Skip to content
OpenAdvisories

Archive

17 December 2009

Vulnerabilities first published on this day (UTC), newest first.

← November 2009 2009 / December /17 January 2010 →
  1. 17
  2. 235
  3. 312
  4. 421
  5. 5 
  6. 6 
  7. 711
  8. 821
  9. 914
  10. 1036
  11. 116
  12. 12 
  13. 1310
  14. 1412
  15. 156
  16. 1623
  17. 1730
  18. 1814
  19. 19 
  20. 204
  21. 2126
  22. 2225
  23. 2316
  24. 2416
  25. 25 
  26. 26 
  27. 27 
  28. 2823
  29. 2913
  30. 3030
  31. 3129
All Critical High Medium Low Exploited only Public exploit

30 results · Feed

  • Unscored —
    CVE-2009-4353

    The Mobile Edition of TransWARE Active! mail 2003 build 2003.0139.0871 and earlier, and possibly other versions before …

  • Unscored —
    CVE-2009-4354

    TransWARE Active! mail 2003 build 2003.0139.0871 and earlier does not properly secure the session ID in a session cooki…

  • Unscored —
    CVE-2009-4351 Public exploit

    SQL injection vulnerability in ADMIN/loginaction.php in WSCreator 1.1, when magic_quotes_gpc is disabled, allows remote…

  • Unscored —
    CVE-2009-4352

    Multiple cross-site scripting (XSS) vulnerabilities in TransWARE Active! mail 2003 build 2003.0139.0871 and earlier, an…

  • Unscored —
    CVE-2009-4349 Public exploit

    Cross-site request forgery (CSRF) vulnerability in administration/administrators.php in Link Up Gold 5.0 allows remote …

  • Unscored —
    CVE-2009-4343

    Cross-site scripting (XSS) vulnerability in the Training Company Database (trainincdb) extension 0.4.7 for TYPO3 allows…

  • Unscored —
    CVE-2009-4345

    Cross-site scripting (XSS) vulnerability in the vShoutbox (vshoutbox) extension 0.0.1 for TYPO3 allows remote attackers…

  • Unscored —
    CVE-2009-4340

    Cross-site scripting (XSS) vulnerability in the No indexed Search (no_indexed_search) extension 0.2.0 for TYPO3 allows …

  • Unscored —
    CVE-2009-4337

    SQL injection vulnerability in the Diocese of Portsmouth Calendar (pd_calendar) extension 0.4.1 and earlier for TYPO3 a…

  • Unscored —
    CVE-2009-4338

    SQL injection vulnerability in the Flash SlideShow (slideshow) extension 0.2.2 for TYPO3 allows remote attackers to exe…

  • Unscored —
    CVE-2009-4336

    Cross-site scripting (XSS) vulnerability in the Diocese of Portsmouth Calendar (pd_calendar) extension 0.4.1 and earlie…

  • Unscored —
    CVE-2009-4347

    Cross-site scripting (XSS) vulnerability in daloradius-users/login.php in daloRADIUS 0.9-8 and earlier allows remote at…

  • Unscored —
    CVE-2009-4348

    Cross-site scripting (XSS) vulnerability in index.php in Harold Bakker's NewsScript (HB-NS) 1.3 allows remote attackers…

  • Unscored —
    CVE-2009-4344

    Cross-site scripting (XSS) vulnerability in the ZID Linkliste (zid_linklist) extension 1.0.0 for TYPO3 allows remote at…

  • Unscored —
    CVE-2009-4342

    SQL injection vulnerability in the Job Exchange (jobexchange) extension 0.0.3 for TYPO3 allows remote attackers to exec…

  • Unscored —
    CVE-2009-4350

    SQL injection vulnerability in index.php in Arctic Issue Tracker 2.1.1 allows remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2009-4341

    SQL injection vulnerability in the No indexed Search (no_indexed_search) extension 0.2.0 for TYPO3 allows remote attack…

  • Unscored —
    CVE-2009-4339

    SQL injection vulnerability in the Subscription (mf_subscription) extension 0.2.2 for TYPO3 allows remote attackers to …

  • Unscored —
    CVE-2009-4346

    Cross-site scripting (XSS) vulnerability in the Frontend news submitter with RTE (fe_rtenews) extension 1.4.1 and earli…

  • Unscored —
    CVE-2009-3984

    Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to spoof an S…

  • Unscored —
    CVE-2009-3980

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.6, SeaMonkey before 2.0.…

  • Unscored —
    CVE-2009-3388

    liboggplay in Mozilla Firefox 3.5.x before 3.5.6 and SeaMonkey before 2.0.1 might allow context-dependent attackers to …

    liboggplay Debian
  • Unscored —
    CVE-2009-3985

    Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to associate …

  • Unscored —
    CVE-2009-3986

    Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to execute ar…

  • Unscored —
    CVE-2009-3983

    Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to send authe…

  • Unscored —
    CVE-2009-3389

    Integer overflow in libtheora in Xiph.Org Theora before 1.1, as used in Mozilla Firefox 3.5 before 3.5.6 and SeaMonkey …

    libtheora Debian
  • Unscored —
    CVE-2009-3982

    Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox 3.5.x before 3.5.6, SeaMonkey before 2…

  • Unscored —
    CVE-2009-3981

    Unspecified vulnerability in the browser engine in Mozilla Firefox before 3.0.16, SeaMonkey before 2.0.1, and Thunderbi…

  • Unscored —
    CVE-2009-3979

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, Sea…

  • Unscored —
    CVE-2009-3987

    The GeckoActiveXObject function in Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, ge…