23 December 2009

16 results · Feed

• High 7.5
  CVE-2009-4405

  Trac is vulnerable to improper policy checks and missing 'raw' role check in docutils

  Multiple unspecified vulnerabilities in Trac before 0.11.6 have unknown impact and attack vectors, possibly related to (1) "policy checks in report results when using alternate formats" or (2) a "check for the 'raw' role that is missing in docutils < 0.6."

  trac trac Debian PyPI
  Dec 23, 2009
• Unscored —
  CVE-2009-4407

  Multiple cross-site request forgery (CSRF) vulnerabilities in PyForum 1.0.3 and possibly earlier versions, and possibly…

  Dec 23, 2009
• Unscored —
  CVE-2009-4409

  The (1) CHAP and (2) MS-CHAP-V2 authentication capabilities in the PPP Access Concentrator (PPPAC) function in Internet…

  Dec 23, 2009
• Unscored —
  CVE-2009-4408

  Multiple cross-site scripting (XSS) vulnerabilities in models.parser in PyForum 1.0.3 and possibly earlier versions, an…

  Dec 23, 2009
• Unscored —
  CVE-2009-4406

  Cross-site scripting (XSS) vulnerability in Forms/login1 in American Power Conversion (APC) Switched Rack PDU AP7932 B2…

  Dec 23, 2009
• Unscored —
  CVE-2009-4145

  nm-connection-editor in NetworkManager (NM) 0.7.x exports connection objects over D-Bus upon actions in the connection …

  network-manager-applet Debian
  Dec 23, 2009
• Unscored —
  CVE-2009-4144

  NetworkManager (NM) 0.7.2 does not ensure that the configured Certification Authority (CA) certificate file for a (1) W…

  network-manager-applet Debian
  Dec 23, 2009
• Unscored —
  CVE-2009-4133

  Condor 6.5.4 through 7.2.4, 7.3.x, and 7.4.0, as used in MRG, Grid for MRG, and Grid Execute Node for MRG, allows remot…

  Dec 23, 2009
• Unscored —
  CVE-2009-4403 Public exploit

  Cross-site scripting (XSS) vulnerability in index.php in Rumba XML 1.8 allows remote attackers to inject arbitrary web …

  Dec 23, 2009
• Unscored —
  CVE-2009-4404

  Unspecified vulnerability in t-prot (TOFU Protection) before 2.8 allows remote attackers to cause a denial of service v…

  t-prot Debian
  Dec 23, 2009
• Unscored —
  CVE-2009-4402

  The default configuration of SQL-Ledger 2.8.24 allows remote attackers to perform unspecified administrative operations…

  sql-ledger sql-ledger Debian Ubuntu
  Dec 23, 2009
• Unscored —
  CVE-2009-3582

  Multiple SQL injection vulnerabilities in the delete subroutine in SQL-Ledger 2.8.24 allow remote authenticated users t…

  sql-ledger sql-ledger Debian Ubuntu
  Dec 23, 2009
• Unscored —
  CVE-2009-3580

  Cross-site request forgery (CSRF) vulnerability in am.pl in SQL-Ledger 2.8.24 allows remote attackers to hijack the aut…

  sql-ledger sql-ledger Debian Ubuntu
  Dec 23, 2009
• Unscored —
  CVE-2009-3581

  Multiple cross-site scripting (XSS) vulnerabilities in SQL-Ledger 2.8.24 allow remote authenticated users to inject arb…

  sql-ledger sql-ledger Debian Ubuntu
  Dec 23, 2009
• Unscored —
  CVE-2009-3584

  SQL-Ledger 2.8.24 does not set the secure flag for the session cookie in an https session, which makes it easier for re…

  sql-ledger sql-ledger Debian Ubuntu
  Dec 23, 2009
• Unscored —
  CVE-2009-3583

  Directory traversal vulnerability in the Preferences menu item in SQL-Ledger 2.8.24 allows remote attackers to include …

  sql-ledger sql-ledger Debian Ubuntu
  Dec 23, 2009