Archive
January 2009
Vulnerabilities first published in this month (UTC), newest first.
466 results · Feed
-
Unscored —
An unspecified function in the JavaScript implementation in Google Chrome creates and exposes a "temporary footprint" w…
-
Unscored —
Buffer overflow in VUPlayer 2.49 and earlier allows user-assisted attackers to execute arbitrary code via a long URL in…
-
Unscored —
Buffer overflow in VUPlayer allows user-assisted attackers to have an unknown impact via a long file, as demonstrated b…
-
Unscored —
Certain Fedora build scripts for nfs-utils before 1.1.2-9.fc9 on Fedora 9, and before 1.1.4-6.fc10 on Fedora 10, omit T…
-
Unscored —
libmikmod 3.1.11 through 3.2.0, as used by MikMod and possibly other products, allows user-assisted attackers to cause …
-
Unscored —
Unspecified vulnerability in IBM Hardware Management Console (HMC) 7 release 3.2.0 SP1 has unknown impact and attack ve…
-
Unscored —
libmikmod 3.1.9 through 3.2.0, as used by MikMod, SDL-mixer, and possibly other products, relies on the channel count o…
-
Unscored —
Multiple buffer overflows in RealNetworks Helix Server and Helix Mobile Server 11.x before 11.1.8 and 12.x before 12.0.…
-
Unscored —CVE-2009-0175 Public exploit
Heap-based buffer overflow in Heathco Software MP3 TrackMaker 1.5 allows remote attackers to cause a denial of service …
-
Unscored —CVE-2009-0177 Public exploit
vmwarebase.dll, as used in the vmware-authd service (aka vmware-authd.exe), in VMware Workstation 6.5.1 build 126130, 6…
-
Unscored —
Stack-based buffer overflow in VUPlayer 2.49 allows remote attackers to execute arbitrary code via a long .asf URI in t…
-
Unscored —
Multiple heap-based buffer overflows in the PDF distiller in the Attachment Service in Research in Motion (RIM) BlackBe…
-
Unscored —
The CMsgReader::readRect function in the VNC Viewer component in RealVNC VNC Free Edition 4.0 through 4.1.2, Enterprise…
-
Unscored —
Cisco Unified IP Phone (aka SIP phone) 7960G and 7940G with firmware P0S3-08-9-00 and possibly other versions before 8.…
-
Unscored —CVE-2008-3821 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in the HTTP server in Cisco IOS 11.0 through 12.4 allow remote atta…
-
Unscored —
Cisco ONS 15310-CL, 15310-MA, 15327, 15454, 15454 SDH, and 15600 with software 7.0.2 through 7.0.6, 7.2.2, 8.0.x, 8.5.1…
-
Unscored —
Unspecified vulnerability in the root/boot archive tool in Sun OpenSolaris has unknown impact and local attack vectors,…
-
Unscored —
Unspecified vulnerability in conv_lpd in Sun OpenSolaris has unknown impact and local attack vectors, related to improp…
-
Unscored —
Unspecified vulnerability in txzonemgr in Sun OpenSolaris has unknown impact and local attack vectors, related to a "Te…
-
Unscored —CVE-2009-0172 Public exploit
Unspecified vulnerability in IBM DB2 8 before FP17a, 9.1 before FP6a, and 9.5 before FP3a allows remote attackers to ca…
-
Unscored —
PXE Encryption in Cisco IronPort Encryption Appliance 6.2.4 before 6.2.4.1.1, 6.2.5, 6.2.6, 6.2.7 before 6.2.7.7, 6.3 b…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the administration interface in Cisco IronPort Encryption Appliance …
-
Unscored —
Sun Java System Access Manager 7.1 allows remote authenticated sub-realm administrators to gain privileges, as demonstr…
-
Unscored —
Unspecified vulnerability in the server in IBM DB2 8 before FP17a, 9.1 before FP6a, and 9.5 before FP3a allows remote a…
-
Unscored —
The Sun SPARC Enterprise M4000 and M5000 Server, within a certain range of serial numbers, allows remote attackers to u…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the administration interface in Cisco IronPort Encryption Appliance …
-
Unscored —
Unspecified vulnerability in ppdmgr in Sun Solaris 10 and OpenSolaris snv_61 through snv_106 allows local users to caus…
-
Unscored —
Sun Java System Access Manager 6.3 2005Q1, 7 2005Q4, and 7.1 allows remote authenticated users with console privileges …
-
Unscored —
Unspecified vulnerability in lpadmin in Sun Solaris 10 and OpenSolaris snv_61 through snv_106 allows local users to cau…
-
Unscored —
PXE Encryption in Cisco IronPort Encryption Appliance 6.2.4 before 6.2.4.1.1, 6.2.5, 6.2.6, 6.2.7 before 6.2.7.7, 6.3 b…
-
Unscored —CVE-2009-0134 Public exploit
Insecure method vulnerability in the EasyGrid.SGCtrl.32 ActiveX control in EasyGrid.ocx 1.0.0.1 in AAA EasyGrid ActiveX…
-
Unscored —
Multiple integer overflows in the Audible::Tag::readTag function in metadata/audible/audibletag.cpp in Amarok 1.4.10 th…
-
Unscored —
Multiple array index errors in the Audible::Tag::readTag function in metadata/audible/audibletag.cpp in Amarok 1.4.10 t…
-
Unscored —CVE-2008-5904 Public exploit
The rdp_rdp_process_color_pointer_pdu function in rdp/rdp_rdp.c in xrdp 0.4.1 and earlier allows remote RDP servers to …
-
Unscored —
The web interface plugin in KTorrent before 3.1.4 allows remote attackers to bypass intended access restrictions and up…
-
Unscored —
Array index error in the xrdp_bitmap_def_proc function in xrdp/funcs.c in xrdp 0.4.1 and earlier allows remote attacker…
-
Unscored —
The png_check_keyword function in pngwutil.c in libpng before 1.0.42, and 1.2.x before 1.2.34, might allow context-depe…
-
Unscored —
Eval injection vulnerability in the web interface plugin in KTorrent before 3.1.4 allows remote attackers to execute ar…
-
Unscored —
Buffer overflow in the xrdp_bitmap_invalidate function in xrdp/xrdp_bitmap.c in xrdp 0.4.1 and earlier allows remote at…
-
Unscored —
Unspecified vulnerability in Apple Safari on Mac OS X 10.5 and Windows allows remote attackers to read arbitrary files …