# CVEs published 2010-01-14

13 CVEs were published on January 14, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2009-4355](https://cve.now/CVE-2009-4355.md): Memory leak in the zlib\_stateful\_finish function in crypto/comp/c\_zlib.c in OpenSSL 0.9.8l and earlier and 1.0.0 Beta through Beta 4 allows (no CVSS)
- [CVE-2009-4613](https://cve.now/CVE-2009-4613.md): SQL injection vulnerability in realestate20/loginaction.php in NetArt Media Real Estate Portal 2.0 allows remote attackers to execute arbitr (no CVSS)
- [CVE-2010-0184](https://cve.now/CVE-2010-0184.md): The (1) domainutility and (2) domainutilitycmd components in TIBCO Domain Utility in TIBCO Runtime Agent (TRA) before 5.6.2, as used in TIBC (no CVSS)
- [CVE-2010-0310](https://cve.now/CVE-2010-0310.md): Trusted Extensions in Sun Solaris 10 allows local users to gain privileges via vectors related to omission of unspecified libraries from sof (no CVSS)
- [CVE-2010-0311](https://cve.now/CVE-2010-0311.md): Unspecified vulnerability in Sun Java System Identity Manager (aka IdM) 8.1.0.5 and 8.1.0.6, when Sun Java System Access Manager, OpenSSO En (no CVSS)
- [CVE-2010-0312](https://cve.now/CVE-2010-0312.md): The do\_extendedOp function in ibmslapd in IBM Tivoli Directory Server (TDS) 6.2 on Linux allows remote attackers to cause a denial of servic (no CVSS)
- [CVE-2010-0313](https://cve.now/CVE-2010-0313.md): The core\_get\_proxyauth\_dn function in ns-slapd in Sun Java System Directory Server Enterprise Edition 7.0 allows remote attackers to cause a (no CVSS)
- [CVE-2010-0314](https://cve.now/CVE-2010-0314.md): Apple Safari allows remote attackers to discover a redirect's target URL, for the session of a specific user of a web site, by placing the s (no CVSS)
- [CVE-2010-0315](https://cve.now/CVE-2010-0315.md): WebKit before r53607, as used in Google Chrome before 4.0.249.89, allows remote attackers to discover a redirect's target URL, for the sessi (no CVSS)
- [CVE-2009-4182](https://cve.now/CVE-2009-4182.md): Multiple unspecified vulnerabilities in HP Web Jetadmin 10.2, when a remote SQL server is used, allow remote attackers to obtain access to d (no CVSS)
- [CVE-2010-0002](https://cve.now/CVE-2010-0002.md): The /etc/profile.d/60alias.sh script in the Mandriva bash package for Bash 2.05b, 3.0, 3.2, 3.2.48, and 4.0 enables the --show-control-chars (no CVSS)
- [CVE-2010-0014](https://cve.now/CVE-2010-0014.md): System Security Services Daemon (SSSD) before 1.0.1, when the krb5 auth\_provider is configured but the KDC is unreachable, allows physically (no CVSS)
- [CVE-2010-0015](https://cve.now/CVE-2010-0015.md): nis/nss\_nis/nis-pwd.c in the GNU C Library (aka glibc or libc6) 2.7 and Embedded GLIBC (EGLIBC) 2.10.2 adds information from the passwd.adju (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-01-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.