# CVEs published 2010-01-14

13 CVEs were published on January 14, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2009-4355](https://cve.now/CVE-2009-4355.md): Memory leak in the zlib\_stateful\_finish function in crypto/comp/c\_zlib.c in OpenSSL 0.9.8l and earlier and 1.0.0 Beta through Beta 4… (no CVSS)
- [CVE-2009-4613](https://cve.now/CVE-2009-4613.md): SQL injection vulnerability in realestate20/loginaction.php in NetArt Media Real Estate Portal 2.0 allows remote attackers to execute… (no CVSS)
- [CVE-2010-0184](https://cve.now/CVE-2010-0184.md): The (1) domainutility and (2) domainutilitycmd components in TIBCO Domain Utility in TIBCO Runtime Agent (TRA) before 5.6.2, as used in… (no CVSS)
- [CVE-2010-0310](https://cve.now/CVE-2010-0310.md): Trusted Extensions in Sun Solaris 10 allows local users to gain privileges via vectors related to omission of unspecified libraries from… (no CVSS)
- [CVE-2010-0311](https://cve.now/CVE-2010-0311.md): Unspecified vulnerability in Sun Java System Identity Manager (aka IdM) 8.1.0.5 and 8.1.0.6, when Sun Java System Access Manager, OpenSSO… (no CVSS)
- [CVE-2010-0312](https://cve.now/CVE-2010-0312.md): The do\_extendedOp function in ibmslapd in IBM Tivoli Directory Server (TDS) 6.2 on Linux allows remote attackers to cause a denial of… (no CVSS)
- [CVE-2010-0313](https://cve.now/CVE-2010-0313.md): The core\_get\_proxyauth\_dn function in ns-slapd in Sun Java System Directory Server Enterprise Edition 7.0 allows remote attackers to cause… (no CVSS)
- [CVE-2010-0314](https://cve.now/CVE-2010-0314.md): Apple Safari allows remote attackers to discover a redirect's target URL, for the session of a specific user of a web site, by placing the… (no CVSS)
- [CVE-2010-0315](https://cve.now/CVE-2010-0315.md): WebKit before r53607, as used in Google Chrome before 4.0.249.89, allows remote attackers to discover a redirect's target URL, for the… (no CVSS)
- [CVE-2009-4182](https://cve.now/CVE-2009-4182.md): Multiple unspecified vulnerabilities in HP Web Jetadmin 10.2, when a remote SQL server is used, allow remote attackers to obtain access to… (no CVSS)
- [CVE-2010-0002](https://cve.now/CVE-2010-0002.md): The /etc/profile.d/60alias.sh script in the Mandriva bash package for Bash 2.05b, 3.0, 3.2, 3.2.48, and 4.0 enables the… (no CVSS)
- [CVE-2010-0014](https://cve.now/CVE-2010-0014.md): System Security Services Daemon (SSSD) before 1.0.1, when the krb5 auth\_provider is configured but the KDC is unreachable, allows… (no CVSS)
- [CVE-2010-0015](https://cve.now/CVE-2010-0015.md): nis/nss\_nis/nis-pwd.c in the GNU C Library (aka glibc or libc6) 2.7 and Embedded GLIBC (EGLIBC) 2.10.2 adds information from the… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2010-01-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.