30 April 2009

16 results · Feed

• Unscored —
  CVE-2009-1313 Public exploit

  The nsTextFrame::ClearTextRun function in layout/generic/nsTextFrameThebes.cpp in Mozilla Firefox 3.0.9 allows remote a…

  Apr 30, 2009
• Unscored —
  CVE-2009-0663

  Heap-based buffer overflow in the DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module 1.49 for Perl might allow context-depen…

  libdbd-pg-perl Debian
  Apr 30, 2009
• Unscored —
  CVE-2009-1416 Public exploit

  lib/gnutls_pk.c in libgnutls in GnuTLS 2.5.0 through 2.6.5 generates RSA keys stored in DSA structures, instead of the …

  Apr 30, 2009
• Unscored —
  CVE-2009-1348

  The AV engine before DAT 5600 in McAfee VirusScan, Total Protection, Internet Security, SecurityShield for Microsoft IS…

  Apr 30, 2009
• Unscored —
  CVE-2009-1255

  The process_stat function in (1) Memcached before 1.2.8 and (2) MemcacheDB 1.2.0 discloses (a) the contents of /proc/se…

  memcached Debian
  Apr 30, 2009
• Unscored —
  CVE-2009-1339

  Cross-site request forgery (CSRF) vulnerability in TWiki before 4.3.1 allows remote authenticated users to hijack the a…

  Apr 30, 2009
• Unscored —
  CVE-2009-1341

  Memory leak in the dequote_bytea function in quote.c in the DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module before 2.0.0 …

  libdbd-pg-perl Debian
  Apr 30, 2009
• Unscored —
  CVE-2009-1432

  Symantec Reporting Server, as used in Symantec AntiVirus (SAV) Corporate Edition 10.1 before 10.1 MR8 and 10.2 before 1…

  Apr 30, 2009
• Unscored —
  CVE-2009-1295

  Apport before 0.108.4 on Ubuntu 8.04 LTS, before 0.119.2 on Ubuntu 8.10, and before 1.0-0ubuntu5.2 on Ubuntu 9.04 does …

  Apr 30, 2009
• Unscored —
  CVE-2009-1434

  Cross-site request forgery (CSRF) vulnerability in Foswiki before 1.0.5 allows remote attackers to hijack the authentic…

  Apr 30, 2009
• Unscored —
  CVE-2009-1492 Public exploit EPSS 26%

  The getAnnots Doc method in the JavaScript API in Adobe Reader and Acrobat 9.1, 8.1.4, 7.1.1, and earlier allows remote…

  Apr 30, 2009
• Unscored —
  CVE-2009-1494

  The process_stat function in Memcached 1.2.8 discloses memory-allocation statistics in response to a stats malloc comma…

  memcached Debian
  Apr 30, 2009
• Unscored —
  CVE-2009-1415 Public exploit

  lib/pk-libgcrypt.c in libgnutls in GnuTLS before 2.6.6 does not properly handle invalid DSA signatures, which allows re…

  Apr 30, 2009
• Unscored —
  CVE-2009-1291

  Stack-based buffer overflow in TIBCO SmartSockets before 6.8.2, SmartSockets Product Family (aka RTworks) before 4.0.5,…

  Apr 30, 2009
• Unscored —
  CVE-2009-1493 Public exploit EPSS 22%

  The customDictionaryOpen spell method in the JavaScript API in Adobe Reader 9.1, 8.1.4, 7.1.1, and earlier on Linux and…

  Apr 30, 2009
• Unscored —
  CVE-2009-1417

  gnutls-cli in GnuTLS before 2.6.6 does not verify the activation and expiration times of X.509 certificates, which allo…

  Apr 30, 2009