# CVEs published 2009-01-02

24 CVEs were published on January 2, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2008-2381](https://cve.now/CVE-2008-2381.md): SQL injection vulnerability in the create function in common/include/GroupJoinRequest.class in GForge 4.5 and 4.6 allows remote attackers to (no CVSS)
- [CVE-2008-5821](https://cve.now/CVE-2008-5821.md): Memory leak in WebKit.dll in WebKit, as used by Apple Safari 3.2 on Windows Vista SP1, allows remote attackers to cause a denial of service (no CVSS)
- [CVE-2008-5822](https://cve.now/CVE-2008-5822.md): Memory leak in Libxul, as used in Mozilla Firefox 3.0.5 and other products, allows remote attackers to cause a denial of service (memory con (no CVSS)
- [CVE-2008-5823](https://cve.now/CVE-2008-5823.md): An ActiveX control in prtstb06.dll in Microsoft Money 2006, when used with WScript in Windows Script Host (WSH) on Windows Vista, allows rem (no CVSS)
- [CVE-2008-5824](https://cve.now/CVE-2008-5824.md): Heap-based buffer overflow in msadpcm.c in libaudiofile in audiofile 0.2.6 allows context-dependent attackers to cause a denial of service ( (no CVSS)
- [CVE-2008-5825](https://cve.now/CVE-2008-5825.md): The SmartPoster implementation on the Nokia 6131 Near Field Communication (NFC) phone with 05.12 firmware does not properly display the URI (no CVSS)
- [CVE-2008-5826](https://cve.now/CVE-2008-5826.md): The Nokia 6131 Near Field Communication (NFC) phone with 05.12 firmware allows remote attackers to cause a denial of service (device crash) (no CVSS)
- [CVE-2008-5827](https://cve.now/CVE-2008-5827.md): The Nokia 6131 Near Field Communication (NFC) phone with 05.12 firmware automatically installs software upon completing the download of a JA (no CVSS)
- [CVE-2008-5828](https://cve.now/CVE-2008-5828.md): Microsoft Windows Live Messenger Client 8.5.1 and earlier, when MSN Protocol Version 15 (MSNP15) is used over a NAT session, allows remote a (no CVSS)
- [CVE-2006-7236](https://cve.now/CVE-2006-7236.md): The default configuration of xterm on Debian GNU/Linux sid and possibly Ubuntu enables the allowWindowOps resource, which allows user-assist (no CVSS)
- [CVE-2008-5808](https://cve.now/CVE-2008-5808.md): Cross-site scripting (XSS) vulnerability in Six Apart Movable Type Enterprise (MTE) 1.x before 1.56; Movable Type (MT) 3.x before 3.38; and (no CVSS)
- [CVE-2008-5809](https://cve.now/CVE-2008-5809.md): futomi CGI Cafe Access Analyzer CGI Standard 4.0.1 and earlier and Access Analyzer CGI Professional 4.11.3 and earlier use a predictable ses (no CVSS)
- [CVE-2008-5810](https://cve.now/CVE-2008-5810.md): WBPublish (aka WBPublish.exe) in Fujitsu-Siemens WebTransactions 7.0, 7.1, and possibly other versions allows remote attackers to execute ar (no CVSS)
- [CVE-2008-5811](https://cve.now/CVE-2008-5811.md): SQL injection vulnerability in the PaxGallery (com\_paxgallery) component 0.1 for Joomla! allows remote attackers to execute arbitrary SQL co (no CVSS)
- [CVE-2008-5812](https://cve.now/CVE-2008-5812.md): Multiple unspecified vulnerabilities in SPIP 1.8 before 1.8.3b, 1.9 before 1.9.2g, and 2.0 before 2.0.2 have unknown impact and attack vecto (no CVSS)
- [CVE-2008-5813](https://cve.now/CVE-2008-5813.md): SQL injection vulnerability in inc/rubriques.php in SPIP 1.8 before 1.8.3b, 1.9 before 1.9.2g, and 2.0 before 2.0.2 allows remote attackers (no CVSS)
- [CVE-2008-5814](https://cve.now/CVE-2008-5814.md): Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display\_errors is enabled, allows remote attackers to inje (no CVSS)
- [CVE-2008-5815](https://cve.now/CVE-2008-5815.md): SQL injection vulnerability in Acomment.php in phpAlumni allows remote attackers to execute arbitrary SQL commands via the id parameter. (no CVSS)
- [CVE-2008-5816](https://cve.now/CVE-2008-5816.md): SQL injection vulnerability in repository.php in ILIAS 3.7.4 and earlier allows remote attackers to execute arbitrary SQL commands via the r (no CVSS)
- [CVE-2008-5817](https://cve.now/CVE-2008-5817.md): Multiple SQL injection vulnerabilities in index.php in Web Scribble Solutions webClassifieds 2005 allow remote attackers to execute arbitrar (no CVSS)
- [CVE-2008-5818](https://cve.now/CVE-2008-5818.md): Directory traversal vulnerability in index.php in eDreamers eDContainer 2.22, when magic\_quotes\_gpc is disabled, allows remote attackers to (no CVSS)
- [CVE-2008-5819](https://cve.now/CVE-2008-5819.md): Directory traversal vulnerability in eDNews\_archive.php in eDreamers eDNews 2, when magic\_quotes\_gpc is disabled, allows remote attackers to (no CVSS)
- [CVE-2008-5820](https://cve.now/CVE-2008-5820.md): SQL injection vulnerability in eDNews\_view.php in eDreamers eDNews 2 allows remote attackers to execute arbitrary SQL commands via the newsi (no CVSS)
- [CVE-2008-2383](https://cve.now/CVE-2008-2383.md): CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF (aka \\n) characters surrounding a (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-01-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.