Archive
9 December 2009
Vulnerabilities first published on this day (UTC), newest first.
14 results · Feed
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Web console in IBM InfoSphere Information Server 8.1 before FP1 allows …
-
Unscored —
Multiple buffer overflows in unspecified setuid executables in the DataStage subsystem in IBM InfoSphere Information Se…
-
Unscored —CVE-2009-0102 EPSS 24%
Microsoft Project 2000 SR1 and 2002 SP1, and Office Project 2003 SP3, does not properly handle memory allocation for Pr…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the web interface in CA Service Desk 12.1 allows remote attackers to inject…
-
Unscored —CVE-2009-3674 EPSS 26%
Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbi…
-
Unscored —CVE-2009-3673 EPSS 25%
Microsoft Internet Explorer 7 and 8 does not properly handle objects in memory, which allows remote attackers to execut…
-
Unscored —CVE-2009-3677 EPSS 22%
The Internet Authentication Service (IAS) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold an…
-
Unscored —CVE-2009-3675 EPSS 25%
LSASS.exe in the Local Security Authority Subsystem Service (LSASS) in Microsoft Windows 2000 SP4, XP SP2 and SP3, and …
-
High 8.1CVE-2009-3671 EPSS 21%
Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbi…
-
Unscored —CVE-2009-2509 EPSS 17%
Active Directory Federation Services (ADFS) in Microsoft Windows Server 2003 SP2 and Server 2008 Gold and SP2 does not …
-
Unscored —CVE-2009-2505 EPSS 32%
The Internet Authentication Service (IAS) in Microsoft Windows Vista SP2 and Server 2008 SP2 does not properly validate…
-
Unscored —CVE-2009-2506 EPSS 31%
Integer overflow in the text converters in Microsoft Office Word 2002 SP3 and 2003 SP3; Works 8.5; Office Converter Pac…
-
Unscored —
The single sign-on implementation in Active Directory Federation Services (ADFS) in Microsoft Windows Server 2003 SP2 a…
-
Unscored —
ntp_request.c in ntpd in NTP before 4.2.4p8, and 4.2.5, allows remote attackers to cause a denial of service (CPU and b…