# CVEs published 2009-01-08

20 CVEs were published on January 8, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2008-0067](https://cve.now/CVE-2008-0067.md): Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute ar (no CVSS)
- [CVE-2008-3819](https://cve.now/CVE-2008-3819.md): dnsserver in Cisco Application Control Engine Global Site Selector (GSS) before 3.0(1) allows remote attackers to cause a denial of service (no CVSS)
- [CVE-2008-4827](https://cve.now/CVE-2008-4827.md): Multiple heap-based buffer overflows in the AddTab method in the (1) Tab and (2) CTab ActiveX controls in c1sizer.ocx and the (3) TabOne Act (no CVSS)
- [CVE-2008-5874](https://cve.now/CVE-2008-5874.md): Multiple SQL injection vulnerabilities in the Hotel Booking Reservation System (aka HBS) for Joomla! allow remote attackers to execute arbit (no CVSS)
- [CVE-2008-5875](https://cve.now/CVE-2008-5875.md): SQL injection vulnerability in the com\_lowcosthotels component in the Hotel Booking Reservation System (aka HBS) for Joomla! allows remote a (no CVSS)
- [CVE-2008-5876](https://cve.now/CVE-2008-5876.md): Buffer overflow in Irrlicht before 1.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (no CVSS)
- [CVE-2008-5877](https://cve.now/CVE-2008-5877.md): Multiple SQL injection vulnerabilities in Phpclanwebsite (aka PCW) 1.23.3 Fix Pack 5 and earlier, when magic\_quotes\_gpc is disabled, allow r (no CVSS)
- [CVE-2008-5878](https://cve.now/CVE-2008-5878.md): Multiple directory traversal vulnerabilities in Phpclanwebsite (aka PCW) 1.23.3 Fix Pack 5 and earlier, when magic\_quotes\_gpc is disabled an (no CVSS)
- [CVE-2008-5879](https://cve.now/CVE-2008-5879.md): Cross-site scripting (XSS) vulnerability in index.php in Phpclanwebsite (aka PCW) 1.23.3 Fix Pack 5 and earlier, allows remote attackers to (no CVSS)
- [CVE-2008-5880](https://cve.now/CVE-2008-5880.md): admin/auth.php in Gobbl CMS 1.0 allows remote attackers to bypass authentication and gain administrative access by setting the auth cookie t (no CVSS)
- [CVE-2009-0043](https://cve.now/CVE-2009-0043.md): The smmsnmpd service in CA Service Metric Analysis r11.0 through r11.1 SP1 and Service Level Management 3.5 does not properly restrict acces (no CVSS)
- [CVE-2009-0070](https://cve.now/CVE-2009-0070.md): Integer signedness error in Apple Safari allows remote attackers to read the contents of arbitrary memory locations, cause a denial of servi (no CVSS)
- [CVE-2009-0071](https://cve.now/CVE-2009-0071.md): Mozilla Firefox 3.0.5 and earlier 3.0.x versions, when designMode is enabled, allows remote attackers to cause a denial of service (NULL poi (no CVSS)
- [CVE-2009-0072](https://cve.now/CVE-2009-0072.md): Microsoft Internet Explorer 6.0 through 8.0 beta2 allows remote attackers to cause a denial of service (application crash) via an onload=scr (no CVSS)
- [CVE-2008-5868](https://cve.now/CVE-2008-5868.md): Stack-based buffer overflow in IntelliTamper 2.07 and 2.08 allows user-assisted attackers to execute arbitrary code via a long ProxyLogin va (no CVSS)
- [CVE-2008-5869](https://cve.now/CVE-2008-5869.md): Cross-site scripting (XSS) vulnerability in the Proxim Wireless Tsunami MP.11 2411 with firmware 3.0.3 allows remote authenticated users to (no CVSS)
- [CVE-2008-5870](https://cve.now/CVE-2008-5870.md): FastStone Image Viewer 3.6 allows user-assisted attackers to cause a denial of service (application crash) via a malformed BMP image with la (no CVSS)
- [CVE-2008-5871](https://cve.now/CVE-2008-5871.md): Nortel Multimedia Communication Server (MSC) 5100 3.0.13 does not verify credentials during call placement, which allows remote attackers to (no CVSS)
- [CVE-2008-5872](https://cve.now/CVE-2008-5872.md): Multiple unspecified vulnerabilities in the UNIStim File Transfer Protocol (UFTP) processing in IP Client Manager (IPCM) in Nortel Multimedi (no CVSS)
- [CVE-2008-5873](https://cve.now/CVE-2008-5873.md): Yerba SACphp 6.3 and earlier allows remote attackers to bypass authentication and gain administrative access via a galleta\[sesion\] cookie th (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-01-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.