Skip to content
OpenAdvisories

Archive

8 December 2009

Vulnerabilities first published on this day (UTC), newest first.

21 results · Feed

  • Unscored —
    CVE-2009-1569 Public exploit EPSS 38%

    Multiple stack-based buffer overflows in Novell iPrint Client 4.38, 5.30, and possibly other versions before 5.32 allow…

  • Unscored —
    CVE-2009-1568 Public exploit EPSS 32%

    Stack-based buffer overflow in ienipp.ocx in Novell iPrint Client 5.30, and possibly other versions before 5.32, allows…

  • Unscored —

    The ip_frag_reasm function in net/ipv4/ip_fragment.c in the Linux kernel 2.6.32-rc8, and 2.6.29 and later versions befo…

  • Unscored —

    The process function in data/class/pages/admin/customer/LC_Page_Admin_Customer_SearchCustomer.php in EC-CUBE Ver2 2.4.0…

  • Unscored —
    CVE-2009-3844 Public exploit EPSS 74%

    Stack-based buffer overflow in the OmniInet process in HP OpenView Data Protector Application Recovery Manager 5.50 and…

  • Unscored —

    Multiple stack-based buffer overflows in src/Task.cc in the FastCGI program in IIPImage Server before 0.9.8 might allow…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in modules/mod_yj_whois.php in the YJ Whois component 1.0x and 1.5.x for Jooml…

  • Unscored —

    acpid 1.0.4 sets an unrestrictive umask, which might allow local users to leverage weak permissions on /var/log/acpid, …

  • Unscored —
    CVE-2009-4231 Public exploit

    Directory traversal vulnerability in as/lib/plugins.php in SweetRice 0.5.3 and earlier allows remote attackers to inclu…

  • Unscored —
    CVE-2009-4234 Public exploit

    Cross-site scripting (XSS) vulnerability in loginpages/error_user.shtml on the Micronet Network Access Controller SP191…

  • Unscored —

    The Kide Shoutbox (com_kide) component 0.4.6 for Joomla! does not properly perform authentication, which allows remote …

  • Unscored —
    CVE-2009-4229 Public exploit

    Multiple SQL injection vulnerabilities in ActiveWebSoftwares Active Bids allow remote attackers to execute arbitrary SQ…

  • Unscored —

    A certain Red Hat patch for acpid 1.0.4 effectively triggers a call to the open function with insufficient arguments, w…

  • Unscored —

    Race condition in the IP module in the kernel in Sun OpenSolaris snv_106 through snv_124 allows remote attackers to cau…

  • Unscored —

    Stack consumption vulnerability in u_bound.c in Xfig 3.2.5b and earlier allows remote attackers to cause a denial of se…

  • Unscored —
    CVE-2009-4227 Public exploit EPSS 11%

    Stack-based buffer overflow in the read_1_3_textobject function in f_readold.c in Xfig 3.2.5b and earlier, and in the r…

  • Unscored —
    CVE-2009-4225 Public exploit EPSS 31%

    Stack-based buffer overflow in the PestPatrol ActiveX control (ppctl.dll) 5.6.7.9 in CA eTrust PestPatrol allows remote…

  • Unscored —
    CVE-2009-3586 Public exploit

    Off-by-one error in src/http.c in CoreHTTP 0.5.3.1 and earlier allows remote attackers to cause a denial of service or …

  • Unscored —

    Stack-based buffer overflow in the GetUID function in src-IL/src/il_dicom.c in DevIL 1.7.8 allows remote attackers to c…

  • Unscored —

    Java for Mac OS X 10.5 before Update 6 and 10.6 before Update 1 accepts expired certificates for applets, which makes i…

  • Unscored —

    Feature Pack for Communications Enabled Applications (CEA) before 1.0.0.1 for IBM WebSphere Application Server 7.0.0.7 …