# CVEs published 2010-01-28

22 CVEs were published on January 28, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2003-1575](https://cve.now/CVE-2003-1575.md): VERITAS File System (VxFS) 3.3.3, 3.4, and 3.5 before MP1 Rolling Patch 02 for Sun Solaris 2.5.1 through 9 does not properly implement… (no CVSS)
- [CVE-2003-1576](https://cve.now/CVE-2003-1576.md): Buffer overflow in pamverifier in Change Manager (CM) 1.0 for Sun Management Center (SunMC) 3.0 on Solaris 8 and 9 on the sparc platform… (no CVSS)
- [CVE-2004-2765](https://cve.now/CVE-2004-2765.md): Cross-site scripting (XSS) vulnerability in Webmail in Sun ONE Messaging Server 6.1 and iPlanet Messaging Server 5.2 before 5.2hf2.02… (no CVSS)
- [CVE-2004-2766](https://cve.now/CVE-2004-2766.md): Webmail in Sun ONE Messaging Server 6.1 and iPlanet Messaging Server 5.2 before 5.2hf2.02 allows remote attackers to obtain unspecified… (no CVSS)
- [CVE-2005-4885](https://cve.now/CVE-2005-4885.md): Unspecified vulnerability on certain Sun StorEdge 6130 (SE6130) Controller Arrays allows remote attackers to delete data via unknown… (no CVSS)
- [CVE-2009-2693](https://cve.now/CVE-2009-2693.md): Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to create or… (no CVSS, org.apache.tomcat:tomcat)
- [CVE-2009-2901](https://cve.now/CVE-2009-2901.md): The autodeployment process in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20, when autoDeploy is enabled, deploys appBase… (no CVSS, org.apache.tomcat:tomcat)
- [CVE-2009-2902](https://cve.now/CVE-2009-2902.md): Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to delete… (no CVSS, org.apache.tomcat:tomcat)
- [CVE-2009-4183](https://cve.now/CVE-2009-4183.md): Unspecified vulnerability in HP OpenView Storage Data Protector 6.00 and 6.10 allows local users to obtain unspecified "access" via… (no CVSS)
- [CVE-2010-0139](https://cve.now/CVE-2010-0139.md): Cisco Unified MeetingPlace 7 before 7.0(2.3) hotfix 5F, 6 before 6.0.639.2, and possibly 5 does not properly validate SQL commands, which… (no CVSS)
- [CVE-2010-0140](https://cve.now/CVE-2010-0140.md): Multiple unspecified vulnerabilities in the web server in Cisco Unified MeetingPlace 7 before 7.0(2.3) hotfix 5F, 6 before 6.0.639.3, and… (no CVSS)
- [CVE-2010-0141](https://cve.now/CVE-2010-0141.md): MeetingTime in Cisco Unified MeetingPlace 6 before MR5, and possibly 5, allows remote attackers to discover usernames, passwords, and… (no CVSS)
- [CVE-2010-0142](https://cve.now/CVE-2010-0142.md): MeetingTime in Cisco Unified MeetingPlace 6 before MR5, and possibly 5, allows remote authenticated users to gain privileges via a… (no CVSS)
- [CVE-2010-0454](https://cve.now/CVE-2010-0454.md): SQL injection vulnerability in cgi/cgilua.exe/sys/start.htm in Publique! 2.3 allows remote attackers to execute arbitrary SQL commands via… (no CVSS)
- [CVE-2010-0455](https://cve.now/CVE-2010-0455.md): Cross-site scripting (XSS) vulnerability in forum/viewtopic.php in PunBB 1.3 allows remote attackers to inject arbitrary web script or… (no CVSS)
- [CVE-2010-0456](https://cve.now/CVE-2010-0456.md): SQL injection vulnerability in the indianpulse Game Server (com\_gameserver) component 1.2 for Joomla! allows remote attackers to execute… (no CVSS)
- [CVE-2010-0457](https://cve.now/CVE-2010-0457.md): SQL injection vulnerability in home.php in magic-portal 2.1 allows remote attackers to execute arbitrary SQL commands via the id parameter. (no CVSS)
- [CVE-2010-0458](https://cve.now/CVE-2010-0458.md): Multiple SQL injection vulnerabilities in NetArt Media Blog System 1.5 allow remote attackers to execute arbitrary SQL commands via the… (no CVSS)
- [CVE-2010-0459](https://cve.now/CVE-2010-0459.md): SQL injection vulnerability in the Mochigames (com\_mochigames) component 0.51 and possibly other versions for Joomla! allows remote… (no CVSS)
- [CVE-2010-0460](https://cve.now/CVE-2010-0460.md): Multiple cross-site scripting (XSS) vulnerabilities in staff/index.php in Kayako SupportSuite 3.60.04 and earlier allow remote… (no CVSS)
- [CVE-2010-0461](https://cve.now/CVE-2010-0461.md): SQL injection vulnerability in the casino (com\_casino) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands… (no CVSS)
- [CVE-2010-0462](https://cve.now/CVE-2010-0462.md): Heap-based buffer overflow in IBM DB2 9.1 before FP9, 9.5 before FP6, and 9.7 before FP2 allows remote authenticated users to have an… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2010-01-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.