# CVEs published 2009-01-29 28 CVEs were published on January 29, 2009: 0 critical, 0 high. Days are UTC. - [CVE-2009-0341](https://cve.now/CVE-2009-0341.md): The shell32 module in Microsoft Internet Explorer 7.0 on Windows XP SP3 might allow remote attackers to execute arbitrary code via a long VA (no CVSS) - [CVE-2009-0342](https://cve.now/CVE-2009-0342.md): Niels Provos Systrace before 1.6f on the x86\_64 Linux platform allows local users to bypass intended access restrictions by making a 64-bit (no CVSS) - [CVE-2009-0343](https://cve.now/CVE-2009-0343.md): Niels Provos Systrace 1.6f and earlier on the x86\_64 Linux platform allows local users to bypass intended access restrictions by making a 32 (no CVSS) - [CVE-2009-0344](https://cve.now/CVE-2009-0344.md): Unspecified vulnerability in the Embedded Lights Out Manager (ELOM) on the Sun Fire X2100 M2 and X2200 M2 x86 platforms before SP/BMC firmwa (no CVSS) - [CVE-2009-0345](https://cve.now/CVE-2009-0345.md): Unspecified vulnerability in the Embedded Lights Out Manager (ELOM) on the Sun Fire X2100 M2 and X2200 M2 x86 platforms before SP/BMC firmwa (no CVSS) - [CVE-2009-0346](https://cve.now/CVE-2009-0346.md): The IP-in-IP packet processing implementation in the IPsec and IP stacks in the kernel in Sun Solaris 9 and 10, and OpenSolaris snv\_01 thoug (no CVSS) - [CVE-2009-0347](https://cve.now/CVE-2009-0347.md): Open redirect vulnerability in cs.html in the Autonomy (formerly Verity) Ultraseek search engine allows remote attackers to redirect users t (no CVSS) - [CVE-2009-0348](https://cve.now/CVE-2009-0348.md): The login module in Sun Java System Access Manager 6 2005Q1 (aka 6.3), 7 2005Q4 (aka 7.0), and 7.1 responds differently to a failed login at (no CVSS) - [CVE-2009-0349](https://cve.now/CVE-2009-0349.md): Stack-based buffer overflow in FTPShell Server 4.3 allows user-assisted remote attackers to cause a denial of service (persistent daemon cra (no CVSS) - [CVE-2009-0350](https://cve.now/CVE-2009-0350.md): Stack-based buffer overflow in Merak Media Player 3.2 allows remote attackers to execute arbitrary code via a long string in a .m3u playlist (no CVSS) - [CVE-2009-0351](https://cve.now/CVE-2009-0351.md): Stack-based buffer overflow in WFTPSRV.exe in WinFTP 2.3.0 allows remote authenticated users to execute arbitrary code via a long LIST argum (no CVSS) - [CVE-2009-0324](https://cve.now/CVE-2009-0324.md): Multiple SQL injection vulnerabilities in BibCiter 1.4 allow remote attackers to execute arbitrary SQL commands via the (1) idp parameter to (no CVSS) - [CVE-2009-0325](https://cve.now/CVE-2009-0325.md): Directory traversal vulnerability in entries/index.php in Ninja Blog 4.8, when magic\_quotes\_gpc is disabled, allows remote attackers to read (no CVSS) - [CVE-2009-0326](https://cve.now/CVE-2009-0326.md): SQL injection vulnerability in login.php in Dark Age CMS 0.2c beta allows remote attackers to execute arbitrary SQL commands via the (1) use (no CVSS) - [CVE-2009-0327](https://cve.now/CVE-2009-0327.md): SQL injection vulnerability in readbible.php in Free Bible Search PHP Script 1.0 allows remote attackers to execute arbitrary SQL commands v (no CVSS) - [CVE-2009-0328](https://cve.now/CVE-2009-0328.md): ROBS-PROJECTS Digital Sales IPN (aka DS-IPN.NET or DS-IPN Paypal Shop) stores sensitive information under the web root with insufficient acc (no CVSS) - [CVE-2009-0329](https://cve.now/CVE-2009-0329.md): SQL injection vulnerability in the PcCookBook (com\_pccookbook) component for Joomla! allows remote attackers to execute arbitrary SQL comman (no CVSS) - [CVE-2009-0330](https://cve.now/CVE-2009-0330.md): Directory traversal vulnerability in index.php in Simple Content Management System (SCMS) 1 allows remote attackers to include and execute a (no CVSS) - [CVE-2009-0331](https://cve.now/CVE-2009-0331.md): Directory traversal vulnerability in gallery/comment.php in Enhanced Simple PHP Gallery (ESPG) 1.72 allows remote attackers to read arbitrar (no CVSS) - [CVE-2009-0332](https://cve.now/CVE-2009-0332.md): Multiple SQL injection vulnerabilities in AV Book Library before 1.1 allow remote attackers to execute arbitrary SQL commands via unspecifie (no CVSS) - [CVE-2009-0333](https://cve.now/CVE-2009-0333.md): SQL injection vulnerability in the WebAmoeba (WA) Ticket System (com\_waticketsystem) component for Joomla! allows remote attackers to execut (no CVSS) - [CVE-2009-0334](https://cve.now/CVE-2009-0334.md): SQL injection vulnerability in index.asp in Katy Whitton BlogIt! allows remote attackers to execute arbitrary SQL commands via the day param (no CVSS) - [CVE-2009-0335](https://cve.now/CVE-2009-0335.md): Cross-site scripting (XSS) vulnerability in index.asp in Katy Whitton BlogIt! allows remote attackers to inject arbitrary web script or HTML (no CVSS) - [CVE-2009-0336](https://cve.now/CVE-2009-0336.md): Katy Whitton BlogIt! stores sensitive information under the web root with insufficient access control, which allows remote attackers to down (no CVSS) - [CVE-2009-0337](https://cve.now/CVE-2009-0337.md): SQL injection vulnerability in index.asp in Katy Whitton BlogIt! allows remote attackers to execute arbitrary SQL commands via the (1) month (no CVSS) - [CVE-2009-0338](https://cve.now/CVE-2009-0338.md): Cross-site scripting (XSS) vulnerability in inc\_webblogmanager.asp in DMXReady Blog Manager allows remote attackers to inject arbitrary web (no CVSS) - [CVE-2009-0339](https://cve.now/CVE-2009-0339.md): SQL injection vulnerability in inc\_webblogmanager.asp in DMXReady Blog Manager allows remote attackers to execute arbitrary SQL commands via (no CVSS) - [CVE-2009-0340](https://cve.now/CVE-2009-0340.md): Multiple directory traversal vulnerabilities in Simple PHP Newsletter 1.5 allow remote attackers to read arbitrary files via a .. (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2009-01-29 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.