Archive
December 2009
Vulnerabilities first published in this month (UTC), newest first.
440 results · Feed
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Menu module (modules/menu/menu.admin.inc) in Drupal Core 6.x before 6.1…
-
Unscored —
Multiple buffer overflows in qosmod in IBM AIX 6.1 allow local users to cause a denial of service (application crash) o…
-
Unscored —CVE-2009-4364 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in ScriptsEz Ez Blog allows remote attackers to inject arbitrary …
-
Unscored —CVE-2009-4142 Public exploit
The htmlspecialchars function in PHP before 5.2.12 does not properly handle (1) overlong UTF-8 sequences, (2) invalid S…
-
Unscored —
Multiple unspecified vulnerabilities in Centreon before 2.1.4 have unknown impact and attack vectors in the (1) ping to…
-
Unscored —CVE-2009-4367 Public exploit
The Staging Webservice ("sitecore modules/staging/service/api.asmx") in Sitecore Staging Module 5.4.0 rev.080625 and ea…
-
Unscored —
Directory traversal vulnerability in repository/repository_attachment.php in AlienVault Open Source Security Informatio…
-
Unscored —CVE-2009-4375 Public exploit
SQL injection vulnerability in repository/repository_attachment.php in AlienVault Open Source Security Information Mana…
-
Unscored —
Multiple buffer overflows in qoslist in IBM AIX 6.1 allow local users to cause a denial of service (application crash) …
-
Unscored —
PHP before 5.2.12 does not properly handle session data, which has unspecified impact and attack vectors related to (1)…
-
Unscored —
Text_Filter/lib/Horde/Text/Filter/Xss.php in Horde Application Framework before 3.3.6, Horde Groupware before 1.2.5, an…
-
Unscored —
Unrestricted file upload vulnerability in repository/repository_attachment.php in AlienVault Open Source Security Infor…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Locale module (modules/locale/locale.module) in Drupal Core 6.14, and p…
-
Unscored —CVE-2009-4366 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in ScriptsEz Ez Blog 1.0 allows remote attackers to inject arbitr…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Contact module (modules/contact/contact.admin.inc or modules/contact/co…
-
Unscored —CVE-2009-3701 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in the administration interface in Horde Application Framework befo…
-
Unscored —
Directory traversal vulnerability in Adobe Flash Media Server (FMS) before 3.5.3 allows attackers to load arbitrary DLL…
-
High 7.5
Unspecified vulnerability in Adobe Flash Media Server (FMS) before 3.5.3 allows attackers to cause a denial of service …
-
Unscored —CVE-2009-4359 Public exploit
Cross-site scripting (XSS) vulnerability in folder.php in the SmartMedia 0.85 Beta module for XOOPS allows remote attac…
-
Unscored —CVE-2009-4360 Public exploit
SQL injection vulnerability in modules/content/index.php in the Content module 0.5 for XOOPS allows remote attackers to…
-
Unscored —
freebsd-update in FreeBSD 8.0, 7.2, 7.1, 6.4, and 6.3 uses insecure permissions in its working directory (/var/db/freeb…
-
Unscored —
The (1) dist or (2) distcheck rules in GNU Automake 1.11.1, 1.10.3, and release branches branch-1-4 through branch-1-9,…
-
Unscored —
CQWeb (aka the web interface) in IBM Rational ClearQuest before 7.1.1 does not properly handle use of legacy URLs for a…
-
Unscored —
Multiple integer overflows in the jpeg.w5s and png.w5s filters in Winamp before 5.57 allow remote attackers to execute …
-
Unscored —
Heap-based buffer overflow in IN_MOD.DLL (aka the Module Decoder Plug-in) in Winamp before 5.57, and libmikmod 3.1.12, …
-
Unscored —CVE-2009-3703 Public exploit
Multiple SQL injection vulnerabilities in the WP-Forum plugin before 2.4 for WordPress allow remote attackers to execut…
-
Unscored —
Heap-based buffer overflow in atas32.dll in the Cisco WebEx WRF Player 26.x before 26.49.32 (aka T26SP49EP32) for Windo…
-
Unscored —
Heap-based buffer overflow in atas32.dll in the Cisco WebEx WRF Player 26.x before 26.49.32 (aka T26SP49EP32) for Windo…
-
Unscored —
Stack-based buffer overflow in ataudio.dll in the Cisco WebEx WRF Player 26.x before 26.49.32 for Windows, 27.x before …
-
Unscored —
Buffer overflow in atrpui.dll in the Cisco WebEx WRF Player 26.x before 26.49.32 for Windows, 27.x before 27.10.x for W…
-
Unscored —
Heap-based buffer overflow in atas32.dll in the Cisco WebEx WRF Player 26.x before 26.49.32 (aka T26SP49EP32) for Windo…
-
Unscored —
Buffer overflow in atas32.dll in the Cisco WebEx WRF Player 26.x before 26.49.32 for Windows, 27.x before 27.10.x for W…
-
Unscored —
Stack-based buffer overflow in OmniInet.exe (aka the backup client service daemon) in the Application Recovery Manager …
-
Unscored —
Integer overflow in the _ncp32._NtrpTCPReceiveMsg function in rds.exe in the Cell Manager Database Service in the Appli…
-
Unscored —
Integer overflow in IN_MOD.DLL (aka the Module Decoder Plug-in) in Winamp before 5.57 might allow remote attackers to e…
-
Unscored —
Multiple heap-based buffer overflows in IN_MOD.DLL (aka the Module Decoder Plug-in) in Winamp before 5.57, and libmikmo…
-
Unscored —
The Mobile Edition of TransWARE Active! mail 2003 build 2003.0139.0871 and earlier, and possibly other versions before …
-
Unscored —
TransWARE Active! mail 2003 build 2003.0139.0871 and earlier does not properly secure the session ID in a session cooki…
-
Unscored —CVE-2009-4351 Public exploit
SQL injection vulnerability in ADMIN/loginaction.php in WSCreator 1.1, when magic_quotes_gpc is disabled, allows remote…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in TransWARE Active! mail 2003 build 2003.0139.0871 and earlier, an…