# CVEs published 2010-01-25

18 CVEs were published on January 25, 2010: 0 critical, 1 high. Days are UTC.

- [CVE-2005-4884](https://cve.now/CVE-2005-4884.md): Unspecified vulnerability in the Oracle OLAP component in Oracle Database Server 10.1.0.4 (10g) allows remote authenticated attackers to… (no CVSS)
- [CVE-2008-7253](https://cve.now/CVE-2008-7253.md): The default configuration of the web server in IBM Lotus Domino Server, possibly 6.0 through 8.0, enables the HTTP TRACE method, which… (no CVSS)
- [CVE-2009-4241](https://cve.now/CVE-2009-4241.md): Heap-based buffer overflow in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through… (no CVSS)
- [CVE-2009-4242](https://cve.now/CVE-2009-4242.md): Heap-based buffer overflow in the CGIFCodec::GetPacketBuffer function in datatype/image/gif/common/gifcodec.cpp in RealNetworks RealPlayer… (no CVSS)
- [CVE-2009-4243](https://cve.now/CVE-2009-4243.md): RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through 11.0.4, RealPlayer Enterprise… (no CVSS)
- [CVE-2009-4244](https://cve.now/CVE-2009-4244.md): Heap-based buffer overflow in RealNetworks RealPlayer 10; RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741; RealPlayer 11 11.0.0 through… (no CVSS)
- [CVE-2009-4245](https://cve.now/CVE-2009-4245.md): Heap-based buffer overflow in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through… (no CVSS)
- [CVE-2009-4246](https://cve.now/CVE-2009-4246.md): Stack-based buffer overflow in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through… (no CVSS)
- [CVE-2009-4247](https://cve.now/CVE-2009-4247.md): Stack-based buffer overflow in protocol/rtsp/rtspclnt.cpp in RealNetworks RealPlayer 10; RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741… (no CVSS)
- [CVE-2009-4248](https://cve.now/CVE-2009-4248.md): Buffer overflow in the RTSPProtocol::HandleSetParameterRequest function in client/core/rtspprotocol.cpp in RealNetworks RealPlayer 10… (no CVSS)
- [CVE-2009-4257](https://cve.now/CVE-2009-4257.md): Heap-based buffer overflow in datatype/smil/common/smlpkt.cpp in smlrender.dll in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040… (no CVSS)
- [CVE-2010-0383](https://cve.now/CVE-2010-0383.md): Tor before 0.2.1.22, and 0.2.2.x before 0.2.2.7-alpha, uses deprecated identity keys for certain directory authorities, which makes it… (no CVSS)
- [CVE-2010-0384](https://cve.now/CVE-2010-0384.md): Tor 0.2.2.x before 0.2.2.7-alpha, when functioning as a directory mirror, does not prevent logging of the client IP address upon detection… (no CVSS)
- [CVE-2010-0385](https://cve.now/CVE-2010-0385.md): Tor before 0.2.1.22, and 0.2.2.x before 0.2.2.7-alpha, when functioning as a bridge directory authority, allows remote attackers to obtain… (no CVSS)
- [CVE-2010-0386](https://cve.now/CVE-2010-0386.md): The default configuration of Sun Java System Application Server 7 and 7 2004Q2 enables the HTTP TRACE method, which makes it easier for… (CVSS 8.1)
- [CVE-2010-0387](https://cve.now/CVE-2010-0387.md): Multiple heap-based buffer overflows in (1) webservd and (2) the admin server in Sun Java System Web Server 7.0 Update 7 allow remote… (no CVSS)
- [CVE-2010-0388](https://cve.now/CVE-2010-0388.md): Format string vulnerability in the WebDAV implementation in webservd in Sun Java System Web Server 7.0 Update 6 allows remote attackers to… (no CVSS)
- [CVE-2010-0389](https://cve.now/CVE-2010-0389.md): The admin server in Sun Java System Web Server 7.0 Update 6 allows remote attackers to cause a denial of service (NULL pointer dereference… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2010-01-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.