Skip to content
OpenAdvisories

Archive

January 2010

Vulnerabilities first published in this month (UTC), newest first.

← December 2009 2010 / January February 2010 →
  1. 1 
  2. 2 
  3. 3 
  4. 428
  5. 57
  6. 615
  7. 720
  8. 88
  9. 96
  10. 10 
  11. 11 
  12. 1214
  13. 1350
  14. 1413
  15. 1537
  16. 16 
  17. 17 
  18. 1816
  19. 197
  20. 2011
  21. 2119
  22. 2212
  23. 23 
  24. 24 
  25. 2518
  26. 266
  27. 272
  28. 2822
  29. 298
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

319 results · Feed

  • Unscored —
    CVE-2009-4594

    Unspecified vulnerability in IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.131 for Domino 8.0.x has unknow…

  • Unscored —
    CVE-2009-4486

    Stack-based buffer overflow in the eDirectory plugin in Novell iManager before 2.7.3 allows remote attackers to execute…

  • Unscored —
    CVE-2010-0272

    Heap-based buffer overflow in Sun Java System Web Server 7.0 Update 6 on Linux allows remote attackers to discover proc…

  • Unscored —
    CVE-2010-0271

    hald in Sun OpenSolaris snv_51 through snv_130 does not have the proc_audit privilege during unspecified attempts to wr…

  • Unscored —
    CVE-2010-0012

    Directory traversal vulnerability in libtransmission/metainfo.c in Transmission 1.22, 1.34, 1.75, and 1.76 allows remot…

    transmission Debian
  • Unscored —
    CVE-2010-0273

    Unspecified vulnerability in Sun Java System Web Server 7.0 Update 6 on Linux allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2009-4010 EPSS 10%

    Unspecified vulnerability in PowerDNS Recursor before 3.1.7.2 allows remote attackers to spoof DNS data via crafted zon…

    pdns-recursor Debian
  • Unscored —
    CVE-2009-4009 EPSS 18%

    Buffer overflow in PowerDNS Recursor before 3.1.7.2 allows remote attackers to cause a denial of service (daemon crash)…

    pdns-recursor Debian
  • Unscored —
    CVE-2009-3952

    Buffer overflow in Adobe Illustrator CS3 13.0.3 and earlier and Illustrator CS4 14.0.0 allows attackers to execute arbi…

  • Unscored —
    CVE-2009-3742

    Cross-site scripting (XSS) vulnerability in Liferay Portal before 5.3.0 allows remote attackers to inject arbitrary web…

  • Unscored —
    CVE-2010-0226

    SanDisk Cruzer Enterprise USB flash drives do not prevent password replay attacks, which allows physically proximate at…

  • Unscored —
    CVE-2010-0220

    The nsObserverList::FillObserverArray function in xpcom/ds/nsObserverList.cpp in Mozilla Firefox before 3.5.7 allows re…

  • Unscored —
    CVE-2010-0228

    Verbatim Corporate Secure and Corporate Secure FIPS Edition USB flash drives use a fixed 256-bit key for obtaining acce…

  • Unscored —
    CVE-2010-0227

    Verbatim Corporate Secure and Corporate Secure FIPS Edition USB flash drives validate passwords with a program running …

  • Unscored —
    CVE-2010-0224

    SanDisk Cruzer Enterprise USB flash drives validate passwords with a program running on the host computer rather than t…

  • Unscored —
    CVE-2010-0229

    Verbatim Corporate Secure and Corporate Secure FIPS Edition USB flash drives do not prevent password replay attacks, wh…

  • Unscored —
    CVE-2010-0223

    Kingston DataTraveler BlackBox (DTBB), DataTraveler Secure Privacy Edition (DTSP), and DataTraveler Elite Privacy Editi…

  • Unscored —
    CVE-2010-0225

    SanDisk Cruzer Enterprise USB flash drives use a fixed 256-bit key for obtaining access to the cleartext drive contents…

  • Unscored —
    CVE-2010-0222

    Kingston DataTraveler BlackBox (DTBB), DataTraveler Secure Privacy Edition (DTSP), and DataTraveler Elite Privacy Editi…

  • Unscored —
    CVE-2010-0221

    Kingston DataTraveler BlackBox (DTBB), DataTraveler Secure Privacy Edition (DTSP), and DataTraveler Elite Privacy Editi…

  • Unscored —
    CVE-2009-4497 Public exploit

    Cross-site scripting (XSS) vulnerability in LXR Cross Referencer 0.9.5 and 0.9.6 allows remote attackers to inject arbi…

  • Unscored —
    CVE-2009-4586

    Multiple cross-site scripting (XSS) vulnerabilities in index.html in Wowd client before 1.3.1 allow remote attackers to…

  • Unscored —
    CVE-2009-4593

    The bftpdutmp_log function in bftpdutmp.c in Bftpd before 2.4 does not place a '\0' character at the end of the string …

  • Unscored —
    CVE-2009-4587 Public exploit

    Cherokee Web Server 0.5.4 allows remote attackers to cause a denial of service (daemon crash) via an MS-DOS reserved wo…

  • Unscored —
    CVE-2009-4590

    Cross-site scripting (XSS) vulnerability in base_local_rules.php in Basic Analysis and Security Engine (BASE) before 1.…

  • Unscored —
    CVE-2009-4589

    Cross-site scripting (XSS) vulnerability in the Special:Block implementation in the getContribsLink function in Special…

    mediawiki Debian
  • Unscored —
    CVE-2009-4592

    Unspecified vulnerability in base_local_rules.php in Basic Analysis and Security Engine (BASE) before 1.4.4 allows remo…

  • Unscored —
    CVE-2009-4591

    SQL injection vulnerability in Basic Analysis and Security Engine (BASE) before 1.4.4 allows remote attackers to execut…

  • Unscored —
    CVE-2009-4588 Public exploit EPSS 32%

    Heap-based buffer overflow in the WindsPlayerIE.View.1 ActiveX control in WindsPly.ocx 3.5.0.0 Beta, 3.0.0.5, and earli…

  • Unscored —
    CVE-2010-0158 Public exploit

    SQL injection vulnerability in the JoomlaBamboo (JB) Simpla Admin template for Joomla! allows remote attackers to execu…

  • Unscored —
    CVE-2010-0157 Public exploit Scanner template EPSS 13%

    Directory traversal vulnerability in the Bible Study (com_biblestudy) component 6.1 for Joomla! allows remote attackers…

  • Unscored —
    CVE-2009-4575 Public exploit

    Cross-site scripting (XSS) vulnerability in the Q-Personel (com_qpersonel) component 1.0.2 RC2 for Joomla! allows remot…

  • Unscored —
    CVE-2009-4583 Public exploit

    SQL injection vulnerability in the DhForum (com_dhforum) component for Joomla! allows remote attackers to execute arbit…

  • Unscored —
    CVE-2009-4580

    Multiple cross-site scripting (XSS) vulnerabilities in Hasta Blog 2.3 allow remote attackers to inject arbitrary web sc…

  • Unscored —
    CVE-2009-4576 Public exploit

    SQL injection vulnerability in the BeeHeard (com_beeheard) component 1.x for Joomla! allows remote attackers to execute…

  • Unscored —
    CVE-2009-4574 Public exploit

    SQL injection vulnerability in country_escorts.php in I-Escorts Directory Script allows remote attackers to execute arb…

  • Unscored —
    CVE-2009-4577

    SQL injection vulnerability in the MDForum module 2.x through 2.07 for MAXdev MDPro allows remote attackers to execute …

  • Unscored —
    CVE-2009-4573

    Multiple cross-site scripting (XSS) vulnerabilities in the Joomulus (mod_joomulus) module 2.0 for Joomla! allow remote …

  • Unscored —
    CVE-2009-4584

    admin.php in dB Masters Multimedia Links Directory 3.1.3 allows remote attackers to bypass authentication and gain admi…

  • Unscored —
    CVE-2009-4582 Public exploit

    SQL injection vulnerability in detail.php in the Dictionary module for XOOPS 2.0.18 allows remote attackers to execute …