Archive
October 2009
Vulnerabilities first published in this month (UTC), newest first.
352 results · Feed
-
Unscored —CVE-2009-3716 Public exploit
Unrestricted file upload vulnerability in admin.php in MCshoutbox 1.1 allows remote authenticated users to execute arbi…
-
Unscored —
Stack-based buffer overflow in the h_handlepeer function in http.cpp in httpdx 1.4, and possibly 1.4.3, allows remote a…
-
Unscored —CVE-2009-3281 Public exploit
The vmx86 kernel extension in VMware Fusion before 2.0.6 build 196839 does not use correct file permissions, which allo…
-
Unscored —
SQL injection vulnerability in the PDF schema generator functionality in phpMyAdmin 2.11.x before 2.11.9.6 and 3.x befo…
-
Unscored —CVE-2009-2733 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Achievo before 1.4.0 allow remote attackers to inject arbitrary …
-
Unscored —
The TimesTenD process in Cisco Unified Presence 1.x, 6.x before 6.0(6), and 7.x before 7.0(4) allows remote attackers t…
-
Unscored —CVE-2009-2734 Public exploit
SQL injection vulnerability in the get_employee function in classweekreport.inc in Achievo before 1.4.0 allows remote a…
-
Unscored —
Stack-based buffer overflow in libcsa.a (aka the calendar daemon library) in IBM AIX 5.x through 5.3.10 and 6.x through…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Symantec SecurityExpressions Audit and Compliance Server 4.1.1, 4.1, and ea…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the console in Symantec SecurityExpressions Audit and Compliance Server 4.1…
-
Unscored —CVE-2009-0091 EPSS 26%
Microsoft .NET Framework 2.0, 2.0 SP1, and 3.5 does not properly enforce a certain type-equality constraint in .NET ver…
-
Unscored —CVE-2009-0090 EPSS 21%
Microsoft .NET Framework 1.0 SP3, 1.1 SP1, and 2.0 SP1 does not properly validate .NET verifiable code, which allows re…
-
Unscored —CVE-2009-0555 EPSS 27%
Microsoft Windows Media Runtime, as used in DirectShow WMA Voice Codec, Windows Media Audio Voice Decoder, and Audio Co…
-
High 8.8
Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7 allows remote attackers to execute a…
-
Unscored —CVE-2009-3126 EPSS 23%
Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, …
-
Unscored —
An unspecified function in the Dalvik API in Android 1.5 and earlier allows remote attackers to cause a denial of servi…
-
Unscored —CVE-2009-2507 EPSS 19%
A certain ActiveX control in the Indexing Service in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 do…
-
High 8.1CVE-2009-2529 EPSS 20%
Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, 7, and 8 does not properly handle argument validation for unspecified v…
-
Unscored —
The kernel in Microsoft Windows Server 2003 SP2 does not properly handle unspecified exceptions when an error condition…
-
Unscored —CVE-2009-2504 EPSS 21%
Multiple integer overflows in unspecified APIs in GDI+ in Microsoft .NET Framework 1.1 SP1, .NET Framework 2.0 SP1 and …
-
Unscored —
The CryptoAPI component in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista G…
-
Unscored —
The com.android.phone process in Android 1.5 CRBxx allows remote attackers to cause a denial of service (application re…
-
Unscored —CVE-2009-2497 EPSS 23%
The Common Language Runtime (CLR) in Microsoft .NET Framework 2.0, 2.0 SP1, 2.0 SP2, 3.5, and 3.5 SP1, and Silverlight …
-
Unscored —CVE-2009-2501 EPSS 27%
Heap-based buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office …
-
Unscored —
Integer overflow in the CryptoAPI component in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 …
-
Unscored —CVE-2009-2531 EPSS 23%
Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attacker…
-
Unscored —CVE-2009-2525 EPSS 23%
Microsoft Windows Media Runtime, as used in DirectShow WMA Voice Codec, Windows Media Audio Voice Decoder, and Audio Co…
-
Unscored —CVE-2009-2518 EPSS 23%
Integer overflow in GDI+ in Microsoft Office XP SP3 allows remote attackers to execute arbitrary code via an Office doc…
-
Unscored —CVE-2009-2500 EPSS 24%
Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, …
-
Unscored —CVE-2009-2530 EPSS 23%
Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attacker…
-
Unscored —CVE-2009-2503 EPSS 22%
GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Windows Server 2003 SP2, Office XP SP3, Office 2003 …
-
Unscored —
Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold and SP2, and Windows 7 RC do not properly process …
-
High 8.1CVE-2009-2502 EPSS 22%
Buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2…
-
Unscored —CVE-2009-2527 EPSS 27%
Heap-based buffer overflow in Microsoft Windows Media Player 6.4 allows remote attackers to execute arbitrary code via …
-
Unscored —CVE-2009-2528 EPSS 20%
GDI+ in Microsoft Office XP SP3 does not properly handle malformed objects in Office Art Property Tables, which allows …
-
Unscored —
Integer underflow in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP…
-
Unscored —CVE-2009-2524 EPSS 28%
Integer underflow in the NTLM authentication feature in the Local Security Authority Subsystem Service (LSASS) in Micro…
-
High 7.1
The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold and SP1, and Server 2008 Gold doe…
-
Unscored —
Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 do not properly validate fields in SMBv2 packet…
-
Unscored —CVE-2009-3694 Public exploit
Directory traversal vulnerability in config/config.php in ezRecipe-Zee 91, when register_globals is enabled, allows rem…