# CVEs published 2010-01-26

6 CVEs were published on January 26, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2009-4273](https://cve.now/CVE-2009-4273.md): stap-server in SystemTap before 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in stap command-line argu (no CVSS)
- [CVE-2010-0003](https://cve.now/CVE-2010-0003.md): The print\_fatal\_signal function in kernel/signal.c in the Linux kernel before 2.6.32.4 on the i386 platform, when print-fatal-signals is ena (no CVSS)
- [CVE-2010-0006](https://cve.now/CVE-2010-0006.md): The ipv6\_hop\_jumbo function in net/ipv6/exthdrs.c in the Linux kernel before 2.6.32.4, when network namespaces are enabled, allows remote at (no CVSS)
- [CVE-2010-0390](https://cve.now/CVE-2010-0390.md): Unrestricted file upload vulnerability in maxImageUpload/index.php in PHP F1 Max's Image Uploader 1.0, when Apache is not configured to hand (no CVSS)
- [CVE-2010-0391](https://cve.now/CVE-2010-0391.md): Multiple stack-based buffer overflows in Embarcadero Technologies InterBase SMP 2009 9.0.3.437 allow remote attackers to execute arbitrary c (no CVSS)
- [CVE-2010-0392](https://cve.now/CVE-2010-0392.md): Stack-based buffer overflow in vpnconf.exe in TheGreenBow IPSec VPN Client 4.51.001, 4.65.003, and possibly other versions, allows user-assi (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-01-26
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.