# CVEs published 2009-01-16

21 CVEs were published on January 16, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2008-3818](https://cve.now/CVE-2008-3818.md): Cisco ONS 15310-CL, 15310-MA, 15327, 15454, 15454 SDH, and 15600 with software 7.0.2 through 7.0.6, 7.2.2, 8.0.x, 8.5.1, and 8.5.2 allows re (no CVSS)
- [CVE-2008-3821](https://cve.now/CVE-2008-3821.md): Multiple cross-site scripting (XSS) vulnerabilities in the HTTP server in Cisco IOS 11.0 through 12.4 allow remote attackers to inject arbit (no CVSS)
- [CVE-2008-4444](https://cve.now/CVE-2008-4444.md): Cisco Unified IP Phone (aka SIP phone) 7960G and 7940G with firmware P0S3-08-9-00 and possibly other versions before 8.10 allows remote atta (no CVSS)
- [CVE-2008-4770](https://cve.now/CVE-2008-4770.md): The CMsgReader::readRect function in the VNC Viewer component in RealVNC VNC Free Edition 4.0 through 4.1.2, Enterprise Edition E4.0 through (no CVSS)
- [CVE-2008-5908](https://cve.now/CVE-2008-5908.md): Unspecified vulnerability in the root/boot archive tool in Sun OpenSolaris has unknown impact and local attack vectors, related to a "Tempor (no CVSS)
- [CVE-2008-5909](https://cve.now/CVE-2008-5909.md): Unspecified vulnerability in conv\_lpd in Sun OpenSolaris has unknown impact and local attack vectors, related to improper handling of tempor (no CVSS)
- [CVE-2008-5910](https://cve.now/CVE-2008-5910.md): Unspecified vulnerability in txzonemgr in Sun OpenSolaris has unknown impact and local attack vectors, related to a "Temporary file vulnerab (no CVSS)
- [CVE-2009-0053](https://cve.now/CVE-2009-0053.md): PXE Encryption in Cisco IronPort Encryption Appliance 6.2.4 before 6.2.4.1.1, 6.2.5, 6.2.6, 6.2.7 before 6.2.7.7, 6.3 before 6.3.0.4, and 6. (no CVSS)
- [CVE-2009-0054](https://cve.now/CVE-2009-0054.md): PXE Encryption in Cisco IronPort Encryption Appliance 6.2.4 before 6.2.4.1.1, 6.2.5, 6.2.6, 6.2.7 before 6.2.7.7, 6.3 before 6.3.0.4, and 6. (no CVSS)
- [CVE-2009-0055](https://cve.now/CVE-2009-0055.md): Cross-site request forgery (CSRF) vulnerability in the administration interface in Cisco IronPort Encryption Appliance 6.2.4 before 6.2.4.1. (no CVSS)
- [CVE-2009-0056](https://cve.now/CVE-2009-0056.md): Cross-site request forgery (CSRF) vulnerability in the administration interface in Cisco IronPort Encryption Appliance 6.2.4 before 6.2.4.1. (no CVSS)
- [CVE-2009-0167](https://cve.now/CVE-2009-0167.md): Unspecified vulnerability in lpadmin in Sun Solaris 10 and OpenSolaris snv\_61 through snv\_106 allows local users to cause a denial of servic (no CVSS)
- [CVE-2009-0168](https://cve.now/CVE-2009-0168.md): Unspecified vulnerability in ppdmgr in Sun Solaris 10 and OpenSolaris snv\_61 through snv\_106 allows local users to cause a denial of service (no CVSS)
- [CVE-2009-0169](https://cve.now/CVE-2009-0169.md): Sun Java System Access Manager 7.1 allows remote authenticated sub-realm administrators to gain privileges, as demonstrated by creating the (no CVSS)
- [CVE-2009-0170](https://cve.now/CVE-2009-0170.md): Sun Java System Access Manager 6.3 2005Q1, 7 2005Q4, and 7.1 allows remote authenticated users with console privileges to discover passwords (no CVSS)
- [CVE-2009-0171](https://cve.now/CVE-2009-0171.md): The Sun SPARC Enterprise M4000 and M5000 Server, within a certain range of serial numbers, allows remote attackers to use the manufacturing (no CVSS)
- [CVE-2009-0172](https://cve.now/CVE-2009-0172.md): Unspecified vulnerability in IBM DB2 8 before FP17a, 9.1 before FP6a, and 9.5 before FP3a allows remote attackers to cause a denial of servi (no CVSS)
- [CVE-2009-0173](https://cve.now/CVE-2009-0173.md): Unspecified vulnerability in the server in IBM DB2 8 before FP17a, 9.1 before FP6a, and 9.5 before FP3a allows remote authenticated users to (no CVSS)
- [CVE-2009-0134](https://cve.now/CVE-2009-0134.md): Insecure method vulnerability in the EasyGrid.SGCtrl.32 ActiveX control in EasyGrid.ocx 1.0.0.1 in AAA EasyGrid ActiveX 3.51 allows remote a (no CVSS)
- [CVE-2009-0135](https://cve.now/CVE-2009-0135.md): Multiple integer overflows in the Audible::Tag::readTag function in metadata/audible/audibletag.cpp in Amarok 1.4.10 through 2.0.1 allow rem (no CVSS)
- [CVE-2009-0136](https://cve.now/CVE-2009-0136.md): Multiple array index errors in the Audible::Tag::readTag function in metadata/audible/audibletag.cpp in Amarok 1.4.10 through 2.0.1 allow re (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-01-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.