Skip to content
OpenAdvisories

Archive

28 January 2010

Vulnerabilities first published on this day (UTC), newest first.

← December 2009 2010 / January /28 February 2010 →
  1. 1 
  2. 2 
  3. 3 
  4. 428
  5. 57
  6. 615
  7. 720
  8. 88
  9. 96
  10. 10 
  11. 11 
  12. 1214
  13. 1350
  14. 1413
  15. 1537
  16. 16 
  17. 17 
  18. 1816
  19. 197
  20. 2011
  21. 2119
  22. 2212
  23. 23 
  24. 24 
  25. 2518
  26. 266
  27. 272
  28. 2822
  29. 298
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

22 results · Feed

  • Unscored —
    CVE-2004-2766

    Webmail in Sun ONE Messaging Server 6.1 and iPlanet Messaging Server 5.2 before 5.2hf2.02 allows remote attackers to ob…

  • Unscored —
    CVE-2004-2765

    Cross-site scripting (XSS) vulnerability in Webmail in Sun ONE Messaging Server 6.1 and iPlanet Messaging Server 5.2 be…

  • Unscored —
    CVE-2005-4885

    Unspecified vulnerability on certain Sun StorEdge 6130 (SE6130) Controller Arrays allows remote attackers to delete dat…

  • Unscored —
    CVE-2010-0455

    Cross-site scripting (XSS) vulnerability in forum/viewtopic.php in PunBB 1.3 allows remote attackers to inject arbitrar…

  • Unscored —
    CVE-2010-0462 Public exploit

    Heap-based buffer overflow in IBM DB2 9.1 before FP9, 9.5 before FP6, and 9.7 before FP2 allows remote authenticated us…

  • Unscored —
    CVE-2010-0140

    Multiple unspecified vulnerabilities in the web server in Cisco Unified MeetingPlace 7 before 7.0(2.3) hotfix 5F, 6 bef…

  • Unscored —
    CVE-2010-0142

    MeetingTime in Cisco Unified MeetingPlace 6 before MR5, and possibly 5, allows remote authenticated users to gain privi…

  • Unscored —
    CVE-2010-0454

    SQL injection vulnerability in cgi/cgilua.exe/sys/start.htm in Publique! 2.3 allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2010-0141

    MeetingTime in Cisco Unified MeetingPlace 6 before MR5, and possibly 5, allows remote attackers to discover usernames, …

  • Unscored —
    CVE-2010-0459 Public exploit

    SQL injection vulnerability in the Mochigames (com_mochigames) component 0.51 and possibly other versions for Joomla! a…

  • Unscored —
    CVE-2010-0461 Public exploit

    SQL injection vulnerability in the casino (com_casino) component 1.0 for Joomla! allows remote attackers to execute arb…

  • Unscored —
    CVE-2010-0456 Public exploit

    SQL injection vulnerability in the indianpulse Game Server (com_gameserver) component 1.2 for Joomla! allows remote att…

  • Unscored —
    CVE-2010-0457 Public exploit

    SQL injection vulnerability in home.php in magic-portal 2.1 allows remote attackers to execute arbitrary SQL commands v…

  • Unscored —
    CVE-2010-0460

    Multiple cross-site scripting (XSS) vulnerabilities in staff/index.php in Kayako SupportSuite 3.60.04 and earlier allow…

  • Unscored —
    CVE-2010-0458 Public exploit

    Multiple SQL injection vulnerabilities in NetArt Media Blog System 1.5 allow remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2010-0139

    Cisco Unified MeetingPlace 7 before 7.0(2.3) hotfix 5F, 6 before 6.0.639.2, and possibly 5 does not properly validate S…

  • Unscored —
    CVE-2009-4183

    Unspecified vulnerability in HP OpenView Storage Data Protector 6.00 and 6.10 allows local users to obtain unspecified …

  • Medium —
    CVE-2009-2901

    Improper Authentication in Apache Tomcat

    The autodeployment process in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20, when autoDeploy is enabled, deploys appBase files that remain from a failed undeploy, which might allow remote attackers to bypass intended authentication requirements …

    org.apache.tomcat:tomcat Maven
  • Medium —
    CVE-2009-2902 EPSS 11%

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Apache Tomcat

    Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to delete work-directory files via directory traversal sequences in a WAR filename, as demonstrated by the ...war filename.

    org.apache.tomcat:tomcat Maven
  • Medium —
    CVE-2009-2693

    Apache Tomcat Directory Traversal vulnerability

    Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in an entry in a WAR file, as demonstrated by a ../../bin/catalina.bat entry.

    org.apache.tomcat:tomcat Maven
  • Unscored —
    CVE-2003-1576

    Buffer overflow in pamverifier in Change Manager (CM) 1.0 for Sun Management Center (SunMC) 3.0 on Solaris 8 and 9 on t…

  • Unscored —
    CVE-2003-1575

    VERITAS File System (VxFS) 3.3.3, 3.4, and 3.5 before MP1 Rolling Patch 02 for Sun Solaris 2.5.1 through 9 does not pro…