Skip to content
OpenAdvisories

Archive

January 2010

Vulnerabilities first published in this month (UTC), newest first.

← December 2009 2010 / January February 2010 →
  1. 1 
  2. 2 
  3. 3 
  4. 428
  5. 57
  6. 615
  7. 720
  8. 88
  9. 96
  10. 10 
  11. 11 
  12. 1214
  13. 1350
  14. 1413
  15. 1537
  16. 16 
  17. 17 
  18. 1816
  19. 197
  20. 2011
  21. 2119
  22. 2212
  23. 23 
  24. 24 
  25. 2518
  26. 266
  27. 272
  28. 2822
  29. 298
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

319 results · Feed

  • Unscored —
    CVE-2010-0311

    Unspecified vulnerability in Sun Java System Identity Manager (aka IdM) 8.1.0.5 and 8.1.0.6, when Sun Java System Acces…

  • Unscored —
    CVE-2010-0312

    The do_extendedOp function in ibmslapd in IBM Tivoli Directory Server (TDS) 6.2 on Linux allows remote attackers to cau…

  • Unscored —
    CVE-2010-0310

    Trusted Extensions in Sun Solaris 10 allows local users to gain privileges via vectors related to omission of unspecifi…

  • Unscored —
    CVE-2010-0314 Public exploit

    Apple Safari allows remote attackers to discover a redirect's target URL, for the session of a specific user of a web s…

  • Unscored —
    CVE-2010-0315 Public exploit

    WebKit before r53607, as used in Google Chrome before 4.0.249.89, allows remote attackers to discover a redirect's targ…

  • Unscored —
    CVE-2009-4355

    Memory leak in the zlib_stateful_finish function in crypto/comp/c_zlib.c in OpenSSL 0.9.8l and earlier and 1.0.0 Beta t…

    openssl Debian
  • Unscored —
    CVE-2009-4613 Public exploit

    SQL injection vulnerability in realestate20/loginaction.php in NetArt Media Real Estate Portal 2.0 allows remote attack…

  • Unscored —
    CVE-2010-0014

    System Security Services Daemon (SSSD) before 1.0.1, when the krb5 auth_provider is configured but the KDC is unreachab…

    sssd Debian
  • Unscored —
    CVE-2010-0002 Public exploit

    The /etc/profile.d/60alias.sh script in the Mandriva bash package for Bash 2.05b, 3.0, 3.2, 3.2.48, and 4.0 enables the…

  • Unscored —
    CVE-2010-0015

    nis/nss_nis/nis-pwd.c in the GNU C Library (aka glibc or libc6) 2.7 and Embedded GLIBC (EGLIBC) 2.10.2 adds information…

    glibc Debian
  • Unscored —
    CVE-2009-4182

    Multiple unspecified vulnerabilities in HP Web Jetadmin 10.2, when a remote SQL server is used, allow remote attackers …

  • Unscored —
    CVE-2009-4490 Public exploit EPSS 10%

    mini_httpd 1.19 writes data to a log file without sanitizing non-printable characters, which might allow remote attacke…

    mini-httpd mini-httpd Debian Ubuntu
  • Unscored —
    CVE-2009-4612 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the WebApp JSP Snoop page in Mort Bay Jetty 6.1.x through 6.1.21…

  • Unscored —
    CVE-2009-4489 Public exploit

    header.c in Cherokee before 0.99.32 writes data to a log file without sanitizing non-printable characters, which might …

  • Unscored —
    CVE-2009-4493 Public exploit

    Orion Application Server 2.0.7 writes data to a log file without sanitizing non-printable characters, which might allow…

  • Unscored —
    CVE-2009-4494 Public exploit

    AOLserver 4.5.1 writes data to a log file without sanitizing non-printable characters, which might allow remote attacke…

    aolserver4 Ubuntu
  • Unscored —
    CVE-2009-4495 Public exploit

    Yaws 1.85 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to …

    yaws yaws Debian Ubuntu
  • Unscored —
    CVE-2009-4609

    The Dump Servlet in Mort Bay Jetty 6.x and 7.0.0 allows remote attackers to obtain sensitive information about internal…

  • Unscored —
    CVE-2009-4496 Public exploit EPSS 12%

    Boa 0.94.14rc21 writes data to a log file without sanitizing non-printable characters, which might allow remote attacke…

  • High 7.3
    CVE-2009-4611

    Improper input validation in Mort Bay Jetty

    Mort Bay Jetty 6.x through 6.1.22 and 7.0.0 writes backtrace data without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request contai…

    org.mortbay.jetty:jetty Maven
  • Critical 9.8
    CVE-2009-4488 Public exploit EPSS 13%

    Varnish 2.0.6 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers…

    varnish varnish Debian Ubuntu
  • Medium —
    CVE-2009-4492 Public exploit EPSS 16%

    WEBrick Improper Input Validation vulnerability

    WEBrick 1.3.1 in Ruby 1.8.6 through patchlevel 383, 1.8.7 through patchlevel 248, 1.8.8dev, 1.9.1 through patchlevel 376, and 1.9.2dev writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window…

    webrick RubyGems
  • Unscored —
    CVE-2009-4610 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Mort Bay Jetty 6.x and 7.0.0 allow remote attackers to inject ar…

  • Unscored —
    CVE-2009-4487 Public exploit EPSS 27%

    nginx 0.7.64 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers …

    nginx Debian
  • Unscored —
    CVE-2010-0018 EPSS 27%

    Integer overflow in the Embedded OpenType (EOT) Font Engine (t2embed.dll) in Microsoft Windows 2000 SP4; Windows XP SP2…

  • Unscored —
    CVE-2009-4212

    Multiple integer underflows in the (1) AES and (2) RC4 decryption functionality in the crypto library in MIT Kerberos 5…

    krb5 Debian
  • Unscored —
    CVE-2009-3959 EPSS 11%

    Integer overflow in the U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows an…

  • Unscored —
    CVE-2009-3956

    The default configuration of Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, does …

  • Unscored —
    CVE-2009-3958 Public exploit EPSS 53%

    Multiple stack-based buffer overflows in the NOS Microsystems getPlus Helper ActiveX control before 1.6.2.49 in gp.ocx …

  • High 8.8
    CVE-2009-3953 Exploited Public exploit EPSS 83%

    The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x befo…

    KEV Jun 8, 2022
  • Unscored —
    CVE-2009-3955 EPSS 16%

    Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute…

  • Unscored —
    CVE-2009-3957

    Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, might allow attackers to cause a d…

  • Unscored —
    CVE-2009-3954

    The 3D implementation in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, might all…

  • Unscored —
    CVE-2009-4607 Public exploit

    The command line interface in Overland Storage Snap Server 410 with GuardianOS 5.1.041 runs the "less" utility with a h…

  • Unscored —
    CVE-2009-4608

    Cross-site scripting (XSS) vulnerability in Canon IT Solutions Inc. ACCESSGUARDIAN 3.0.14 and earlier, and 3.5.6 and ea…

  • Unscored —
    CVE-2009-4606 Public exploit

    South River Technologies WebDrive 9.02 build 2232 installs the WebDrive Service without a security descriptor, which al…

  • Unscored —
    CVE-2009-3637

    Stack-based buffer overflow in the M_AddToServerList function in client/menu.c in Red Planet Arena Alien Arena 7.30 all…

    alien-arena Debian
  • Unscored —
    CVE-2010-0075

    Unspecified vulnerability in the Oracle HRMS (Self Service) component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and…

  • Unscored —
    CVE-2010-0076

    Unspecified vulnerability in the Application Express Application Builder component in Oracle Database 3.2.1.00.10 allow…

  • Unscored —
    CVE-2010-0068

    Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 9.0, 9.1, 9.2MP2, and 10.0 allows remot…