Skip to content
OpenAdvisories

Archive

9 December 2009

Vulnerabilities first published on this day (UTC), newest first.

14 results · Feed

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the Web console in IBM InfoSphere Information Server 8.1 before FP1 allows …

  • Unscored —

    Multiple buffer overflows in unspecified setuid executables in the DataStage subsystem in IBM InfoSphere Information Se…

  • Unscored —
    CVE-2009-0102 EPSS 24%

    Microsoft Project 2000 SR1 and 2002 SP1, and Office Project 2003 SP3, does not properly handle memory allocation for Pr…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the web interface in CA Service Desk 12.1 allows remote attackers to inject…

  • Unscored —
    CVE-2009-3674 EPSS 26%

    Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbi…

  • Unscored —
    CVE-2009-3673 EPSS 25%

    Microsoft Internet Explorer 7 and 8 does not properly handle objects in memory, which allows remote attackers to execut…

  • Unscored —
    CVE-2009-3677 EPSS 22%

    The Internet Authentication Service (IAS) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold an…

  • Unscored —
    CVE-2009-3675 EPSS 25%

    LSASS.exe in the Local Security Authority Subsystem Service (LSASS) in Microsoft Windows 2000 SP4, XP SP2 and SP3, and …

  • High 8.1
    CVE-2009-3671 EPSS 21%

    Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbi…

  • Unscored —
    CVE-2009-2509 EPSS 17%

    Active Directory Federation Services (ADFS) in Microsoft Windows Server 2003 SP2 and Server 2008 Gold and SP2 does not …

  • Unscored —
    CVE-2009-2505 EPSS 32%

    The Internet Authentication Service (IAS) in Microsoft Windows Vista SP2 and Server 2008 SP2 does not properly validate…

  • Unscored —
    CVE-2009-2506 EPSS 31%

    Integer overflow in the text converters in Microsoft Office Word 2002 SP3 and 2003 SP3; Works 8.5; Office Converter Pac…

  • Unscored —

    The single sign-on implementation in Active Directory Federation Services (ADFS) in Microsoft Windows Server 2003 SP2 a…

  • Unscored —
    CVE-2009-3563 Public exploit EPSS 32%

    ntp_request.c in ntpd in NTP before 4.2.4p8, and 4.2.5, allows remote attackers to cause a denial of service (CPU and b…