15 January 2009

24 results · Feed

• Unscored —
  CVE-2008-5904 Public exploit

  The rdp_rdp_process_color_pointer_pdu function in rdp/rdp_rdp.c in xrdp 0.4.1 and earlier allows remote RDP servers to …

  xrdp Debian
  Jan 15, 2009
• Unscored —
  CVE-2008-5905

  The web interface plugin in KTorrent before 3.1.4 allows remote attackers to bypass intended access restrictions and up…

  ktorrent Debian
  Jan 15, 2009
• Unscored —
  CVE-2008-5903

  Array index error in the xrdp_bitmap_def_proc function in xrdp/funcs.c in xrdp 0.4.1 and earlier allows remote attacker…

  xrdp Debian
  Jan 15, 2009
• Unscored —
  CVE-2008-5907

  The png_check_keyword function in pngwutil.c in libpng before 1.0.42, and 1.2.x before 1.2.34, might allow context-depe…

  Jan 15, 2009
• Unscored —
  CVE-2008-5906

  Eval injection vulnerability in the web interface plugin in KTorrent before 3.1.4 allows remote attackers to execute ar…

  ktorrent Debian
  Jan 15, 2009
• Unscored —
  CVE-2008-5902

  Buffer overflow in the xrdp_bitmap_invalidate function in xrdp/xrdp_bitmap.c in xrdp 0.4.1 and earlier allows remote at…

  xrdp Debian
  Jan 15, 2009
• Unscored —
  CVE-2009-0123

  Unspecified vulnerability in Apple Safari on Mac OS X 10.5 and Windows allows remote attackers to read arbitrary files …

  Jan 15, 2009
• Unscored —
  CVE-2009-0126

  The decrypt_public function in lib/crypt.cpp in the client in Berkeley Open Infrastructure for Network Computing (BOINC…

  boinc Debian
  Jan 15, 2009
• High 7.5
  CVE-2009-0130

  lib/crypto/c_src/crypto_drv.c in erlang does not properly check the return value from the OpenSSL DSA_do_verify functio…

  erlang Debian
  Jan 15, 2009
• Unscored —
  CVE-2009-0131

  The UFS implementation in the kernel in Sun OpenSolaris snv_29 through snv_90 allows local users to cause a denial of s…

  Jan 15, 2009
• Unscored —
  CVE-2009-0133 Public exploit EPSS 67%

  Buffer overflow in Microsoft HTML Help Workshop 4.74 and earlier allows context-dependent attackers to execute arbitrar…

  Jan 15, 2009
• Unscored —
  CVE-2009-0124

  The tqsl_verifyDataBlock function in openssl_cert.cpp in American Radio Relay League (ARRL) tqsllib 2.0 does not proper…

  Jan 15, 2009
• Unscored —
  CVE-2009-0128

  plugins/crypto/openssl/crypto_openssl.c in Simple Linux Utility for Resource Management (aka SLURM or slurm-llnl) does …

  Jan 15, 2009
• Unscored —
  CVE-2009-0122

  hplip.postinst in HP Linux Imaging and Printing (HPLIP) 2.7.7 and 2.8.2 on Ubuntu allows local users to change the owne…

  Jan 15, 2009
• Unscored —
  CVE-2009-0125

  NOTE: this issue has been disputed by the upstream vendor. nasl/nasl_crypto2.c in the Nessus Attack Scripting Language …

  Jan 15, 2009
• Unscored —
  CVE-2009-0129

  libcrypt-openssl-dsa-perl does not properly check the return value from the OpenSSL DSA_verify and DSA_do_verify functi…

  libcrypt-openssl-dsa-perl Debian
  Jan 15, 2009
• Unscored —
  CVE-2009-0127

  M2Crypto does not properly check the return value from the OpenSSL EVP_VerifyFinal, DSA_verify, ECDSA_verify, DSA_do_ve…

  m2crypto Debian
  Jan 15, 2009
• Unscored —
  CVE-2009-0029

  The ABI in the Linux kernel 2.6.28 and earlier on s390, powerpc, sparc64, and mips 64-bit platforms requires that a 32-…

  Jan 15, 2009
• Unscored —
  CVE-2009-0132

  Integer overflow in the aio_suspend function in Sun Solaris 8 through 10 and OpenSolaris, when 32-bit mode is enabled, …

  Jan 15, 2009
• Unscored —
  CVE-1999-1593 EPSS 18%

  Windows Internet Naming Service (WINS) allows remote attackers to cause a denial of service (connectivity loss) or stea…

  Jan 15, 2009
• Unscored —
  CVE-2009-0120 Public exploit

  The IBM WebSphere DataPower XML Security Gateway XS40 with firmware 3.6.1.5 allows remote attackers to cause a denial o…

  Jan 15, 2009
• Unscored —
  CVE-2009-0121 Public exploit

  SQL injection vulnerability in frontpage.php in Goople CMS 1.8.2 allows remote attackers to execute arbitrary SQL comma…

  Jan 15, 2009
• High 7.5
  CVE-2003-1567 EPSS 25%

  The undocumented TRACK method in Microsoft Internet Information Services (IIS) 5.0 returns the content of the original …

  Jan 15, 2009
• Unscored —
  CVE-2003-1566 Public exploit EPSS 28%

  Microsoft Internet Information Services (IIS) 5.0 does not log requests that use the TRACK method, which allows remote …

  Jan 15, 2009