# CVEs published 2009-01-08

20 CVEs were published on January 8, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2008-0067](https://cve.now/CVE-2008-0067.md): Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute… (no CVSS)
- [CVE-2008-3819](https://cve.now/CVE-2008-3819.md): dnsserver in Cisco Application Control Engine Global Site Selector (GSS) before 3.0(1) allows remote attackers to cause a denial of… (no CVSS)
- [CVE-2008-4827](https://cve.now/CVE-2008-4827.md): Multiple heap-based buffer overflows in the AddTab method in the (1) Tab and (2) CTab ActiveX controls in c1sizer.ocx and the (3) TabOne… (no CVSS)
- [CVE-2008-5874](https://cve.now/CVE-2008-5874.md): Multiple SQL injection vulnerabilities in the Hotel Booking Reservation System (aka HBS) for Joomla! allow remote attackers to execute… (no CVSS)
- [CVE-2008-5875](https://cve.now/CVE-2008-5875.md): SQL injection vulnerability in the com\_lowcosthotels component in the Hotel Booking Reservation System (aka HBS) for Joomla! allows remote… (no CVSS)
- [CVE-2008-5876](https://cve.now/CVE-2008-5876.md): Buffer overflow in Irrlicht before 1.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code… (no CVSS)
- [CVE-2008-5877](https://cve.now/CVE-2008-5877.md): Multiple SQL injection vulnerabilities in Phpclanwebsite (aka PCW) 1.23.3 Fix Pack 5 and earlier, when magic\_quotes\_gpc is disabled, allow… (no CVSS)
- [CVE-2008-5878](https://cve.now/CVE-2008-5878.md): Multiple directory traversal vulnerabilities in Phpclanwebsite (aka PCW) 1.23.3 Fix Pack 5 and earlier, when magic\_quotes\_gpc is disabled… (no CVSS)
- [CVE-2008-5879](https://cve.now/CVE-2008-5879.md): Cross-site scripting (XSS) vulnerability in index.php in Phpclanwebsite (aka PCW) 1.23.3 Fix Pack 5 and earlier, allows remote attackers… (no CVSS)
- [CVE-2008-5880](https://cve.now/CVE-2008-5880.md): admin/auth.php in Gobbl CMS 1.0 allows remote attackers to bypass authentication and gain administrative access by setting the auth cookie… (no CVSS)
- [CVE-2009-0043](https://cve.now/CVE-2009-0043.md): The smmsnmpd service in CA Service Metric Analysis r11.0 through r11.1 SP1 and Service Level Management 3.5 does not properly restrict… (no CVSS)
- [CVE-2009-0070](https://cve.now/CVE-2009-0070.md): Integer signedness error in Apple Safari allows remote attackers to read the contents of arbitrary memory locations, cause a denial of… (no CVSS)
- [CVE-2009-0071](https://cve.now/CVE-2009-0071.md): Mozilla Firefox 3.0.5 and earlier 3.0.x versions, when designMode is enabled, allows remote attackers to cause a denial of service (NULL… (no CVSS)
- [CVE-2009-0072](https://cve.now/CVE-2009-0072.md): Microsoft Internet Explorer 6.0 through 8.0 beta2 allows remote attackers to cause a denial of service (application crash) via an… (no CVSS)
- [CVE-2008-5868](https://cve.now/CVE-2008-5868.md): Stack-based buffer overflow in IntelliTamper 2.07 and 2.08 allows user-assisted attackers to execute arbitrary code via a long ProxyLogin… (no CVSS)
- [CVE-2008-5869](https://cve.now/CVE-2008-5869.md): Cross-site scripting (XSS) vulnerability in the Proxim Wireless Tsunami MP.11 2411 with firmware 3.0.3 allows remote authenticated users… (no CVSS)
- [CVE-2008-5870](https://cve.now/CVE-2008-5870.md): FastStone Image Viewer 3.6 allows user-assisted attackers to cause a denial of service (application crash) via a malformed BMP image with… (no CVSS)
- [CVE-2008-5871](https://cve.now/CVE-2008-5871.md): Nortel Multimedia Communication Server (MSC) 5100 3.0.13 does not verify credentials during call placement, which allows remote attackers… (no CVSS)
- [CVE-2008-5872](https://cve.now/CVE-2008-5872.md): Multiple unspecified vulnerabilities in the UNIStim File Transfer Protocol (UFTP) processing in IP Client Manager (IPCM) in Nortel… (no CVSS)
- [CVE-2008-5873](https://cve.now/CVE-2008-5873.md): Yerba SACphp 6.3 and earlier allows remote attackers to bypass authentication and gain administrative access via a galleta\[sesion\] cookie… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2009-01-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.