Skip to content
OpenAdvisories

Archive

January 2010

Vulnerabilities first published in this month (UTC), newest first.

← December 2009 2010 / January February 2010 →
  1. 1 
  2. 2 
  3. 3 
  4. 428
  5. 57
  6. 615
  7. 720
  8. 88
  9. 96
  10. 10 
  11. 11 
  12. 1214
  13. 1350
  14. 1413
  15. 1537
  16. 16 
  17. 17 
  18. 1816
  19. 197
  20. 2011
  21. 2119
  22. 2212
  23. 23 
  24. 24 
  25. 2518
  26. 266
  27. 272
  28. 2822
  29. 298
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

118 results · Clear filters · Feed

  • Unscored —
    CVE-2009-4614 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Moa Gallery 1.2.0 and earlier allow remote attackers to execute a…

  • Unscored —
    CVE-2009-4626 Public exploit

    Directory traversal vulnerability in menu.php in phpNagios 1.2.0 allows remote attackers to include and execute arbitra…

  • Unscored —
    CVE-2010-0356 Public exploit EPSS 30%

    Stack-based buffer overflow in the MOVIEPLAYER.MoviePlayerCtrl.1 ActiveX control in MoviePlayer.ocx 6.8.0.0 in Viscom S…

  • Unscored —
    CVE-2010-0319 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Docmint 1.0 and 2.1 allows remote attackers to inject arbitrar…

  • Unscored —
    CVE-2010-0321 Public exploit

    Cross-site scripting (XSS) vulnerability in jobs/index.php in Jamit Job Board 3.0 allows remote attackers to inject arb…

  • Unscored —
    CVE-2010-0317 Public exploit EPSS 10%

    Novell Netware 6.5 SP8 allows remote attackers to cause a denial of service (NULL pointer dereference, memory consumpti…

  • High 8.8
    CVE-2010-0249 Exploited Public exploit EPSS 92%

    Use-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 on Windows 2000 SP4; Windows XP SP2 and …

    KEV May 20, 2026
  • Unscored —
    CVE-2010-0313 Public exploit

    The core_get_proxyauth_dn function in ns-slapd in Sun Java System Directory Server Enterprise Edition 7.0 allows remote…

  • Unscored —
    CVE-2010-0314 Public exploit

    Apple Safari allows remote attackers to discover a redirect's target URL, for the session of a specific user of a web s…

  • Unscored —
    CVE-2010-0315 Public exploit

    WebKit before r53607, as used in Google Chrome before 4.0.249.89, allows remote attackers to discover a redirect's targ…

  • Unscored —
    CVE-2009-4613 Public exploit

    SQL injection vulnerability in realestate20/loginaction.php in NetArt Media Real Estate Portal 2.0 allows remote attack…

  • Unscored —
    CVE-2010-0002 Public exploit

    The /etc/profile.d/60alias.sh script in the Mandriva bash package for Bash 2.05b, 3.0, 3.2, 3.2.48, and 4.0 enables the…

  • Unscored —
    CVE-2009-4490 Public exploit EPSS 10%

    mini_httpd 1.19 writes data to a log file without sanitizing non-printable characters, which might allow remote attacke…

    mini-httpd mini-httpd Debian Ubuntu
  • Unscored —
    CVE-2009-4612 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the WebApp JSP Snoop page in Mort Bay Jetty 6.1.x through 6.1.21…

  • Unscored —
    CVE-2009-4489 Public exploit

    header.c in Cherokee before 0.99.32 writes data to a log file without sanitizing non-printable characters, which might …

  • Unscored —
    CVE-2009-4493 Public exploit

    Orion Application Server 2.0.7 writes data to a log file without sanitizing non-printable characters, which might allow…

  • Unscored —
    CVE-2009-4494 Public exploit

    AOLserver 4.5.1 writes data to a log file without sanitizing non-printable characters, which might allow remote attacke…

    aolserver4 Ubuntu
  • Unscored —
    CVE-2009-4495 Public exploit

    Yaws 1.85 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to …

    yaws yaws Debian Ubuntu
  • Unscored —
    CVE-2009-4496 Public exploit EPSS 12%

    Boa 0.94.14rc21 writes data to a log file without sanitizing non-printable characters, which might allow remote attacke…

  • Critical 9.8
    CVE-2009-4488 Public exploit EPSS 13%

    Varnish 2.0.6 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers…

    varnish varnish Debian Ubuntu
  • Medium —
    CVE-2009-4492 Public exploit EPSS 16%

    WEBrick Improper Input Validation vulnerability

    WEBrick 1.3.1 in Ruby 1.8.6 through patchlevel 383, 1.8.7 through patchlevel 248, 1.8.8dev, 1.9.1 through patchlevel 376, and 1.9.2dev writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window…

    webrick RubyGems
  • Unscored —
    CVE-2009-4610 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Mort Bay Jetty 6.x and 7.0.0 allow remote attackers to inject ar…

  • Unscored —
    CVE-2009-4487 Public exploit EPSS 27%

    nginx 0.7.64 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers …

    nginx Debian
  • Unscored —
    CVE-2009-3958 Public exploit EPSS 53%

    Multiple stack-based buffer overflows in the NOS Microsystems getPlus Helper ActiveX control before 1.6.2.49 in gp.ocx …

  • High 8.8
    CVE-2009-3953 Exploited Public exploit EPSS 83%

    The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x befo…

    KEV Jun 8, 2022
  • Unscored —
    CVE-2009-4607 Public exploit

    The command line interface in Overland Storage Snap Server 410 with GuardianOS 5.1.041 runs the "less" utility with a h…

  • Unscored —
    CVE-2009-4606 Public exploit

    South River Technologies WebDrive 9.02 build 2232 installs the WebDrive Service without a security descriptor, which al…

  • Unscored —
    CVE-2010-0279 Public exploit

    Unrestricted file upload vulnerability in upload.php in BTS-GI Read excel 1.1 allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2010-0071 Public exploit

    Unspecified vulnerability in the Listener component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1…

  • Critical 9.8
    CVE-2009-4491 Public exploit EPSS 14%

    thttpd 2.25b0 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers…

  • Unscored —
    CVE-2010-0278 Public exploit

    A certain ActiveX control in msgsc.14.0.8089.726.dll in Microsoft Windows Live Messenger 2009 build 14.0.8089.726 on Wi…

  • Unscored —
    CVE-2009-4599 Public exploit

    Multiple SQL injection vulnerabilities in the JS Jobs (com_jsjobs) component 1.0.5.6 for Joomla! allow remote attackers…

  • Unscored —
    CVE-2009-4600 Public exploit

    SQL injection vulnerability in realestate20/loginaction.php in NetArt Media Real Estate Portal 2.0 allows remote attack…

  • Unscored —
    CVE-2009-4604 Public exploit

    PHP remote file inclusion vulnerability in mamboleto.php in the Fernando Soares Mamboleto (com_mamboleto) component 2.0…

  • Unscored —
    CVE-2009-4597 Public exploit

    Multiple SQL injection vulnerabilities in index.php in PHP Inventory 1.2 allow (1) remote authenticated users to execut…

  • Unscored —
    CVE-2009-4596 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in PHP Inventory 1.2 allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2009-4601 Public exploit

    Cross-site scripting (XSS) vulnerability in basic_search_result.php in Zeeways ZeeJobsite 3x allows remote attackers to…

  • Unscored —
    CVE-2009-4598 Public exploit

    SQL injection vulnerability in the JPhoto (com_jphoto) component 1.0 for Joomla! allows remote attackers to execute arb…

  • Unscored —
    CVE-2009-4595 Public exploit

    SQL injection vulnerability in index.php in PHP Inventory 1.2 allows remote authenticated users to execute arbitrary SQ…

  • Unscored —
    CVE-2010-0013 Public exploit EPSS 12%

    Directory traversal vulnerability in slp.c in the MSN protocol plugin in libpurple in Pidgin 2.6.4 and Adium 1.3.8 allo…

    pidgin Debian