1 April 2009

28 results · Feed

• Unscored —
  CVE-2008-6576

  Unspecified vulnerability in the "session limitation technique" in the FTP service on Nortel Communications Server 1000…

  Apr 1, 2009
• Unscored —
  CVE-2008-6577

  Nortel MG1000S, Signaling Server, and Call Server on the Communications Server 1000 (CS1K) 4.50.x contain multiple unsp…

  Apr 1, 2009
• Unscored —
  CVE-2008-6575

  Unspecified vulnerability in the SIP server in SIP Enablement Services (SES) in Avaya Communication Manager 3.1.x and 4…

  Apr 1, 2009
• Unscored —
  CVE-2008-6579

  Nortel Communication Server 1000 4.50.x allows remote attackers to obtain Web application structure via unknown vectors…

  Apr 1, 2009
• Unscored —
  CVE-2008-6574

  Unspecified vulnerability in SIP Enablement Services (SES) in Avaya Communication Manager 3.1.x and 4.x allows remote a…

  Apr 1, 2009
• Unscored —
  CVE-2008-6573

  Multiple SQL injection vulnerabilities in Avaya SIP Enablement Services (SES) in Avaya Avaya Communication Manager 3.x,…

  Apr 1, 2009
• Unscored —
  CVE-2008-6578

  Multiple unspecified vulnerabilities in Nortel Communication Server 1000 4.50.x allow remote attackers to execute arbit…

  Apr 1, 2009
• Unscored —
  CVE-2009-1220 Public exploit

  Cross-site scripting (XSS) vulnerability in +webvpn+/index.html in WebVPN on the Cisco Adaptive Security Appliances (AS…

  Apr 1, 2009
• Unscored —
  CVE-2009-1218 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in Sun Calendar Express Web Server in Sun ONE Calendar Server 6.0 a…

  Apr 1, 2009
• Unscored —
  CVE-2009-1219 Public exploit

  Sun Calendar Express Web Server in Sun ONE Calendar Server 6.0 and Sun Java System Calendar Server 6 2004Q2 through 6.3…

  Apr 1, 2009
• Unscored —
  CVE-2007-4475 Public exploit EPSS 40%

  Stack-based buffer overflow in EAI WebViewer3D ActiveX control (webviewer3d.dll) in SAP AG SAPgui before 7.10 Patch Lev…

  Apr 1, 2009
• Unscored —
  CVE-2008-4825

  Multiple buffer overflows in UltraISO 9.3.1.2633, and possibly other versions before 9.3.3.2685, allow user-assisted at…

  Apr 1, 2009
• Unscored —
  CVE-2008-3871

  Multiple format string vulnerabilities in UltraISO 9.3.1.2633, and possibly other versions before 9.3.3.2685, allow use…

  Apr 1, 2009
• Unscored —
  CVE-2009-1216 EPSS 24%

  Multiple unspecified vulnerabilities in (1) unlzh.c and (2) unpack.c in the gzip libraries in Microsoft Windows Server …

  Apr 1, 2009
• Unscored —
  CVE-2009-1217 Public exploit EPSS 16%

  Off-by-one error in the GpFont::SetData function in gdiplus.dll in Microsoft GDI+ on Windows XP allows remote attackers…

  Apr 1, 2009
• Unscored —
  CVE-2009-0686 Public exploit

  The TrendMicro Activity Monitor Module (tmactmon.sys) 2.52.0.1002 in Trend Micro Internet Pro 2008 and 2009, and Securi…

  Apr 1, 2009
• Unscored —
  CVE-2009-0790

  The pluto IKE daemon in Openswan and Strongswan IPsec 2.6 before 2.6.21 and 2.4 before 2.4.14, and Strongswan 4.2 befor…

  strongswan Debian
  Apr 1, 2009
• Unscored —
  CVE-2009-1209 Public exploit EPSS 12%

  Stack-based buffer overflow in W3C Amaya Web Browser 11.1 allows remote attackers to execute arbitrary code via a scrip…

  Apr 1, 2009
• Unscored —
  CVE-2009-1207

  Race condition in the dircmp script in Sun Solaris 8 through 10, and OpenSolaris snv_01 through snv_111, allows local u…

  Apr 1, 2009
• Unscored —
  CVE-2009-1210 Public exploit EPSS 15%

  Format string vulnerability in the PROFINET/DCP (PN-DCP) dissector in Wireshark 1.0.6 and earlier allows remote attacke…

  wireshark Debian
  Apr 1, 2009
• Unscored —
  CVE-2009-1214

  GNU screen 4.0.3 creates the /tmp/screen-exchange temporary file with world-readable permissions, which might allow loc…

  screen Debian
  Apr 1, 2009
• Unscored —
  CVE-2009-1215

  Race condition in GNU screen 4.0.3 allows local users to create or overwrite arbitrary files via a symlink attack on th…

  screen Debian
  Apr 1, 2009
• Unscored —
  CVE-2009-1208

  SQL injection vulnerability in auth2db 0.2.5, and possibly other versions before 0.2.7, uses the addslashes function in…

  Apr 1, 2009
• Unscored —
  CVE-2009-1206

  Unspecified vulnerability in futomi's CGI Cafe Access Analyzer CGI Professional Version 4.11.5 and earlier allows remot…

  Apr 1, 2009
• Unscored —
  CVE-2009-1213

  Cross-site request forgery (CSRF) vulnerability in attachment.cgi in Bugzilla 3.2 before 3.2.3, 3.3 before 3.3.4, and e…

  Apr 1, 2009
• Unscored —
  CVE-2009-1212 Public exploit

  Multiple insecure method vulnerabilities in PRECIS~2.DLL in the PrecisionID Datamatrix ActiveX control (DMATRIXLib.Data…

  Apr 1, 2009
• Unscored —
  CVE-2009-1211

  Blue Coat ProxySG, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote end…

  Apr 1, 2009
• Unscored —
  CVE-2009-1204 Public exploit

  Cross-site scripting (XSS) vulnerability in TikiWiki (Tiki) CMS/Groupware 2.2 allows remote attackers to inject arbitra…

  Apr 1, 2009