CVEs published in January 2009
471 vulnerabilities, 71 critical, 0 exploited.
- vuplayerStack-based buffer overflow in VUPlayer 2.49 allows remote attackers to execute arbitrary code...9.3 High
- realnetworks helix server, helix server mobile +1 moreMultiple buffer overflows in RealNetworks Helix Server and Helix Mobile Server 11.x before 11.1.8...10.0 High
- gitgitweb/gitweb.perl in gitweb in Git 1.6.x before 1.6.0.6, 1.5.6.x before 1.5.6.6, 1.5.5.x before...4.6 Medium
- gitThe web interface in git (gitweb) 1.5.x before 1.5.5 allows remote attackers to execute arbitrary...7.5 High
- ibm db2 universal databaseUnspecified vulnerability in the server in IBM DB2 8 before FP17a, 9.1 before FP6a, and 9.5...5.0 Medium
- ibm db2 universal databaseUnspecified vulnerability in IBM DB2 8 before FP17a, 9.1 before FP6a, and 9.5 before FP3a allows...5.0 Medium
- sun sparc enterprise serverThe Sun SPARC Enterprise M4000 and M5000 Server, within a certain range of serial numbers, allows...10.0 High
- sun java system access managerSun Java System Access Manager 6.3 2005Q1, 7 2005Q4, and 7.1 allows remote authenticated users...6.0 Medium
- sun java system access managerSun Java System Access Manager 7.1 allows remote authenticated sub-realm administrators to gain...9.0 High
- sun opensolaris, solaris +1 moreUnspecified vulnerability in ppdmgr in Sun Solaris 10 and OpenSolaris snv_61 through snv_106...4.9 Medium
- sun opensolaris, solaris +1 moreUnspecified vulnerability in lpadmin in Sun Solaris 10 and OpenSolaris snv_61 through snv_106...4.7 Medium
- cisco ironport encryption appliance, ironport postx +1 moreCross-site request forgery (CSRF) vulnerability in the administration interface in Cisco IronPort...6.8 Medium
- cisco ironport encryption appliance, ironport postx +1 moreCross-site request forgery (CSRF) vulnerability in the administration interface in Cisco IronPort...6.8 Medium
- cisco ironport encryption appliance, ironport postx +1 morePXE Encryption in Cisco IronPort Encryption Appliance 6.2.4 before 6.2.4.1.1, 6.2.5, 6.2.6, 6.2.7...4.3 Medium
- cisco ironport encryption appliance, ironport postx +1 morePXE Encryption in Cisco IronPort Encryption Appliance 6.2.4 before 6.2.4.1.1, 6.2.5, 6.2.6, 6.2.7...4.3 Medium
- sun opensolarisUnspecified vulnerability in txzonemgr in Sun OpenSolaris has unknown impact and local attack...7.2 High
- sun opensolarisUnspecified vulnerability in conv_lpd in Sun OpenSolaris has unknown impact and local attack...7.2 High
- sun opensolarisUnspecified vulnerability in the root/boot archive tool in Sun OpenSolaris has unknown impact and...7.2 High
- realvncThe CMsgReader::readRect function in the VNC Viewer component in RealVNC VNC Free Edition 4.0...10.0 High
- cisco unified ip phone 7940g, unified ip phone 7960g +1 moreCisco Unified IP Phone (aka SIP phone) 7960G and 7940G with firmware P0S3-08-9-00 and possibly...7.1 High
- cisco iosMultiple cross-site scripting (XSS) vulnerabilities in the HTTP server in Cisco IOS 11.0 through...4.3 Medium
- cisco ons, ons 15600 +1 moreCisco ONS 15310-CL, 15310-MA, 15327, 15454, 15454 SDH, and 15600 with software 7.0.2 through 7.0...7.8 High
- share2 easy grid controlInsecure method vulnerability in the EasyGrid.SGCtrl.32 ActiveX control in EasyGrid.ocx 1.0.0.1...9.3 High
- microsoft html help workshopBuffer overflow in Microsoft HTML Help Workshop 4.74 and earlier allows context-dependent...10.0 High
- sun opensolaris, solaris +1 moreInteger overflow in the aio_suspend function in Sun Solaris 8 through 10 and OpenSolaris, when 32...4.9 Medium
- sun opensolarisThe UFS implementation in the kernel in Sun OpenSolaris snv_29 through snv_90 allows local users...4.9 Medium
- erlang** DISPUTED ** lib/crypto/c_src/crypto_drv.c in erlang does not properly check the return value...5.0 Medium
- perl-openssl libcrypt-openssl-dsa-perllibcrypt-openssl-dsa-perl does not properly check the return value from the OpenSSL DSA_verify...5.0 Medium
- llnl slurmplugins/crypto/openssl/crypto_openssl.c in Simple Linux Utility for Resource Management (aka...5.0 Medium
- heikkitoivonen m2crypto** DISPUTED ** M2Crypto does not properly check the return value from the OpenSSL EVP_VerifyFinal...5.0 Medium
- berkeley boinc clientThe decrypt_public function in lib/crypt.cpp in the client in Berkeley Open Infrastructure for...5.0 Medium
- finkproject libnasl** DISPUTED ** NOTE: this issue has been disputed by the upstream vendor. nasl/nasl_crypto2.c in...5.0 Medium
- arrl tqsllibThe tqsl_verifyDataBlock function in openssl_cert.cpp in American Radio Relay League (ARRL)...5.0 Medium
- apple safariUnspecified vulnerability in Apple Safari on Mac OS X 10.5 and Windows allows remote attackers to...7.1 High
- hp hpliphplip.postinst in HP Linux Imaging and Printing (HPLIP) 2.7.7 and 2.8.2 on Ubuntu allows local...6.9 Medium
- debian linux, linux kernel +1 moreThe ABI in the Linux kernel 2.6.28 and earlier on s390, powerpc, sparc64, and mips 64-bit...7.2 High
- libpng, debian linux +1 moreThe png_check_keyword function in pngwutil.c in libpng before 1.0.42, and 1.2.x before 1.2.34,...5.0 Medium
- ktorrentEval injection vulnerability in the web interface plugin in KTorrent before 3.1.4 allows remote...6.8 Medium
- ktorrentThe web interface plugin in KTorrent before 3.1.4 allows remote attackers to bypass intended...4.3 Medium
- xrdpThe rdp_rdp_process_color_pointer_pdu function in rdp/rdp_rdp.c in xrdp 0.4.1 and earlier allows...7.5 High
- xrdpArray index error in the xrdp_bitmap_def_proc function in xrdp/funcs.c in xrdp 0.4.1 and earlier...7.5 High
- xrdpBuffer overflow in the xrdp_bitmap_invalidate function in xrdp/xrdp_bitmap.c in xrdp 0.4.1 and...7.5 High
- microsoft windows 95, windows 2000, windows 98 +2 moreWindows Internet Naming Service (WINS) allows remote attackers to cause a denial of service ...7.6 High
- amarokMultiple array index errors in the Audible::Tag::readTag function in metadata/audible/audibletag...9.3 High
- amarokMultiple integer overflows in the Audible::Tag::readTag function in metadata/audible/audibletag...9.3 High
- goople cms cmsSQL injection vulnerability in frontpage.php in Goople CMS 1.8.2 allows remote attackers to...7.5 High
- ibm websphere datapower xml security gateway xs40The IBM WebSphere DataPower XML Security Gateway XS40 with firmware 3.6.1.5 allows remote...7.8 High
- microsoft internet information servicesThe undocumented TRACK method in Microsoft Internet Information Services (IIS) 5.0 returns the...5.8 Medium
- microsoft internet information servicesMicrosoft Internet Information Services (IIS) 5.0 does not log requests that use the TRACK method...5.0 Medium
- microsoft windows xpBuffer overflow in Microsoft Windows XP SP3 allows remote attackers to cause a denial of service ...10.0 High
- Show moreLoading…