# CVEs published 2010-01-12

14 CVEs were published on January 12, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2009-4536](https://cve.now/CVE-2009-4536.md): drivers/net/e1000/e1000\_main.c in the e1000 driver in the Linux kernel 2.6.32.3 and earlier handles Ethernet frames that exceed the MTU by p (no CVSS)
- [CVE-2009-4537](https://cve.now/CVE-2009-4537.md): drivers/net/r8169.c in the r8169 driver in the Linux kernel 2.6.32.3 and earlier does not properly check the size of an Ethernet frame that (no CVSS)
- [CVE-2009-4538](https://cve.now/CVE-2009-4538.md): drivers/net/e1000e/netdev.c in the e1000e driver in the Linux kernel 2.6.32.3 and earlier does not properly check the size of an Ethernet fr (no CVSS)
- [CVE-2009-4595](https://cve.now/CVE-2009-4595.md): SQL injection vulnerability in index.php in PHP Inventory 1.2 allows remote authenticated users to execute arbitrary SQL commands via the su (no CVSS)
- [CVE-2009-4596](https://cve.now/CVE-2009-4596.md): Cross-site scripting (XSS) vulnerability in index.php in PHP Inventory 1.2 allows remote attackers to inject arbitrary web script or HTML vi (no CVSS)
- [CVE-2009-4597](https://cve.now/CVE-2009-4597.md): Multiple SQL injection vulnerabilities in index.php in PHP Inventory 1.2 allow (1) remote authenticated users to execute arbitrary SQL comma (no CVSS)
- [CVE-2009-4598](https://cve.now/CVE-2009-4598.md): SQL injection vulnerability in the JPhoto (com\_jphoto) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands v (no CVSS)
- [CVE-2009-4599](https://cve.now/CVE-2009-4599.md): Multiple SQL injection vulnerabilities in the JS Jobs (com\_jsjobs) component 1.0.5.6 for Joomla! allow remote attackers to execute arbitrary (no CVSS)
- [CVE-2009-4600](https://cve.now/CVE-2009-4600.md): SQL injection vulnerability in realestate20/loginaction.php in NetArt Media Real Estate Portal 2.0 allows remote attackers to execute arbitr (no CVSS)
- [CVE-2009-4601](https://cve.now/CVE-2009-4601.md): Cross-site scripting (XSS) vulnerability in basic\_search\_result.php in Zeeways ZeeJobsite 3x allows remote attackers to inject arbitrary web (no CVSS)
- [CVE-2009-4602](https://cve.now/CVE-2009-4602.md): Cross-site scripting (XSS) vulnerability in the Randomizer module 5.x through 5.x-1.0 and 6.x through 6.x-1.0, a module for Drupal, allows r (no CVSS)
- [CVE-2009-4603](https://cve.now/CVE-2009-4603.md): Unspecified vulnerability in sapstartsrv.exe in the SAP Kernel 6.40, 7.00, 7.01, 7.10, 7.11, and 7.20, as used in SAP NetWeaver 7.x and SAP (no CVSS)
- [CVE-2009-4604](https://cve.now/CVE-2009-4604.md): PHP remote file inclusion vulnerability in mamboleto.php in the Fernando Soares Mamboleto (com\_mamboleto) component 2.0 RC3 for Joomla! allo (no CVSS)
- [CVE-2010-0278](https://cve.now/CVE-2010-0278.md): A certain ActiveX control in msgsc.14.0.8089.726.dll in Microsoft Windows Live Messenger 2009 build 14.0.8089.726 on Windows Vista and Windo (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-01-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.