9 November 2009

24 results · Feed

• Unscored —
  CVE-2009-3882

  Multiple unspecified vulnerabilities in the Swing implementation in Sun Java SE 5.0 before Update 22 and 6 before Updat…

  Nov 9, 2009
• Unscored —
  CVE-2009-3885

  Sun Java SE 5.0 before Update 22 and 6 before Update 17 on Windows allows remote attackers to cause a denial of service…

  Nov 9, 2009
• Unscored —
  CVE-2009-3881

  Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, does not prevent the existence of children of a r…

  Nov 9, 2009
• Unscored —
  CVE-2009-3886

  The Java Web Start implementation in Sun Java SE 6 before Update 17 does not properly handle the interaction between a …

  Nov 9, 2009
• Unscored —
  CVE-2009-3879

  Multiple unspecified vulnerabilities in the (1) X11 and (2) Win32GraphicsDevice subsystems in Sun Java SE 5.0 before Up…

  Nov 9, 2009
• Unscored —
  CVE-2009-3726 Public exploit EPSS 12%

  The nfs4_proc_lock function in fs/nfs/nfs4proc.c in the NFSv4 client in the Linux kernel before 2.6.31-rc4 allows remot…

  Nov 9, 2009
• Unscored —
  CVE-2009-3884

  The TimeZone.getTimeZone method in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, allows remote …

  Nov 9, 2009
• Unscored —
  CVE-2009-3728

  Directory traversal vulnerability in the ICC_Profile.getInstance method in Java Runtime Environment (JRE) in Sun Java S…

  Nov 9, 2009
• Unscored —
  CVE-2009-3729

  Unspecified vulnerability in the TrueType font parsing functionality in Sun Java SE 5.0 before Update 22 and 6 before U…

  Nov 9, 2009
• Unscored —
  CVE-2009-3880

  The Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE 5.0 before Update 22 and 6 before Up…

  Nov 9, 2009
• Unscored —
  CVE-2009-3883

  Multiple unspecified vulnerabilities in the Windows Pluggable Look and Feel (PL&F) feature in the Swing implementation …

  Nov 9, 2009
• Unscored —
  CVE-2009-3922

  Multiple cross-site request forgery (CSRF) vulnerabilities in the User Protect module 5.x before 5.x-1.4 and 6.x before…

  Web / CMS
  Nov 9, 2009
• Unscored —
  CVE-2009-3919

  Cross-site scripting (XSS) vulnerability in the NGP COO/CWP Integration (crmngp) module 6.x before 6.x-1.12 for Drupal …

  Nov 9, 2009
• Unscored —
  CVE-2009-3917

  Cross-site scripting (XSS) vulnerability in the S5 Presentation Player module 6.x-1.x before 6.x-1.1 for Drupal allows …

  Nov 9, 2009
• Unscored —
  CVE-2009-3918

  Cross-site scripting (XSS) vulnerability in the Zoomify module 5.x before 5.x-2.2 and 6.x before 6.x-1.4, a module for …

  Web / CMS
  Nov 9, 2009
• Unscored —
  CVE-2009-3913 Public exploit

  SQL injection vulnerability in summary.php in Xerox Fiery Webtools allows remote attackers to execute arbitrary SQL com…

  Nov 9, 2009
• Unscored —
  CVE-2009-3915

  Cross-site scripting (XSS) vulnerability in the "Separate title and URL" formatter in the Link module 5.x before 5.x-2.…

  Web / CMS
  Nov 9, 2009
• Unscored —
  CVE-2009-3916

  Cross-site scripting (XSS) vulnerability in the Node Hierarchy module 5.x before 5.x-1.3 and 6.x before 6.x-1.3, a modu…

  Web / CMS
  Nov 9, 2009
• Unscored —
  CVE-2009-3914

  Cross-site scripting (XSS) vulnerability in the Temporary Invitation module 5.x before 5.x-2.3 for Drupal allows remote…

  Nov 9, 2009
• Critical 9.8
  CVE-2009-3555 Public exploit EPSS 87%

  Apache Tomcat affected by vulnerability in TLS and SSL protocol

  The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Serv…

  openssl apache2 org.apache.tomcat:tomcat nss Debian Maven
  Nov 9, 2009
• Unscored —
  CVE-2009-3921

  The Smartqueue_og module 5.x before 5.x-1.3 and 6.x before 6.x-1.0-rc3, a module for Drupal, does not verify group-node…

  Web / CMS
  Nov 9, 2009
• Unscored —
  CVE-2009-3911 Public exploit

  Cross-site scripting (XSS) vulnerability in settings.php in TFTgallery 0.13 allows remote attackers to inject arbitrary…

  Nov 9, 2009
• Unscored —
  CVE-2009-3920

  An administration page in the NGP COO/CWP Integration (crmngp) module 6.x before 6.x-1.12 for Drupal does not perform t…

  Nov 9, 2009
• Unscored —
  CVE-2009-3912 Public exploit

  Directory traversal vulnerability in index.php in TFTgallery 0.13 allows remote attackers to read arbitrary files via a…

  Nov 9, 2009