21 December 2009

26 results · Feed

• Unscored —
  CVE-2009-4378

  The IPMI dissector in Wireshark 1.2.0 through 1.2.4 on Windows allows remote attackers to cause a denial of service (cr…

  Dec 21, 2009
• Unscored —
  CVE-2009-4035

  The FoFiType1::parse function in fofi/FoFiType1.cc in Xpdf 3.0.0, gpdf 2.8.2, kpdf in kdegraphics 3.3.1, and possibly o…

  poppler xpdf Debian
  Dec 21, 2009
• Unscored —
  CVE-2009-4377

  The (1) SMB and (2) SMB2 dissectors in Wireshark 0.9.0 through 1.2.4 allow remote attackers to cause a denial of servic…

  wireshark Debian
  Dec 21, 2009
• Unscored —
  CVE-2009-4376

  Buffer overflow in the daintree_sna_read function in the Daintree SNA file parser in Wireshark 1.2.0 through 1.2.4 allo…

  wireshark Debian
  Dec 21, 2009
• Unscored —
  CVE-2009-4270

  Stack-based buffer overflow in the errprintf function in base/gsmisc.c in ghostscript 8.64 through 8.70 allows remote a…

  ghostscript Debian
  Dec 21, 2009
• Unscored —
  CVE-2009-4372 Public exploit

  AlienVault Open Source Security Information Management (OSSIM) 2.1.5, and possibly other versions before 2.1.5-4, allow…

  Dec 21, 2009
• Unscored —
  CVE-2009-4365 Public exploit

  Multiple cross-site request forgery (CSRF) vulnerabilities in admin.php in ScriptsEz Ez Blog 1.0 allow remote attackers…

  Dec 21, 2009
• Unscored —
  CVE-2009-4261

  Multiple directory traversal vulnerabilities in the iallocator framework in Ganeti 1.2.4 through 1.2.8, 2.0.0 through 2…

  ganeti Debian
  Dec 21, 2009
• Unscored —
  CVE-2009-4370

  Cross-site scripting (XSS) vulnerability in the Menu module (modules/menu/menu.admin.inc) in Drupal Core 6.x before 6.1…

  Dec 21, 2009
• Unscored —
  CVE-2009-4362

  Multiple buffer overflows in qosmod in IBM AIX 6.1 allow local users to cause a denial of service (application crash) o…

  Dec 21, 2009
• Unscored —
  CVE-2009-4364 Public exploit

  Cross-site scripting (XSS) vulnerability in index.php in ScriptsEz Ez Blog allows remote attackers to inject arbitrary …

  Dec 21, 2009
• Unscored —
  CVE-2009-4142 Public exploit

  The htmlspecialchars function in PHP before 5.2.12 does not properly handle (1) overlong UTF-8 sequences, (2) invalid S…

  Dec 21, 2009
• Unscored —
  CVE-2009-4368

  Multiple unspecified vulnerabilities in Centreon before 2.1.4 have unknown impact and attack vectors in the (1) ping to…

  Dec 21, 2009
• Unscored —
  CVE-2009-4367 Public exploit

  The Staging Webservice ("sitecore modules/staging/service/api.asmx") in Sitecore Staging Module 5.4.0 rev.080625 and ea…

  Dec 21, 2009
• Unscored —
  CVE-2009-4374

  Directory traversal vulnerability in repository/repository_attachment.php in AlienVault Open Source Security Informatio…

  Dec 21, 2009
• Unscored —
  CVE-2009-4375 Public exploit

  SQL injection vulnerability in repository/repository_attachment.php in AlienVault Open Source Security Information Mana…

  Dec 21, 2009
• Unscored —
  CVE-2009-4361

  Multiple buffer overflows in qoslist in IBM AIX 6.1 allow local users to cause a denial of service (application crash) …

  Dec 21, 2009
• Unscored —
  CVE-2009-4143

  PHP before 5.2.12 does not properly handle session data, which has unspecified impact and attack vectors related to (1)…

  Dec 21, 2009
• Unscored —
  CVE-2009-4363

  Text_Filter/lib/Horde/Text/Filter/Xss.php in Horde Application Framework before 3.3.6, Horde Groupware before 1.2.5, an…

  Dec 21, 2009
• Unscored —
  CVE-2009-4373

  Unrestricted file upload vulnerability in repository/repository_attachment.php in AlienVault Open Source Security Infor…

  Dec 21, 2009
• Unscored —
  CVE-2009-4371

  Cross-site scripting (XSS) vulnerability in the Locale module (modules/locale/locale.module) in Drupal Core 6.14, and p…

  Dec 21, 2009
• Unscored —
  CVE-2009-4366 Public exploit

  Cross-site scripting (XSS) vulnerability in index.php in ScriptsEz Ez Blog 1.0 allows remote attackers to inject arbitr…

  Dec 21, 2009
• Unscored —
  CVE-2009-4369

  Cross-site scripting (XSS) vulnerability in the Contact module (modules/contact/contact.admin.inc or modules/contact/co…

  Dec 21, 2009
• Unscored —
  CVE-2009-3701 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in the administration interface in Horde Application Framework befo…

  Dec 21, 2009
• Unscored —
  CVE-2009-3792

  Directory traversal vulnerability in Adobe Flash Media Server (FMS) before 3.5.3 allows attackers to load arbitrary DLL…

  Dec 21, 2009
• High 7.5
  CVE-2009-3791

  Unspecified vulnerability in Adobe Flash Media Server (FMS) before 3.5.3 allows attackers to cause a denial of service …

  Dec 21, 2009