Skip to content
OpenAdvisories

Archive

16 July 2009

Vulnerabilities first published on this day (UTC), newest first.

17 results · Feed

  • Unscored —
    CVE-2009-2484 Public exploit EPSS 35%

    Stack-based buffer overflow in the Win32AddConnection function in modules/access/smb.c in VideoLAN VLC media player 0.9…

  • Unscored —

    The utaudiod daemon in Sun Ray Server Software (SRSS) 4.0, when Solaris Trusted Extensions is enabled, allows local use…

  • Unscored —

    Use-after-free vulnerability in the frpr_icmp function in the ipfilter (aka IP Filter) subsystem in Sun Solaris 10, and…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in mt-wizard.cgi in Six Apart Movable Type 4.24, and 4.25 when global template…

  • Unscored —

    libprop/prop_object.c in proplib in NetBSD 4.0 and 4.0.1 allows local users to cause a denial of service (NULL pointer …

  • Unscored —

    Unspecified vulnerability in the SCTP implementation in Sun Solaris 10, and OpenSolaris before snv_120, allows remote a…

  • Unscored —

    Unspecified vulnerability in the utaudiod daemon in Sun Ray Server Software (SRSS) 4.0, when Solaris Trusted Extensions…

  • Unscored —
    CVE-2009-2485 Public exploit EPSS 58%

    Stack-based buffer overflow in HT-MP3Player 1.0 allows remote attackers to execute arbitrary code via a long string in …

  • Unscored —

    The pam_unix module in OpenPAM in NetBSD 4.0 before 4.0.2 and 5.0 before 5.0.1 allows local users to change the current…

  • Unscored —

    Unspecified vulnerability in the utdmsession program in Sun Ray Server Software (SRSS) 4.0 allows local users to access…

  • Unscored —

    mt-wizard.cgi in Six Apart Movable Type before 4.261, when global templates are not initialized, allows remote attacker…

  • Unscored —

    Unspecified vulnerability in the NFSv4 module in the kernel in Sun Solaris 10, and OpenSolaris snv_102 through snv_119,…

  • Unscored —

    The personality subsystem in the Linux kernel before 2.6.31-rc3 has a PER_CLEAR_ON_SETID setting that does not clear th…

  • Unscored —
    CVE-2009-2479 Public exploit EPSS 12%

    Mozilla Firefox 3.0.x, 3.5, and 3.5.1 on Windows allows remote attackers to cause a denial of service (uncaught excepti…

  • Unscored —

    Directory traversal vulnerability in the Administration interface in Cisco Customer Response Solutions (CRS) before 7.0…

  • Unscored —
    CVE-2009-2478 Public exploit

    Mozilla Firefox 3.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application cras…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the Administration interface in Cisco Customer Response Solutions (CRS) bef…