Archive
December 2009
Vulnerabilities first published in this month (UTC), newest first.
440 results · Feed
-
Unscored —
Multiple buffer overflows in unspecified setuid executables in the DataStage subsystem in IBM InfoSphere Information Se…
-
Unscored —CVE-2009-0102 EPSS 24%
Microsoft Project 2000 SR1 and 2002 SP1, and Office Project 2003 SP3, does not properly handle memory allocation for Pr…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the web interface in CA Service Desk 12.1 allows remote attackers to inject…
-
Unscored —CVE-2009-3674 EPSS 26%
Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbi…
-
Unscored —CVE-2009-3673 EPSS 25%
Microsoft Internet Explorer 7 and 8 does not properly handle objects in memory, which allows remote attackers to execut…
-
Unscored —CVE-2009-3677 EPSS 22%
The Internet Authentication Service (IAS) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold an…
-
Unscored —CVE-2009-3675 EPSS 25%
LSASS.exe in the Local Security Authority Subsystem Service (LSASS) in Microsoft Windows 2000 SP4, XP SP2 and SP3, and …
-
High 8.1CVE-2009-3671 EPSS 21%
Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbi…
-
Unscored —CVE-2009-2509 EPSS 17%
Active Directory Federation Services (ADFS) in Microsoft Windows Server 2003 SP2 and Server 2008 Gold and SP2 does not …
-
Unscored —CVE-2009-2505 EPSS 32%
The Internet Authentication Service (IAS) in Microsoft Windows Vista SP2 and Server 2008 SP2 does not properly validate…
-
Unscored —CVE-2009-2506 EPSS 31%
Integer overflow in the text converters in Microsoft Office Word 2002 SP3 and 2003 SP3; Works 8.5; Office Converter Pac…
-
Unscored —
The single sign-on implementation in Active Directory Federation Services (ADFS) in Microsoft Windows Server 2003 SP2 a…
-
Unscored —
ntp_request.c in ntpd in NTP before 4.2.4p8, and 4.2.5, allows remote attackers to cause a denial of service (CPU and b…
-
Unscored —
Multiple stack-based buffer overflows in Novell iPrint Client 4.38, 5.30, and possibly other versions before 5.32 allow…
-
Unscored —
Stack-based buffer overflow in ienipp.ocx in Novell iPrint Client 5.30, and possibly other versions before 5.32, allows…
-
Unscored —
The ip_frag_reasm function in net/ipv4/ip_fragment.c in the Linux kernel 2.6.32-rc8, and 2.6.29 and later versions befo…
-
Unscored —
The process function in data/class/pages/admin/customer/LC_Page_Admin_Customer_SearchCustomer.php in EC-CUBE Ver2 2.4.0…
-
Unscored —
Stack-based buffer overflow in the OmniInet process in HP OpenView Data Protector Application Recovery Manager 5.50 and…
-
Unscored —
Multiple stack-based buffer overflows in src/Task.cc in the FastCGI program in IIPImage Server before 0.9.8 might allow…
-
Unscored —
Cross-site scripting (XSS) vulnerability in modules/mod_yj_whois.php in the YJ Whois component 1.0x and 1.5.x for Jooml…
-
Unscored —
acpid 1.0.4 sets an unrestrictive umask, which might allow local users to leverage weak permissions on /var/log/acpid, …
-
Unscored —CVE-2009-4231 Public exploit
Directory traversal vulnerability in as/lib/plugins.php in SweetRice 0.5.3 and earlier allows remote attackers to inclu…
-
Unscored —CVE-2009-4234 Public exploit
Cross-site scripting (XSS) vulnerability in loginpages/error_user.shtml on the Micronet Network Access Controller SP191…
-
Unscored —
The Kide Shoutbox (com_kide) component 0.4.6 for Joomla! does not properly perform authentication, which allows remote …
-
Unscored —CVE-2009-4229 Public exploit
Multiple SQL injection vulnerabilities in ActiveWebSoftwares Active Bids allow remote attackers to execute arbitrary SQ…
-
Unscored —
A certain Red Hat patch for acpid 1.0.4 effectively triggers a call to the open function with insufficient arguments, w…
-
Unscored —
Race condition in the IP module in the kernel in Sun OpenSolaris snv_106 through snv_124 allows remote attackers to cau…
-
Unscored —
Stack consumption vulnerability in u_bound.c in Xfig 3.2.5b and earlier allows remote attackers to cause a denial of se…
-
Unscored —
Stack-based buffer overflow in the read_1_3_textobject function in f_readold.c in Xfig 3.2.5b and earlier, and in the r…
-
Unscored —
Stack-based buffer overflow in the PestPatrol ActiveX control (ppctl.dll) 5.6.7.9 in CA eTrust PestPatrol allows remote…
-
Unscored —CVE-2009-3586 Public exploit
Off-by-one error in src/http.c in CoreHTTP 0.5.3.1 and earlier allows remote attackers to cause a denial of service or …
-
Unscored —
Stack-based buffer overflow in the GetUID function in src-IL/src/il_dicom.c in DevIL 1.7.8 allows remote attackers to c…
-
Unscored —
Java for Mac OS X 10.5 before Update 6 and 10.6 before Update 1 accepts expired certificates for applets, which makes i…
-
Unscored —
Feature Pack for Communications Enabled Applications (CEA) before 1.0.0.1 for IBM WebSphere Application Server 7.0.0.7 …
-
Unscored —CVE-2009-4220 Public exploit
PHP remote file inclusion vulnerability in includes/classes/pctemplate.php in PointComma 3.8b2 and earlier allows remot…
-
Unscored —CVE-2009-4216 Public exploit
Directory traversal vulnerability in funzioni/lib/menulast.php in klinza professional cms 5.0.1 and earlier allows remo…
-
Unscored —
Panda Global Protection 2010, Internet Security 2010, and Antivirus Pro 2010 use weak permissions (Everyone: Full Contr…
-
Unscored —CVE-2009-4222 Public exploit
phpBazar 2.1.1fix and earlier does not require administrative authentication for admin/admin.php, which allows remote a…
-
Unscored —CVE-2009-4217 Public exploit
SQL injection vulnerability in the Itamar Elharar MusicGallery (com_musicgallery) component for Joomla! allows remote a…
-
Unscored —
PHP remote file inclusion vulnerability in adm/krgourl.php in KR-Web 1.1b2 and earlier allows remote attackers to execu…