# CVEs published 2010-01-25

18 CVEs were published on January 25, 2010: 0 critical, 1 high. Days are UTC.

- [CVE-2005-4884](https://cve.now/CVE-2005-4884.md): Unspecified vulnerability in the Oracle OLAP component in Oracle Database Server 10.1.0.4 (10g) allows remote authenticated attackers to aff (no CVSS)
- [CVE-2008-7253](https://cve.now/CVE-2008-7253.md): The default configuration of the web server in IBM Lotus Domino Server, possibly 6.0 through 8.0, enables the HTTP TRACE method, which makes (no CVSS)
- [CVE-2009-4241](https://cve.now/CVE-2009-4241.md): Heap-based buffer overflow in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through 11.0 (no CVSS)
- [CVE-2009-4242](https://cve.now/CVE-2009-4242.md): Heap-based buffer overflow in the CGIFCodec::GetPacketBuffer function in datatype/image/gif/common/gifcodec.cpp in RealNetworks RealPlayer 1 (no CVSS)
- [CVE-2009-4243](https://cve.now/CVE-2009-4243.md): RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through 11.0.4, RealPlayer Enterprise, Mac (no CVSS)
- [CVE-2009-4244](https://cve.now/CVE-2009-4244.md): Heap-based buffer overflow in RealNetworks RealPlayer 10; RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741; RealPlayer 11 11.0.0 through 11.0 (no CVSS)
- [CVE-2009-4245](https://cve.now/CVE-2009-4245.md): Heap-based buffer overflow in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through 11.0 (no CVSS)
- [CVE-2009-4246](https://cve.now/CVE-2009-4246.md): Stack-based buffer overflow in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through 11. (no CVSS)
- [CVE-2009-4247](https://cve.now/CVE-2009-4247.md): Stack-based buffer overflow in protocol/rtsp/rtspclnt.cpp in RealNetworks RealPlayer 10; RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741; Re (no CVSS)
- [CVE-2009-4248](https://cve.now/CVE-2009-4248.md): Buffer overflow in the RTSPProtocol::HandleSetParameterRequest function in client/core/rtspprotocol.cpp in RealNetworks RealPlayer 10, RealP (no CVSS)
- [CVE-2009-4257](https://cve.now/CVE-2009-4257.md): Heap-based buffer overflow in datatype/smil/common/smlpkt.cpp in smlrender.dll in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 th (no CVSS)
- [CVE-2010-0383](https://cve.now/CVE-2010-0383.md): Tor before 0.2.1.22, and 0.2.2.x before 0.2.2.7-alpha, uses deprecated identity keys for certain directory authorities, which makes it easie (no CVSS)
- [CVE-2010-0384](https://cve.now/CVE-2010-0384.md): Tor 0.2.2.x before 0.2.2.7-alpha, when functioning as a directory mirror, does not prevent logging of the client IP address upon detection o (no CVSS)
- [CVE-2010-0385](https://cve.now/CVE-2010-0385.md): Tor before 0.2.1.22, and 0.2.2.x before 0.2.2.7-alpha, when functioning as a bridge directory authority, allows remote attackers to obtain s (no CVSS)
- [CVE-2010-0386](https://cve.now/CVE-2010-0386.md): The default configuration of Sun Java System Application Server 7 and 7 2004Q2 enables the HTTP TRACE method, which makes it easier for remo (CVSS 8.1)
- [CVE-2010-0387](https://cve.now/CVE-2010-0387.md): Multiple heap-based buffer overflows in (1) webservd and (2) the admin server in Sun Java System Web Server 7.0 Update 7 allow remote attack (no CVSS)
- [CVE-2010-0388](https://cve.now/CVE-2010-0388.md): Format string vulnerability in the WebDAV implementation in webservd in Sun Java System Web Server 7.0 Update 6 allows remote attackers to c (no CVSS)
- [CVE-2010-0389](https://cve.now/CVE-2010-0389.md): The admin server in Sun Java System Web Server 7.0 Update 6 allows remote attackers to cause a denial of service (NULL pointer dereference a (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-01-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.