Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2010
January

CVEs published in January 2010

330 vulnerabilities, 64 critical, 3 exploited.

Known exploitedIn KEVPublic exploitFix available

adobe acrobat, acrobat reader +1 moreThe 3D implementation in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows...CVE-2009-395410.0 HighJanuary 13, 2010
adobe acrobat, acrobat and reader, opensuse +2 more +4 moreThe U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and...CVE-2009-3953In KEVPublic exploitEPSS 83.2%8.8 HighJanuary 13, 2010
canon-its accessguardianCross-site scripting (XSS) vulnerability in Canon IT Solutions Inc. ACCESSGUARDIAN 3.0.14 and...CVE-2009-46084.3 MediumJanuary 13, 2010
overlandstorage guardianos, snap server 410 +1 moreThe command line interface in Overland Storage Snap Server 410 with GuardianOS 5.1.041 runs the ...CVE-2009-4607Public exploit7.2 HighJanuary 13, 2010
south river technologies webdriveSouth River Technologies WebDrive 9.02 build 2232 installs the WebDrive Service without a...CVE-2009-4606Public exploit7.2 HighJanuary 13, 2010
icculus alien arenaStack-based buffer overflow in the M_AddToServerList function in client/menu.c in Red Planet...CVE-2009-3637Fix available10.0 HighJanuary 13, 2010
bts-gi.net read excelUnrestricted file upload vulnerability in upload.php in BTS-GI Read excel 1.1 allows remote...CVE-2010-0279Public exploit6.8 MediumJanuary 13, 2010
oracle jd edwards enterpriseone, peoplesoft enterprise +1 moreUnspecified vulnerability in the PeopleSoft Enterprise HCM - eProfile component in Oracle...CVE-2010-00804.9 MediumJanuary 13, 2010
oracle bea product suiteMultiple vulnerabilities in the JRockit component in BEA Product Suite R27.6.5 using JRE/JDK 1.4...CVE-2010-007910.0 HighJanuary 13, 2010
oracle bea product suiteUnspecified vulnerability in the WebLogic Server component in BEA Product Suite 9.0, 9.1, 9.2MP3,...CVE-2010-00785.0 MediumJanuary 13, 2010
oracle e-business suiteUnspecified vulnerability in the CRM Technical Foundation (mobile) component in Oracle E-Business...CVE-2010-00776.4 MediumJanuary 13, 2010
oracle databaseUnspecified vulnerability in the Application Express Application Builder component in Oracle...CVE-2010-00766.0 MediumJanuary 13, 2010
oracle e-business suiteUnspecified vulnerability in the Oracle HRMS (Self Service) component in Oracle E-Business Suite...CVE-2010-00755.0 MediumJanuary 13, 2010
oracle bea product suiteUnspecified vulnerability in the WebLogic Server component in BEA Product Suite 7.0SP7, 8.1SP6, 9...CVE-2010-00745.0 MediumJanuary 13, 2010
oracle secure backupUnspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.3...CVE-2010-007210.0 HighJanuary 13, 2010
oracle database serverUnspecified vulnerability in the Listener component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0...CVE-2010-0071Public exploit10.0 HighJanuary 13, 2010
oracle application serverUnspecified vulnerability in the Oracle Containers for J2EE component in Oracle Application...CVE-2010-00704.3 MediumJanuary 13, 2010
oracle bea product suiteUnspecified vulnerability in the WebLogic Server component in BEA Product Suite 7.0, SP7, 8.1SP6,...CVE-2010-00694.3 MediumJanuary 13, 2010
oracle bea product suiteUnspecified vulnerability in the WebLogic Server component in BEA Product Suite 9.0, 9.1, 9.2MP2,...CVE-2010-00685.0 MediumJanuary 13, 2010
oracle application serverUnspecified vulnerability in the Oracle Containers for J2EE component in Oracle Application...CVE-2010-00675.0 MediumJanuary 13, 2010
oracle application serverUnspecified vulnerability in the Access Manager Identity Server component in Oracle Application...CVE-2010-00665.0 MediumJanuary 13, 2010
oracle e-business suiteUnspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business...CVE-2009-34164.3 MediumJanuary 13, 2010
oracle database serverUnspecified vulnerability in the Oracle OLAP component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10...CVE-2009-34159.0 HighJanuary 13, 2010
oracle database serverUnspecified vulnerability in the Oracle Spatial component in Oracle Database 9.2.0.8, 9.2.0.8DV,...CVE-2009-34144.9 MediumJanuary 13, 2010
oracle database serverUnspecified vulnerability in the Oracle Spatial component in Oracle Database 9.2.0.8, 9.2.0.8DV,...CVE-2009-34133.2 LowJanuary 13, 2010
oracle application server, database server +1 moreUnspecified vulnerability in the Unzip component in Oracle Database 9.2.0.8, 9.2.0.8DV, and 10.1...CVE-2009-34121.0 LowJanuary 13, 2010
oracle database serverUnspecified vulnerability in the Oracle Data Pump component in Oracle Database 11.1.0.7, 10.2.0.3...CVE-2009-34114.9 MediumJanuary 13, 2010
oracle database serverUnspecified vulnerability in the RDBMS component in Oracle Database 11.1.0.7, 10.2.0.3, 10.2.0.4,...CVE-2009-34103.6 LowJanuary 13, 2010
oracle database serverUnspecified vulnerability in the Logical Standby component in Oracle Database allows remote...CVE-2009-19964.0 MediumJanuary 13, 2010
acme thttpd, thttpd http server +1 morethttpd 2.25b0 writes data to a log file without sanitizing non-printable characters, which might...CVE-2009-4491Public exploitEPSS 13.7%5.0 MediumJanuary 13, 2010
opensslMemory leak in the zlib_stateful_finish function in crypto/comp/c_zlib.c in OpenSSL 0.9.8l and...CVE-2009-4355Fix available5.0 MediumJanuary 13, 2010
microsoft windows live messengerA certain ActiveX control in msgsc.14.0.8089.726.dll in Microsoft Windows Live Messenger 2009...CVE-2010-0278Public exploit4.3 MediumJanuary 12, 2010
fernando soares com mamboletoPHP remote file inclusion vulnerability in mamboleto.php in the Fernando Soares Mamboleto ...CVE-2009-4604Public exploit7.5 HighJanuary 12, 2010
sap kernelUnspecified vulnerability in sapstartsrv.exe in the SAP Kernel 6.40, 7.00, 7.01, 7.10, 7.11, and...CVE-2009-46035.0 MediumJanuary 12, 2010
drupal randomizerCross-site scripting (XSS) vulnerability in the Randomizer module 5.x through 5.x-1.0 and 6.x...CVE-2009-46024.3 MediumJanuary 12, 2010
zeeways zeejobsiteCross-site scripting (XSS) vulnerability in basic_search_result.php in Zeeways ZeeJobsite 3x...CVE-2009-4601Public exploit4.3 MediumJanuary 12, 2010
netartmedia media real estate portalSQL injection vulnerability in realestate20/loginaction.php in NetArt Media Real Estate Portal 2...CVE-2009-4600Public exploit7.5 HighJanuary 12, 2010
joomshark com jsjobsMultiple SQL injection vulnerabilities in the JS Jobs (com_jsjobs) component 1.0.5.6 for Joomla!...CVE-2009-4599Public exploit7.5 HighJanuary 12, 2010
corephp com jphotoSQL injection vulnerability in the JPhoto (com_jphoto) component 1.0 for Joomla! allows remote...CVE-2009-4598Public exploit7.5 HighJanuary 12, 2010
phpwares php inventoryMultiple SQL injection vulnerabilities in index.php in PHP Inventory 1.2 allow (1) remote...CVE-2009-4597Public exploit7.5 HighJanuary 12, 2010
phpwares php inventoryCross-site scripting (XSS) vulnerability in index.php in PHP Inventory 1.2 allows remote...CVE-2009-4596Public exploit4.3 MediumJanuary 12, 2010
phpwares php inventorySQL injection vulnerability in index.php in PHP Inventory 1.2 allows remote authenticated users...CVE-2009-4595Public exploit6.0 MediumJanuary 12, 2010
debian linux, linux kernel +1 moredrivers/net/e1000e/netdev.c in the e1000e driver in the Linux kernel 2.6.32.3 and earlier does...CVE-2009-453810.0 HighJanuary 12, 2010
debian linux, linux kernel +1 moredrivers/net/r8169.c in the r8169 driver in the Linux kernel 2.6.32.3 and earlier does not...CVE-2009-45377.8 HighJanuary 12, 2010
debian linux, linux kernel +1 moredrivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel 2.6.32.3 and earlier...CVE-2009-45367.8 HighJanuary 12, 2010
mit kerberos, kerberos 5 +1 moreMultiple integer underflows in the (1) AES and (2) RC4 decryption functionality in the crypto...CVE-2009-4212Fix available10.0 HighJanuary 12, 2010
adium, pidgin +1 moreslp.c in the MSN protocol plugin in libpurple in Pidgin before 2.6.6, including 2.6.4, and Adium...CVE-2010-0277Fix available5.0 MediumJanuary 9, 2010
ibm domino web access, lotus inotes, lotus domino +2 moreIBM Lotus iNotes (aka Domino Web Access or DWA) before 229.241 for Domino 8.0.2 FP3 does not...CVE-2010-027610.0 HighJanuary 9, 2010
ibm lotus inotesUltra-light Mode in IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.241 for Domino 8.0...CVE-2010-027510.0 HighJanuary 9, 2010
ibm lotus inotesUnspecified vulnerability in the Edit Contact scene in Ultra-light Mode in IBM Lotus iNotes (aka...CVE-2010-027410.0 HighJanuary 9, 2010
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open