscored —
    CVE-2010-0455

    Cross-site scripting (XSS) vulnerability in forum/viewtopic.php in PunBB 1.3 allows remote attackers to inject arbitrar…

  • Unscored —
    CVE-2010-0462 Public exploit

    Heap-based buffer overflow in IBM DB2 9.1 before FP9, 9.5 before FP6, and 9.7 before FP2 allows remote authenticated us…

  • Unscored —
    CVE-2010-0140

    Multiple unspecified vulnerabilities in the web server in Cisco Unified MeetingPlace 7 before 7.0(2.3) hotfix 5F, 6 bef…

  • Unscored —
    CVE-2010-0142

    MeetingTime in Cisco Unified MeetingPlace 6 before MR5, and possibly 5, allows remote authenticated users to gain privi…

  • Unscored —
    CVE-2010-0454

    SQL injection vulnerability in cgi/cgilua.exe/sys/start.htm in Publique! 2.3 allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2010-0141

    MeetingTime in Cisco Unified MeetingPlace 6 before MR5, and possibly 5, allows remote attackers to discover usernames, …

  • Unscored —
    CVE-2010-0459 Public exploit

    SQL injection vulnerability in the Mochigames (com_mochigames) component 0.51 and possibly other versions for Joomla! a…

  • Unscored —
    CVE-2010-0461 Public exploit

    SQL injection vulnerability in the casino (com_casino) component 1.0 for Joomla! allows remote attackers to execute arb…

  • Unscored —
    CVE-2010-0456 Public exploit

    SQL injection vulnerability in the indianpulse Game Server (com_gameserver) component 1.2 for Joomla! allows remote att…

  • Unscored —
    CVE-2010-0457 Public exploit

    SQL injection vulnerability in home.php in magic-portal 2.1 allows remote attackers to execute arbitrary SQL commands v…

  • Unscored —
    CVE-2010-0460

    Multiple cross-site scripting (XSS) vulnerabilities in staff/index.php in Kayako SupportSuite 3.60.04 and earlier allow…

  • Unscored —
    CVE-2010-0458 Public exploit

    Multiple SQL injection vulnerabilities in NetArt Media Blog System 1.5 allow remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2010-0139

    Cisco Unified MeetingPlace 7 before 7.0(2.3) hotfix 5F, 6 before 6.0.639.2, and possibly 5 does not properly validate S…

  • Unscored —
    CVE-2009-4183

    Unspecified vulnerability in HP OpenView Storage Data Protector 6.00 and 6.10 allows local users to obtain unspecified …

  • Medium —
    CVE-2009-2901

    Improper Authentication in Apache Tomcat

    The autodeployment process in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20, when autoDeploy is enabled, deploys appBase files that remain from a failed undeploy, which might allow remote attackers to bypass intended authentication requirements …

    org.apache.tomcat:tomcat Maven
  • Medium —
    CVE-2009-2902 EPSS 11%

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Apache Tomcat

    Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to delete work-directory files via directory traversal sequences in a WAR filename, as demonstrated by the ...war filename.

    org.apache.tomcat:tomcat Maven
  • Medium —
    CVE-2009-2693

    Apache Tomcat Directory Traversal vulnerability

    Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in an entry in a WAR file, as demonstrated by a ../../bin/catalina.bat entry.

    org.apache.tomcat:tomcat Maven
  • Unscored —
    CVE-2003-1576

    Buffer overflow in pamverifier in Change Manager (CM) 1.0 for Sun Management Center (SunMC) 3.0 on Solaris 8 and 9 on t…

  • Unscored —
    CVE-2003-1575

    VERITAS File System (VxFS) 3.3.3, 3.4, and 3.5 before MP1 Rolling Patch 02 for Sun Solaris 2.5.1 through 9 does not pro…

  • Unscored —
    CVE-2009-4272 EPSS 11%

    A certain Red Hat patch for net/ipv4/route.c in the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5 allows rem…

  • Unscored —
    CVE-2009-3556

    A certain Red Hat configuration step for the qla2xxx driver in the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHE…

  • Unscored —
    CVE-2010-0003

    The print_fatal_signal function in kernel/signal.c in the Linux kernel before 2.6.32.4 on the i386 platform, when print…

  • Unscored —
    CVE-2010-0006

    The ipv6_hop_jumbo function in net/ipv6/exthdrs.c in the Linux kernel before 2.6.32.4, when network namespaces are enab…

  • Unscored —
    CVE-2010-0390 Public exploit

    Unrestricted file upload vulnerability in maxImageUpload/index.php in PHP F1 Max's Image Uploader 1.0, when Apache is n…

  • Unscored —
    CVE-2010-0391

    Multiple stack-based buffer overflows in Embarcadero Technologies InterBase SMP 2009 9.0.3.437 allow remote attackers t…

  • Unscored —
    CVE-2010-0392

    Stack-based buffer overflow in vpnconf.exe in TheGreenBow IPSec VPN Client 4.51.001, 4.65.003, and possibly other versi…

  • Unscored —
    CVE-2009-4273 Public exploit EPSS 18%

    stap-server in SystemTap before 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in s…

    systemtap Debian
  • Unscored —
    CVE-2005-4884

    Unspecified vulnerability in the Oracle OLAP component in Oracle Database Server 10.1.0.4 (10g) allows remote authentic…

  • Unscored —
    CVE-2008-7253

    The default configuration of the web server in IBM Lotus Domino Server, possibly 6.0 through 8.0, enables the HTTP TRAC…