Skip to content
OpenAdvisories

Archive

22 July 2009

Vulnerabilities first published on this day (UTC), newest first.

22 results · Feed

  • Unscored —

    The Research In Motion (RIM) BlackBerry 8800 allows remote attackers to cause a denial of service (memory consumption a…

  • Unscored —

    Google Chrome 2.x through 2.0.172 allows remote attackers to cause a denial of service (application crash) via a long U…

  • Unscored —
    CVE-2009-2576 EPSS 15%

    Microsoft Internet Explorer 6.0.2900.2180 and earlier allows remote attackers to cause a denial of service (CPU and mem…

  • Unscored —
    CVE-2009-2464 Public exploit EPSS 13%

    The nsXULTemplateQueryProcessorRDF::CheckIsSeparator function in Mozilla Firefox before 3.0.12, SeaMonkey 2.0a1pre, and…

  • Unscored —

    Mozilla Firefox before 3.0.12 and 3.5 before 3.5.1 allows remote attackers to cause a denial of service (application cr…

  • Unscored —

    Mozilla Firefox before 3.0.12 does not always use XPCCrossOriginWrapper when required during object construction, which…

  • Unscored —

    Integer overflow in Apple CoreGraphics, as used in Safari before 4.0.3, Mozilla Firefox before 3.0.12, and Mac OS X 10.…

  • Unscored —

    Opera 9.52 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption, and applicatio…

  • Unscored —

    The browser engine in Mozilla Firefox before 3.0.12 and Thunderbird allows remote attackers to cause a denial of servic…

  • Unscored —

    The JavaScript engine in Mozilla Firefox before 3.0.12 and Thunderbird allows remote attackers to cause a denial of ser…

  • Unscored —

    Mozilla Firefox before 3.0.12 and Thunderbird allow remote attackers to cause a denial of service (memory corruption an…

  • Unscored —

    Multiple integer overflows in the (1) PL_Base64Decode and (2) PL_Base64Encode functions in nsprpub/lib/libc/src/base64.…

  • Unscored —

    The setTimeout function in Mozilla Firefox before 3.0.12 does not properly preserve object wrapping, which allows remot…

  • Unscored —

    Mozilla Firefox before 3.0.12 does not properly handle an SVG element that has a property with a watch function and an …

  • Unscored —
    CVE-2009-2569 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Verlihub Control Panel (VHCP) 1.7e allow remote attackers to inj…

  • Unscored —
    CVE-2009-2574 Public exploit

    index.php in MiniTwitter 0.2 beta allows remote authenticated users to modify certain options of arbitrary accounts via…

  • Unscored —
    CVE-2009-2568 Public exploit

    Stack-based buffer overflow in Sorinara Streaming Audio Player (SAP) 0.9 allows remote attackers to execute arbitrary c…

  • Unscored —

    Cross-site request forgery (CSRF) vulnerability in the Fivestar module 5.x-1.x before 5.x-1.14 and 6.x-1.x before 6.x-1…

  • Unscored —
    CVE-2009-2571 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in index.php in VerliAdmin 0.3.7 and 0.3.8 allow remote attackers t…

  • Unscored —
    CVE-2009-2567 Public exploit

    SQL injection vulnerability in the Almond Classifieds (com_aclassf) component 5.6.2 for Joomla! allows remote attackers…

  • Unscored —
    CVE-2009-2573 Public exploit

    Multiple SQL injection vulnerabilities in MiniTwitter 0.2 beta, when magic_quotes_gpc is disabled, allow remote authent…

  • Unscored —
    CVE-2009-2570 Public exploit EPSS 12%

    Stack-based buffer overflow in the Symantec.FaxViewerControl.1 ActiveX control in WinFax\DCCFAXVW.DLL in Symantec WinFa…