CVEs published in January 2009
471 vulnerabilities, 71 critical, 0 exploited.
- faststone image viewerFastStone Image Viewer 3.6 allows user-assisted attackers to cause a denial of service ...4.3 Medium
- proxim tsunami mp.11 2411Cross-site scripting (XSS) vulnerability in the Proxim Wireless Tsunami MP.11 2411 with firmware...4.3 Medium
- intellitamperStack-based buffer overflow in IntelliTamper 2.07 and 2.08 allows user-assisted attackers to...9.3 High
- sun opensolaris, solaris +1 moreUnspecified vulnerability in the nfs4rename_persistent_fh function in the NFS 4 (aka NFSv4)...4.9 Medium
- yerbaDirectory traversal vulnerability in Yerba SACphp 6.3 allows remote attackers to read arbitrary...5.0 Medium
- proxim tsunami mp.11 2411The Proxim Wireless Tsunami MP.11 2411 with firmware 3.0.3 has public as its default SNMP read...10.0 High
- freedesktop xdg-utilsInteraction error in xdg-open allows remote attackers to execute arbitrary code by sending a file...6.8 Medium
- intel trusted execution technologyMultiple unspecified vulnerabilities in Intel system software for Trusted Execution Technology ...7.6 High
- linux kernelBuffer overflow in net/sctp/sm_statefuns.c in the Stream Control Transmission Protocol (sctp)...10.0 High
- zxidZXID 0.29 and earlier does not properly check the return value from the OpenSSL DSA_verify...5.0 Medium
- entrouvert lassoLasso 2.2.1 and earlier does not properly check the return value from the OpenSSL DSA_verify...4.3 Medium
- eid eidlibBelgian eID middleware (eidlib) 2.6.0 and earlier does not properly check the return value from...5.0 Medium
- openevidenceOpenEvidence 1.0.6 and earlier does not properly check the return value from the OpenSSL...5.0 Medium
- galeGale 0.99 and earlier does not properly check the return value from the OpenSSL EVP_VerifyFinal...5.0 Medium
- sun grid engineSun GridEngine 5.3 and earlier does not properly check the return value from the OpenSSL...5.0 Medium
- isc bindBIND 9.6.0, 9.5.1, 9.5.0, 9.4.3, and earlier does not properly check the return value from the...6.8 Medium
- ntpNTP 4.2.4 before 4.2.4p5 and 4.2.5 before 4.2.5p150 does not properly check the return value from...5.0 Medium
- opensslOpenSSL 0.9.8i and earlier does not properly check the return value from the EVP_VerifyFinal...5.8 Medium
- joomlahbs hotel booking reservation systemSQL injection vulnerability in the com_hbssearch component 1.0 in the Hotel Booking Reservation...7.5 High
- joomlahbs hotel booking reservation system, com tophotelmodule +1 moreSQL injection vulnerability in the Top Hotel (com_tophotelmodule) component 1.0 in the Hotel...7.5 High
- v-gn userlocatorSQL injection vulnerability in locator.php in the Userlocator module 3.0 for Woltlab Burning...7.5 High
- webcamxpDirectory traversal vulnerability in webcamXP 5.3.2.375 and 5.3.2.410 build 2132 allows remote...5.0 Medium
- freelyricsDirectory traversal vulnerability in source.php in FreeLyrics 1.0 allows remote attackers to read...5.0 Medium
- constructr constructr-cmsDirectory traversal vulnerability in backend/template.php in Constructr CMS 3.02.5 and earlier,...5.1 Medium
- constructr constructr-cmsSQL injection vulnerability in index.php in Constructr CMS 3.02.5 and earlier, when...5.1 Medium
- knowledgetree document management document managementMultiple cross-site scripting (XSS) vulnerabilities in KnowledgeTree before 3.5.4a allow remote...4.3 Medium
- knowledgetree document management document managementThe DropDocuments plugin in KnowledgeTree before 3.5.4a allows remote authenticated users to gain...6.5 Medium
- classDirectory traversal vulnerability in scripts/export.php in ClaSS before 0.8.61 allows remote...5.0 Medium
- myphpscripts login sessionmyPHPscripts Login Session 2.0 stores sensitive information under the web root with insufficient...5.0 Medium
- myphpscripts login sessionMultiple cross-site scripting (XSS) vulnerabilities in login.php in myPHPscripts Login Session 2...4.3 Medium
- chicomasChilek Content Management System (aka ChiCoMaS) 2.0.4 and earlier stores sensitive information...5.0 Medium
- emefa guestbookEmefa Guestbook 3.0 stores sensitive information under the web root with insufficient access...5.0 Medium
- mypbsSQL injection vulnerability in index.php in My PHP Baseball Stats (MyPBS) allows remote attackers...7.5 High
- checkpoint vpn-1Check Point VPN-1 R55, R65, and other versions, when Port Address Translation (PAT) is used,...5.0 Medium
- advantech adam-6015, adam-6017, adam-6018 +11 more +13 moreThe Advantech ADAM-6000 module has 00000000 as its default password, which makes it easier for...10.0 High
- sambaSamba 3.2.0 through 3.2.6, when registry shares are enabled, allows remote authenticated users to...6.3 Medium
- constructr constructr-cmsConstructr CMS 3.02.5 and earlier stores passwords in cleartext in a MySQL database, which allows...2.6 Low
- sixapart movable typeSix Apart Movable Type (MT) before 4.23 allows remote authenticated users with create permission...4.0 Medium
- sixapart movable typeMultiple cross-site scripting (XSS) vulnerabilities in Six Apart Movable Type (MT) before 4.23...4.3 Medium
- phpPHP 5.2.7 contains an incorrect change to the FILTER_UNSAFE_RAW functionality, and...7.5 High
- pdfjamMultiple untrusted search path vulnerabilities in pdfjam allow local users to gain privileges via...4.6 Medium
- fujitsu-siemens webtransactionsMultiple cross-site scripting (XSS) vulnerabilities in Fujitsu-Siemens WebTransactions 7.0, 7.1,...4.3 Medium
- ietf md5The MD5 Message-Digest Algorithm is not collision resistant, which makes it easier for context...5.0 Medium
- igamingcms igaming cmsMultiple SQL injection vulnerabilities in iGaming 1.5 and earlier allow remote attackers to...7.5 High
- phpicalendar, phpicalendar phpicalendar2.0 +1 morePHP iCalendar 2.24 and earlier allows remote attackers to bypass authentication by setting the...7.5 High
- foxmailBuffer overflow in Foxmail 6.5 allows remote attackers to execute arbitrary code via a long...9.3 High
- ephpscripts e-shop shopping cartSQL injection vulnerability in search_results.php in E-Php Scripts E-Shop (aka E-Php Shopping...7.5 High
- microsoft windows live messengerMicrosoft Windows Live Messenger Client 8.5.1 and earlier, when MSN Protocol Version 15 (MSNP15)...5.0 Medium
- nokia 6131 nfcThe Nokia 6131 Near Field Communication (NFC) phone with 05.12 firmware automatically installs...7.5 High
- nokia 6131 nfcThe Nokia 6131 Near Field Communication (NFC) phone with 05.12 firmware allows remote attackers...7.8 High
- Show moreLoading…