CVEs published in January 2009
471 vulnerabilities, 71 critical, 0 exploited.
- nokia 6131 nfcThe SmartPoster implementation on the Nokia 6131 Near Field Communication (NFC) phone with 05.12...2.6 Low
- 68k audiofileHeap-based buffer overflow in msadpcm.c in libaudiofile in audiofile 0.2.6 allows context...6.8 Medium
- microsoft moneyAn ActiveX control in prtstb06.dll in Microsoft Money 2006, when used with WScript in Windows...4.3 Medium
- mozilla libxulMemory leak in Libxul, as used in Mozilla Firefox 3.0.5 and other products, allows remote...5.0 Medium
- apple safariMemory leak in WebKit.dll in WebKit, as used by Apple Safari 3.2 on Windows Vista SP1, allows...5.0 Medium
- gforgeSQL injection vulnerability in the create function in common/include/GroupJoinRequest.class in...7.5 High
- edreamers ednewsSQL injection vulnerability in eDNews_view.php in eDreamers eDNews 2 allows remote attackers to...7.5 High
- edreamers ednewsDirectory traversal vulnerability in eDNews_archive.php in eDreamers eDNews 2, when...6.8 Medium
- edreamers edcontainerDirectory traversal vulnerability in index.php in eDreamers eDContainer 2.22, when...6.8 Medium
- web scribble solutions webclassifiedsMultiple SQL injection vulnerabilities in index.php in Web Scribble Solutions webClassifieds 2005...6.8 Medium
- iliasSQL injection vulnerability in repository.php in ILIAS 3.7.4 and earlier allows remote attackers...7.5 High
- phpalumniSQL injection vulnerability in Acomment.php in phpAlumni allows remote attackers to execute...7.5 High
- phpCross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors...2.6 Low
- spipSQL injection vulnerability in inc/rubriques.php in SPIP 1.8 before 1.8.3b, 1.9 before 1.9.2g,...7.5 High
- spipMultiple unspecified vulnerabilities in SPIP 1.8 before 1.8.3b, 1.9 before 1.9.2g, and 2.0 before...10.0 High
- joomla com paxgallerySQL injection vulnerability in the PaxGallery (com_paxgallery) component 0.1 for Joomla! allows...7.5 High
- fujitsu-siemens webtransactionsWBPublish (aka WBPublish.exe) in Fujitsu-Siemens WebTransactions 7.0, 7.1, and possibly other...10.0 High
- futomi access analyzer cgifutomi CGI Cafe Access Analyzer CGI Standard 4.0.1 and earlier and Access Analyzer CGI...5.8 Medium
- six apart movable typeCross-site scripting (XSS) vulnerability in Six Apart Movable Type Enterprise (MTE) 1.x before 1...4.3 Medium
- invisible-island xtermThe default configuration of xterm on Debian GNU/Linux sid and possibly Ubuntu enables the...9.3 High
- invisible-island xtermCRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary...9.3 High