Skip to content
OpenAdvisories

Archive

13 January 2010

Vulnerabilities first published on this day (UTC), newest first.

← December 2009 2010 / January /13 February 2010 →
  1. 1 
  2. 2 
  3. 3 
  4. 428
  5. 57
  6. 615
  7. 720
  8. 88
  9. 96
  10. 10 
  11. 11 
  12. 1214
  13. 1350
  14. 1413
  15. 1537
  16. 16 
  17. 17 
  18. 1816
  19. 197
  20. 2011
  21. 2119
  22. 2212
  23. 23 
  24. 24 
  25. 2518
  26. 266
  27. 272
  28. 2822
  29. 298
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

50 results · Feed

  • Unscored —
    CVE-2009-4490 Public exploit EPSS 10%

    mini_httpd 1.19 writes data to a log file without sanitizing non-printable characters, which might allow remote attacke…

    mini-httpd mini-httpd Debian Ubuntu
  • Unscored —
    CVE-2009-4612 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the WebApp JSP Snoop page in Mort Bay Jetty 6.1.x through 6.1.21…

  • Unscored —
    CVE-2009-4489 Public exploit

    header.c in Cherokee before 0.99.32 writes data to a log file without sanitizing non-printable characters, which might …

  • Unscored —
    CVE-2009-4493 Public exploit

    Orion Application Server 2.0.7 writes data to a log file without sanitizing non-printable characters, which might allow…

  • Unscored —
    CVE-2009-4494 Public exploit

    AOLserver 4.5.1 writes data to a log file without sanitizing non-printable characters, which might allow remote attacke…

    aolserver4 Ubuntu
  • Unscored —
    CVE-2009-4495 Public exploit

    Yaws 1.85 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to …

    yaws yaws Debian Ubuntu
  • Unscored —
    CVE-2009-4609

    The Dump Servlet in Mort Bay Jetty 6.x and 7.0.0 allows remote attackers to obtain sensitive information about internal…

  • Unscored —
    CVE-2009-4496 Public exploit EPSS 12%

    Boa 0.94.14rc21 writes data to a log file without sanitizing non-printable characters, which might allow remote attacke…

  • High 7.3
    CVE-2009-4611

    Improper input validation in Mort Bay Jetty

    Mort Bay Jetty 6.x through 6.1.22 and 7.0.0 writes backtrace data without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request contai…

    org.mortbay.jetty:jetty Maven
  • Critical 9.8
    CVE-2009-4488 Public exploit EPSS 13%

    Varnish 2.0.6 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers…

    varnish varnish Debian Ubuntu
  • Medium —
    CVE-2009-4492 Public exploit EPSS 16%

    WEBrick Improper Input Validation vulnerability

    WEBrick 1.3.1 in Ruby 1.8.6 through patchlevel 383, 1.8.7 through patchlevel 248, 1.8.8dev, 1.9.1 through patchlevel 376, and 1.9.2dev writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window…

    webrick RubyGems
  • Unscored —
    CVE-2009-4610 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Mort Bay Jetty 6.x and 7.0.0 allow remote attackers to inject ar…

  • Unscored —
    CVE-2009-4487 Public exploit EPSS 27%

    nginx 0.7.64 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers …

    nginx Debian
  • Unscored —
    CVE-2010-0018 EPSS 27%

    Integer overflow in the Embedded OpenType (EOT) Font Engine (t2embed.dll) in Microsoft Windows 2000 SP4; Windows XP SP2…

  • Unscored —
    CVE-2009-4212

    Multiple integer underflows in the (1) AES and (2) RC4 decryption functionality in the crypto library in MIT Kerberos 5…

    krb5 Debian
  • Unscored —
    CVE-2009-3959 EPSS 11%

    Integer overflow in the U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows an…

  • Unscored —
    CVE-2009-3956

    The default configuration of Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, does …

  • Unscored —
    CVE-2009-3958 Public exploit EPSS 53%

    Multiple stack-based buffer overflows in the NOS Microsystems getPlus Helper ActiveX control before 1.6.2.49 in gp.ocx …

  • High 8.8
    CVE-2009-3953 Exploited Public exploit EPSS 83%

    The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x befo…

    KEV Jun 8, 2022
  • Unscored —
    CVE-2009-3955 EPSS 16%

    Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute…

  • Unscored —
    CVE-2009-3957

    Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, might allow attackers to cause a d…

  • Unscored —
    CVE-2009-3954

    The 3D implementation in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, might all…

  • Unscored —
    CVE-2009-4607 Public exploit

    The command line interface in Overland Storage Snap Server 410 with GuardianOS 5.1.041 runs the "less" utility with a h…

  • Unscored —
    CVE-2009-4608

    Cross-site scripting (XSS) vulnerability in Canon IT Solutions Inc. ACCESSGUARDIAN 3.0.14 and earlier, and 3.5.6 and ea…

  • Unscored —
    CVE-2009-4606 Public exploit

    South River Technologies WebDrive 9.02 build 2232 installs the WebDrive Service without a security descriptor, which al…

  • Unscored —
    CVE-2009-3637

    Stack-based buffer overflow in the M_AddToServerList function in client/menu.c in Red Planet Arena Alien Arena 7.30 all…

    alien-arena Debian
  • Unscored —
    CVE-2010-0075

    Unspecified vulnerability in the Oracle HRMS (Self Service) component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and…

  • Unscored —
    CVE-2010-0076

    Unspecified vulnerability in the Application Express Application Builder component in Oracle Database 3.2.1.00.10 allow…

  • Unscored —
    CVE-2010-0068

    Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 9.0, 9.1, 9.2MP2, and 10.0 allows remot…

  • Unscored —
    CVE-2010-0066

    Unspecified vulnerability in the Access Manager Identity Server component in Oracle Application Server 7.0.4.3 and 10.1…

  • Unscored —
    CVE-2010-0279 Public exploit

    Unrestricted file upload vulnerability in upload.php in BTS-GI Read excel 1.1 allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2010-0067

    Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Application Server 10.1.2.3 and 10.1.3.…

  • Unscored —
    CVE-2010-0074

    Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 7.0SP7, 8.1SP6, 9.0, 9.1, 9.2MP3, 10.0M…

  • Unscored —
    CVE-2010-0078

    Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 9.0, 9.1, 9.2MP3, 10.0MP2, and 10.3.1 a…

  • Unscored —
    CVE-2010-0071 Public exploit

    Unspecified vulnerability in the Listener component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1…

  • Unscored —
    CVE-2010-0069

    Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 7.0, SP7, 8.1SP6, 9.0, 9.1, 9.2MP3, 10.…

  • Unscored —
    CVE-2010-0079

    Multiple vulnerabilities in the JRockit component in BEA Product Suite R27.6.5 using JRE/JDK 1.4.2, 5, and 6 allow remo…

  • Unscored —
    CVE-2010-0077

    Unspecified vulnerability in the CRM Technical Foundation (mobile) component in Oracle E-Business Suite 11.5.10.2, 12.0…

  • Unscored —
    CVE-2010-0070

    Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Application Server 10.1.2.3 and 10.1.3.…

  • Unscored —
    CVE-2010-0080

    Unspecified vulnerability in the PeopleSoft Enterprise HCM - eProfile component in Oracle PeopleSoft Enterprise and JD …