# CVEs published 2009-01-28

37 CVEs were published on January 28, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2008-6005](https://cve.now/CVE-2008-6005.md): Multiple buffer overflows in the CheckUniqueName function in W3C Amaya Web Browser 10.0.1, and possibly other versions including 11.0.1, mig (no CVSS)
- [CVE-2009-0323](https://cve.now/CVE-2009-0323.md): Multiple stack-based buffer overflows in W3C Amaya Web Browser 10.0 and 11.0 allow remote attackers to execute arbitrary code via (1) a long (no CVSS)
- [CVE-2008-3358](https://cve.now/CVE-2008-3358.md): Cross-site scripting (XSS) vulnerability in Web Dynpro (WD) in the SAP NetWeaver portal, when Internet Explorer 7.0.5730 is used, allows rem (no CVSS)
- [CVE-2009-0319](https://cve.now/CVE-2009-0319.md): Unspecified vulnerability in the autofs module in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv\_108, allows local users (no CVSS)
- [CVE-2009-0320](https://cve.now/CVE-2009-0320.md): Microsoft Windows XP, Server 2003 and 2008, and Vista exposes I/O activity measurements of all processes, which allows local users to obtain (no CVSS)
- [CVE-2009-0321](https://cve.now/CVE-2009-0321.md): Apple Safari 3.2.1 (aka AppVer 3.525.27.1) on Windows allows remote attackers to cause a denial of service (infinite loop or access violatio (no CVSS)
- [CVE-2009-0322](https://cve.now/CVE-2009-0322.md): drivers/firmware/dell\_rbu.c in the Linux kernel before 2.6.27.13, and 2.6.28.x before 2.6.28.2, allows local users to cause a denial of serv (no CVSS)
- [CVE-2008-5988](https://cve.now/CVE-2008-5988.md): SQL injection vulnerability in scripts/recruit\_details.php in Jadu CMS for Government allows remote attackers to execute arbitrary SQL comma (no CVSS)
- [CVE-2008-5989](https://cve.now/CVE-2008-5989.md): Directory traversal vulnerability in defs.php in PHPcounter 1.3.2 and earlier, when magic\_quotes\_gpc is disabled, allows remote attackers to (no CVSS)
- [CVE-2008-5990](https://cve.now/CVE-2008-5990.md): Directory traversal vulnerability in connect/init.inc in emergecolab 1.0 allows remote attackers to include and execute arbitrary local file (no CVSS)
- [CVE-2008-5991](https://cve.now/CVE-2008-5991.md): Directory traversal vulnerability in docs.php in MailWatch for MailScanner 1.0.4 and earlier allows remote attackers to include and execute (no CVSS)
- [CVE-2008-5992](https://cve.now/CVE-2008-5992.md): Multiple SQL injection vulnerabilities in Jetik Emlak Sistem A (ESA) 2.0 allow remote attackers to execute arbitrary SQL commands via the Ka (no CVSS)
- [CVE-2008-5993](https://cve.now/CVE-2008-5993.md): Directory traversal vulnerability in image.php in Barcode Generator 1D (barcodegen) 2.0.0 and earlier allows remote attackers to include and (no CVSS)
- [CVE-2008-5994](https://cve.now/CVE-2008-5994.md): Cross-site scripting (XSS) vulnerability in index.php in Check Point Connectra NGX R62 HFA\_01 allows remote attackers to inject arbitrary we (no CVSS)
- [CVE-2008-5995](https://cve.now/CVE-2008-5995.md): Cross-site scripting (XSS) vulnerability in the freeCap CAPTCHA (sr\_freecap) extension before 1.0.4 for TYPO3 allows remote attackers to inj (no CVSS)
- [CVE-2008-5996](https://cve.now/CVE-2008-5996.md): Cross-site scripting (XSS) vulnerability in the Simplenews module 5.x before 5.x-1.5 and 6.x before 6.x-1.0-beta4, a module for Drupal, allo (no CVSS)
- [CVE-2008-5997](https://cve.now/CVE-2008-5997.md): Absolute path traversal vulnerability in admin/fileKontrola/browser.asp in Omnicom Content Platform (OCP) 2.0 allows remote attackers to lis (no CVSS)
- [CVE-2008-5998](https://cve.now/CVE-2008-5998.md): Multiple SQL injection vulnerabilities in the ajax\_checklist\_save function in the Ajax Checklist module 5.x before 5.x-1.1 for Drupal allow (no CVSS)
- [CVE-2008-5999](https://cve.now/CVE-2008-5999.md): Cross-site scripting (XSS) vulnerability in the Ajax Checklist module 5.x before 5.x-1.1 for Drupal allows remote authenticated users, with (no CVSS)
- [CVE-2008-6000](https://cve.now/CVE-2008-6000.md): The GDTdiIcpt.sys driver in G DATA AntiVirus 2008, InternetSecurity 2008, and TotalCare 2008 populates kernel registers with IOCTL 0x8317001 (no CVSS)
- [CVE-2008-6001](https://cve.now/CVE-2008-6001.md): index.php in ADN Forum 1.0b and earlier allows remote attackers to bypass authentication and gain sysop access via a fpusuario cookie compos (no CVSS)
- [CVE-2008-6002](https://cve.now/CVE-2008-6002.md): Absolute path traversal vulnerability in sendfile.php in web-cp 0.5.7, when register\_globals is enabled, allows remote attackers to read arb (no CVSS)
- [CVE-2008-6003](https://cve.now/CVE-2008-6003.md): SQL injection vulnerability in sellers\_othersitem.php in AJ Auction Pro Platinum 2 allows remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2008-6004](https://cve.now/CVE-2008-6004.md): Cross-site scripting (XSS) vulnerability in search.php in AJ Auction Pro Platinum 2 allows remote attackers to inject arbitrary web script o (no CVSS)
- [CVE-2008-5984](https://cve.now/CVE-2008-5984.md): Untrusted search path vulnerability in the Python plugin in Dia 0.96.1, and possibly other versions, allows local users to execute arbitrary (no CVSS)
- [CVE-2008-5985](https://cve.now/CVE-2008-5985.md): Untrusted search path vulnerability in the Python interface in Epiphany 2.22.3, and possibly other versions, allows local users to execute a (no CVSS)
- [CVE-2008-5986](https://cve.now/CVE-2008-5986.md): Untrusted search path vulnerability in the (1) "VST plugin with Python scripting" and (2) "VST plugin for writing score generators in Python (no CVSS)
- [CVE-2008-5987](https://cve.now/CVE-2008-5987.md): Untrusted search path vulnerability in the Python interface in Eye of GNOME (eog) 2.22.3, and possibly other versions, allows local users to (no CVSS)
- [CVE-2009-0314](https://cve.now/CVE-2009-0314.md): Untrusted search path vulnerability in the Python module in gedit allows local users to execute arbitrary code via a Trojan horse Python fil (no CVSS)
- [CVE-2009-0315](https://cve.now/CVE-2009-0315.md): Untrusted search path vulnerability in the Python module in xchat allows local users to execute arbitrary code via a Trojan horse Python fil (no CVSS)
- [CVE-2009-0316](https://cve.now/CVE-2009-0316.md): Untrusted search path vulnerability in src/if\_python.c in the Python interface in Vim before 7.2.045 allows local users to execute arbitrary (no CVSS)
- [CVE-2009-0317](https://cve.now/CVE-2009-0317.md): Untrusted search path vulnerability in the Python language bindings for Nautilus (nautilus-python) allows local users to execute arbitrary c (no CVSS)
- [CVE-2009-0318](https://cve.now/CVE-2009-0318.md): Untrusted search path vulnerability in the GObject Python interpreter wrapper in Gnumeric allows local users to execute arbitrary code via a (no CVSS)
- [CVE-2008-5983](https://cve.now/CVE-2008-5983.md): Untrusted search path vulnerability in the PySys\_SetArgv API function in Python 2.6 and earlier, and possibly later versions, prepends an em (no CVSS)
- [CVE-2009-0313](https://cve.now/CVE-2009-0313.md): winetricks before 20081223 allows local users to overwrite arbitrary files via a symlink attack on the x\_showmenu.txt temporary file. (no CVSS)
- [CVE-2009-0042](https://cve.now/CVE-2009-0042.md): Multiple unspecified vulnerabilities in the Arclib library (arclib.dll) before 7.3.0.15 in the CA Anti-Virus engine for CA Anti-Virus for th (no CVSS)
- [CVE-2009-0312](https://cve.now/CVE-2009-0312.md): Cross-site scripting (XSS) vulnerability in the antispam feature (security/antispam.py) in MoinMoin 1.7 and 1.8.1 allows remote attackers to (no CVSS, moin)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-01-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.