Skip to content
OpenAdvisories

Archive

20 November 2009

Vulnerabilities first published on this day (UTC), newest first.

← October 2009 2009 / November /20 December 2009 →
  1. 1 
  2. 220
  3. 36
  4. 417
  5. 514
  6. 611
  7. 7 
  8. 8 
  9. 924
  10. 1029
  11. 1115
  12. 128
  13. 1312
  14. 14 
  15. 15 
  16. 1615
  17. 177
  18. 1813
  19. 194
  20. 2020
  21. 21 
  22. 22 
  23. 2310
  24. 2425
  25. 259
  26. 26 
  27. 2721
  28. 2819
  29. 29 
  30. 309
All Critical High Medium Low Exploited only Public exploit

20 results · Feed

  • Unscored —
    CVE-2005-4883

    Race condition in Philippe Jounin Tftpd32 before 2.80 allows remote attackers to cause a denial of service (daemon cras…

  • Unscored —
    CVE-2005-4882

    tftpd in Philippe Jounin Tftpd32 2.74 and earlier, as used in Wyse Simple Imager (WSI) and other products, allows remot…

  • Unscored —
    CVE-2009-4043

    Cross-site scripting (XSS) vulnerability in the AddToAny module 5.x before 5.x-2.4 and 6.x before 6.x-2.4 for Drupal al…

  • Unscored —
    CVE-2009-4040

    Cross-site scripting (XSS) vulnerability in phpMyFAQ before 2.0.17 and 2.5.x before 2.5.2, when used with Internet Expl…

  • Unscored —
    CVE-2009-4045

    Multiple SQL injection vulnerabilities in FrontAccounting (FA) before 2.1.7 allow remote attackers to execute arbitrary…

  • Unscored —
    CVE-2009-4041

    UseBB 1.0.9 before 1.0.10 allows remote attackers to cause a denial of service (infinite loop) via crafted BBCode tags.

  • Unscored —
    CVE-2009-4039 Public exploit

    Cross-site scripting (XSS) vulnerability in Piwigo before 2.0.6 allows remote attackers to inject arbitrary web script …

  • Unscored —
    CVE-2009-4038

    Multiple cross-site scripting (XSS) vulnerabilities in NCH Software Axon Virtual PBX 2.10 and 2.11 allow remote attacke…

  • Unscored —
    CVE-2009-4044

    The Web Services module 6.x for Drupal does not perform the expected access control, which allows remote attackers to m…

  • Unscored —
    CVE-2009-4046

    Multiple SQL injection vulnerabilities in FrontAccounting (FA) 2.2.x before 2.2 RC allow remote attackers to execute ar…

  • Unscored —
    CVE-2009-4042

    Cross-site scripting (XSS) vulnerability in the RootCandy theme 6.x before 6.x-1.5 for Drupal allows remote attackers t…

  • Unscored —
    CVE-2009-4037

    Multiple SQL injection vulnerabilities in FrontAccounting (FA) before 2.1.7, and 2.2.x before 2.2 RC, allow remote atta…

  • Unscored —
    CVE-2009-3895

    Heap-based buffer overflow in the exif_entry_fix function (aka the tag fixup routine) in libexif/exif-entry.c in libexi…

    libexif libexif Debian Alpine
  • Unscored —
    CVE-2009-3386

    Template.pm in Bugzilla 3.3.2 through 3.4.3 and 3.5 through 3.5.1 allows remote attackers to discover the alias of a pr…

  • Unscored —
    CVE-2009-3842

    Unspecified vulnerability on the HP Color LaserJet M3530 Multifunction Printer with firmware 05.058.4 and the Color Las…

  • Unscored —
    CVE-2009-3080

    Array index error in the gdth_read_event function in drivers/scsi/gdth.c in the Linux kernel before 2.6.32-rc8 allows l…

  • Unscored —
    CVE-2009-4006 Public exploit EPSS 83%

    Stack-based buffer overflow in the TEA decoding algorithm in RhinoSoft Serv-U FTP server 7.0.0.1, 9.0.0.5, and other ve…

  • Unscored —
    CVE-2009-4005

    The collect_rx_frame function in drivers/isdn/hisax/hfc_usb.c in the Linux kernel before 2.6.32-rc7 allows attackers to…

  • Unscored —
    CVE-2009-4004

    Buffer overflow in the kvm_vcpu_ioctl_x86_setup_mce function in arch/x86/kvm/x86.c in the KVM subsystem in the Linux ke…

  • Unscored —
    CVE-2009-3553

    Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in schedu…

    cups Debian