Skip to content
OpenAdvisories

Archive

13 January 2010

Vulnerabilities first published on this day (UTC), newest first.

← December 2009 2010 / January /13 February 2010 →
  1. 1 
  2. 2 
  3. 3 
  4. 428
  5. 57
  6. 615
  7. 720
  8. 88
  9. 96
  10. 10 
  11. 11 
  12. 1214
  13. 1350
  14. 1413
  15. 1537
  16. 16 
  17. 17 
  18. 1816
  19. 197
  20. 2011
  21. 2119
  22. 2212
  23. 23 
  24. 24 
  25. 2518
  26. 266
  27. 272
  28. 2822
  29. 298
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

18 results · Clear filters · Feed

  • Unscored —
    CVE-2009-4490 Public exploit EPSS 10%

    mini_httpd 1.19 writes data to a log file without sanitizing non-printable characters, which might allow remote attacke…

    mini-httpd mini-httpd Debian Ubuntu
  • Unscored —
    CVE-2009-4612 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the WebApp JSP Snoop page in Mort Bay Jetty 6.1.x through 6.1.21…

  • Unscored —
    CVE-2009-4489 Public exploit

    header.c in Cherokee before 0.99.32 writes data to a log file without sanitizing non-printable characters, which might …

  • Unscored —
    CVE-2009-4493 Public exploit

    Orion Application Server 2.0.7 writes data to a log file without sanitizing non-printable characters, which might allow…

  • Unscored —
    CVE-2009-4494 Public exploit

    AOLserver 4.5.1 writes data to a log file without sanitizing non-printable characters, which might allow remote attacke…

    aolserver4 Ubuntu
  • Unscored —
    CVE-2009-4495 Public exploit

    Yaws 1.85 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to …

    yaws yaws Debian Ubuntu
  • Unscored —
    CVE-2009-4496 Public exploit EPSS 12%

    Boa 0.94.14rc21 writes data to a log file without sanitizing non-printable characters, which might allow remote attacke…

  • Critical 9.8
    CVE-2009-4488 Public exploit EPSS 13%

    Varnish 2.0.6 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers…

    varnish varnish Debian Ubuntu
  • Medium —
    CVE-2009-4492 Public exploit EPSS 16%

    WEBrick Improper Input Validation vulnerability

    WEBrick 1.3.1 in Ruby 1.8.6 through patchlevel 383, 1.8.7 through patchlevel 248, 1.8.8dev, 1.9.1 through patchlevel 376, and 1.9.2dev writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window…

    webrick RubyGems
  • Unscored —
    CVE-2009-4610 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Mort Bay Jetty 6.x and 7.0.0 allow remote attackers to inject ar…

  • Unscored —
    CVE-2009-4487 Public exploit EPSS 27%

    nginx 0.7.64 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers …

    nginx Debian
  • Unscored —
    CVE-2009-3958 Public exploit EPSS 53%

    Multiple stack-based buffer overflows in the NOS Microsystems getPlus Helper ActiveX control before 1.6.2.49 in gp.ocx …

  • High 8.8
    CVE-2009-3953 Exploited Public exploit EPSS 83%

    The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x befo…

    KEV Jun 8, 2022
  • Unscored —
    CVE-2009-4607 Public exploit

    The command line interface in Overland Storage Snap Server 410 with GuardianOS 5.1.041 runs the "less" utility with a h…

  • Unscored —
    CVE-2009-4606 Public exploit

    South River Technologies WebDrive 9.02 build 2232 installs the WebDrive Service without a security descriptor, which al…

  • Unscored —
    CVE-2010-0279 Public exploit

    Unrestricted file upload vulnerability in upload.php in BTS-GI Read excel 1.1 allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2010-0071 Public exploit

    Unspecified vulnerability in the Listener component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1…

  • Critical 9.8
    CVE-2009-4491 Public exploit EPSS 14%

    thttpd 2.25b0 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers…