# CVEs published 2009-01-26

14 CVEs were published on January 26, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2008-5965](https://cve.now/CVE-2008-5965.md): Directory traversal vulnerability in index.php in LokiCMS 0.3.4 and earlier, when magic\_quotes\_gpc is disabled, allows remote attackers to c (no CVSS)
- [CVE-2008-5966](https://cve.now/CVE-2008-5966.md): globsy\_edit.php in Globsy 1.0 and earlier allows remote attackers to create or overwrite arbitrary files via a filename in the file paramete (no CVSS)
- [CVE-2008-5967](https://cve.now/CVE-2008-5967.md): admin/index.php in PHP iCalendar 2.3.4, 2.24, and earlier does not require administrative authentication for an addupdate action, which allo (no CVSS)
- [CVE-2008-5968](https://cve.now/CVE-2008-5968.md): Directory traversal vulnerability in print.php in PHP iCalendar 2.24 and earlier allows remote attackers to include and execute arbitrary lo (no CVSS)
- [CVE-2009-0275](https://cve.now/CVE-2009-0275.md): Static code injection vulnerability in admin.php in Ryneezy phoSheezy 0.2 allows remote authenticated administrators to inject arbitrary PHP (no CVSS)
- [CVE-2009-0270](https://cve.now/CVE-2009-0270.md): Stack-based buffer overflow in PXEService.exe in Fujitsu SystemcastWizard Lite 2.0A, 2.0, 1.9, and earlier allows remote attackers to execut (no CVSS)
- [CVE-2009-0271](https://cve.now/CVE-2009-0271.md): Directory traversal vulnerability in the TFTP service in Fujitsu SystemcastWizard Lite 2.0A, 2.0, 1.9, and earlier allows remote attackers t (no CVSS)
- [CVE-2008-5260](https://cve.now/CVE-2008-5260.md): Heap-based buffer overflow in the CamImage.CamImage.1 ActiveX control in AxisCamControl.ocx in AXIS Camera Control 2.40.0.0 allows remote at (no CVSS)
- [CVE-2009-0264](https://cve.now/CVE-2009-0264.md): Buffer overflow in the Registry Setting Tool in Fujitsu SystemcastWizard Lite 2.0A, 2.0, 1.9, and earlier has unknown impact and attack vect (no CVSS)
- [CVE-2009-0265](https://cve.now/CVE-2009-0265.md): Internet Systems Consortium (ISC) BIND 9.6.0 and earlier does not properly check the return value from the OpenSSL EVP\_VerifyFinal function, (no CVSS)
- [CVE-2009-0266](https://cve.now/CVE-2009-0266.md): Stack-based buffer overflow in Triologic Media Player 8.0.0.0 allows user-assisted remote attackers to execute arbitrary code via a long str (no CVSS)
- [CVE-2009-0267](https://cve.now/CVE-2009-0267.md): libike in Sun Solaris 9 and 10, and OpenSolaris before snv\_100, does not properly check packets, which allows remote attackers to cause a de (no CVSS)
- [CVE-2009-0268](https://cve.now/CVE-2009-0268.md): Race condition in the pseudo-terminal (aka pty) driver module in Sun Solaris 8 through 10, and OpenSolaris before snv\_103, allows local user (no CVSS)
- [CVE-2009-0269](https://cve.now/CVE-2009-0269.md): fs/ecryptfs/inode.c in the eCryptfs subsystem in the Linux kernel before 2.6.28.1 allows local users to cause a denial of service (fault or (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-01-26
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.