# CVEs published 2010-01-28

22 CVEs were published on January 28, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2003-1575](https://cve.now/CVE-2003-1575.md): VERITAS File System (VxFS) 3.3.3, 3.4, and 3.5 before MP1 Rolling Patch 02 for Sun Solaris 2.5.1 through 9 does not properly implement inher (no CVSS)
- [CVE-2003-1576](https://cve.now/CVE-2003-1576.md): Buffer overflow in pamverifier in Change Manager (CM) 1.0 for Sun Management Center (SunMC) 3.0 on Solaris 8 and 9 on the sparc platform all (no CVSS)
- [CVE-2004-2765](https://cve.now/CVE-2004-2765.md): Cross-site scripting (XSS) vulnerability in Webmail in Sun ONE Messaging Server 6.1 and iPlanet Messaging Server 5.2 before 5.2hf2.02, when (no CVSS)
- [CVE-2004-2766](https://cve.now/CVE-2004-2766.md): Webmail in Sun ONE Messaging Server 6.1 and iPlanet Messaging Server 5.2 before 5.2hf2.02 allows remote attackers to obtain unspecified "acc (no CVSS)
- [CVE-2005-4885](https://cve.now/CVE-2005-4885.md): Unspecified vulnerability on certain Sun StorEdge 6130 (SE6130) Controller Arrays allows remote attackers to delete data via unknown vectors (no CVSS)
- [CVE-2009-2693](https://cve.now/CVE-2009-2693.md): Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to create or overwr (no CVSS, org.apache.tomcat:tomcat)
- [CVE-2009-2901](https://cve.now/CVE-2009-2901.md): The autodeployment process in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20, when autoDeploy is enabled, deploys appBase files (no CVSS, org.apache.tomcat:tomcat)
- [CVE-2009-2902](https://cve.now/CVE-2009-2902.md): Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to delete work-dire (no CVSS, org.apache.tomcat:tomcat)
- [CVE-2009-4183](https://cve.now/CVE-2009-4183.md): Unspecified vulnerability in HP OpenView Storage Data Protector 6.00 and 6.10 allows local users to obtain unspecified "access" via unknown (no CVSS)
- [CVE-2010-0139](https://cve.now/CVE-2010-0139.md): Cisco Unified MeetingPlace 7 before 7.0(2.3) hotfix 5F, 6 before 6.0.639.2, and possibly 5 does not properly validate SQL commands, which al (no CVSS)
- [CVE-2010-0140](https://cve.now/CVE-2010-0140.md): Multiple unspecified vulnerabilities in the web server in Cisco Unified MeetingPlace 7 before 7.0(2.3) hotfix 5F, 6 before 6.0.639.3, and po (no CVSS)
- [CVE-2010-0141](https://cve.now/CVE-2010-0141.md): MeetingTime in Cisco Unified MeetingPlace 6 before MR5, and possibly 5, allows remote attackers to discover usernames, passwords, and unspec (no CVSS)
- [CVE-2010-0142](https://cve.now/CVE-2010-0142.md): MeetingTime in Cisco Unified MeetingPlace 6 before MR5, and possibly 5, allows remote authenticated users to gain privileges via a modified (no CVSS)
- [CVE-2010-0454](https://cve.now/CVE-2010-0454.md): SQL injection vulnerability in cgi/cgilua.exe/sys/start.htm in Publique! 2.3 allows remote attackers to execute arbitrary SQL commands via t (no CVSS)
- [CVE-2010-0455](https://cve.now/CVE-2010-0455.md): Cross-site scripting (XSS) vulnerability in forum/viewtopic.php in PunBB 1.3 allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2010-0456](https://cve.now/CVE-2010-0456.md): SQL injection vulnerability in the indianpulse Game Server (com\_gameserver) component 1.2 for Joomla! allows remote attackers to execute arb (no CVSS)
- [CVE-2010-0457](https://cve.now/CVE-2010-0457.md): SQL injection vulnerability in home.php in magic-portal 2.1 allows remote attackers to execute arbitrary SQL commands via the id parameter. (no CVSS)
- [CVE-2010-0458](https://cve.now/CVE-2010-0458.md): Multiple SQL injection vulnerabilities in NetArt Media Blog System 1.5 allow remote attackers to execute arbitrary SQL commands via the (1) (no CVSS)
- [CVE-2010-0459](https://cve.now/CVE-2010-0459.md): SQL injection vulnerability in the Mochigames (com\_mochigames) component 0.51 and possibly other versions for Joomla! allows remote attacker (no CVSS)
- [CVE-2010-0460](https://cve.now/CVE-2010-0460.md): Multiple cross-site scripting (XSS) vulnerabilities in staff/index.php in Kayako SupportSuite 3.60.04 and earlier allow remote authenticated (no CVSS)
- [CVE-2010-0461](https://cve.now/CVE-2010-0461.md): SQL injection vulnerability in the casino (com\_casino) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands v (no CVSS)
- [CVE-2010-0462](https://cve.now/CVE-2010-0462.md): Heap-based buffer overflow in IBM DB2 9.1 before FP9, 9.5 before FP6, and 9.7 before FP2 allows remote authenticated users to have an unspec (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-01-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.