Skip to content
OpenAdvisories

Archive

7 January 2010

Vulnerabilities first published on this day (UTC), newest first.

← December 2009 2010 / January /7 February 2010 →
  1. 1 
  2. 2 
  3. 3 
  4. 428
  5. 57
  6. 615
  7. 720
  8. 88
  9. 96
  10. 10 
  11. 11 
  12. 1214
  13. 1350
  14. 1413
  15. 1537
  16. 16 
  17. 17 
  18. 1816
  19. 197
  20. 2011
  21. 2119
  22. 2212
  23. 23 
  24. 24 
  25. 2518
  26. 266
  27. 272
  28. 2822
  29. 298
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

20 results · Feed

  • Unscored —
    CVE-2009-3742

    Cross-site scripting (XSS) vulnerability in Liferay Portal before 5.3.0 allows remote attackers to inject arbitrary web…

  • Unscored —
    CVE-2010-0226

    SanDisk Cruzer Enterprise USB flash drives do not prevent password replay attacks, which allows physically proximate at…

  • Unscored —
    CVE-2010-0220

    The nsObserverList::FillObserverArray function in xpcom/ds/nsObserverList.cpp in Mozilla Firefox before 3.5.7 allows re…

  • Unscored —
    CVE-2010-0228

    Verbatim Corporate Secure and Corporate Secure FIPS Edition USB flash drives use a fixed 256-bit key for obtaining acce…

  • Unscored —
    CVE-2010-0227

    Verbatim Corporate Secure and Corporate Secure FIPS Edition USB flash drives validate passwords with a program running …

  • Unscored —
    CVE-2010-0224

    SanDisk Cruzer Enterprise USB flash drives validate passwords with a program running on the host computer rather than t…

  • Unscored —
    CVE-2010-0229

    Verbatim Corporate Secure and Corporate Secure FIPS Edition USB flash drives do not prevent password replay attacks, wh…

  • Unscored —
    CVE-2010-0223

    Kingston DataTraveler BlackBox (DTBB), DataTraveler Secure Privacy Edition (DTSP), and DataTraveler Elite Privacy Editi…

  • Unscored —
    CVE-2010-0225

    SanDisk Cruzer Enterprise USB flash drives use a fixed 256-bit key for obtaining access to the cleartext drive contents…

  • Unscored —
    CVE-2010-0222

    Kingston DataTraveler BlackBox (DTBB), DataTraveler Secure Privacy Edition (DTSP), and DataTraveler Elite Privacy Editi…

  • Unscored —
    CVE-2010-0221

    Kingston DataTraveler BlackBox (DTBB), DataTraveler Secure Privacy Edition (DTSP), and DataTraveler Elite Privacy Editi…

  • Unscored —
    CVE-2009-4497 Public exploit

    Cross-site scripting (XSS) vulnerability in LXR Cross Referencer 0.9.5 and 0.9.6 allows remote attackers to inject arbi…

  • Unscored —
    CVE-2009-4586

    Multiple cross-site scripting (XSS) vulnerabilities in index.html in Wowd client before 1.3.1 allow remote attackers to…

  • Unscored —
    CVE-2009-4593

    The bftpdutmp_log function in bftpdutmp.c in Bftpd before 2.4 does not place a '\0' character at the end of the string …

  • Unscored —
    CVE-2009-4587 Public exploit

    Cherokee Web Server 0.5.4 allows remote attackers to cause a denial of service (daemon crash) via an MS-DOS reserved wo…

  • Unscored —
    CVE-2009-4590

    Cross-site scripting (XSS) vulnerability in base_local_rules.php in Basic Analysis and Security Engine (BASE) before 1.…

  • Unscored —
    CVE-2009-4589

    Cross-site scripting (XSS) vulnerability in the Special:Block implementation in the getContribsLink function in Special…

    mediawiki Debian
  • Unscored —
    CVE-2009-4592

    Unspecified vulnerability in base_local_rules.php in Basic Analysis and Security Engine (BASE) before 1.4.4 allows remo…

  • Unscored —
    CVE-2009-4591

    SQL injection vulnerability in Basic Analysis and Security Engine (BASE) before 1.4.4 allows remote attackers to execut…

  • Unscored —
    CVE-2009-4588 Public exploit EPSS 32%

    Heap-based buffer overflow in the WindsPlayerIE.View.1 ActiveX control in WindsPly.ocx 3.5.0.0 Beta, 3.0.0.5, and earli…