CVEs published in January 2009
471 vulnerabilities, 71 critical, 0 exploited.
- apache jackrabbitApache Jackrabbit contains Cross-site Scripting4.3 Medium
- apple quicktimeHeap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a...9.3 High
- apple quicktimeInteger signedness error in Apple QuickTime before 7.6 allows remote attackers to cause a denial...9.3 High
- apple quicktimeUnspecified vulnerability in Apple QuickTime before 7.6 allows remote attackers to cause a denial...9.3 High
- apple quicktimeBuffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of...9.3 High
- apple quicktimeHeap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a...9.3 High
- apple quicktimeHeap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a...9.3 High
- apple quicktimeHeap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a...9.3 High
- trend micro internet security 2007, officescan, internet security 2008 +2 moreThe Trend Micro Personal Firewall service (aka TmPfw.exe) in Trend Micro Network Security...4.6 Medium
- trend micro internet security 2007, officescan, internet security 2008 +2 moreMultiple heap-based buffer overflows in the ApiThread function in the firewall service (aka TmPfw...10.0 High
- trend micro internet security 2007, officescan, internet security 2008 +2 moreThe ApiThread function in the firewall service (aka TmPfw.exe) in Trend Micro Network Security...5.0 Medium
- factosystem weblogFacto stores sensitive information under the web root with insufficient access control, which...5.0 Medium
- cmsisweb cms iswebSQL injection vulnerability in index.php in CMS ISWEB 3.0 allows remote attackers to execute...7.5 High
- cmsisweb cms iswebMultiple cross-site scripting (XSS) vulnerabilities in index.php in CMS ISWEB 3.0 allow remote...4.3 Medium
- codeavalanche freeforumCodeAvalanche FreeForum stores sensitive information under the web root with insufficient access...5.0 Medium
- the net guys aspired2blogThe Net Guys ASPired2Blog stores sensitive information under the web root with insufficient...5.0 Medium
- the net guys aspired2blogSQL injection vulnerability in admin/blog_comments.asp in The Net Guys ASPired2Blog allows remote...7.5 High
- vpasp vp-asp shopping cartVP-ASP Shopping Cart 6.50 stores sensitive information under the web root with insufficient...5.0 Medium
- flds-script fldsSQL injection vulnerability in redir.php in Free Links Directory Script (FLDS) 1.2a allows remote...7.5 High
- china-on-site flexphpnewsMultiple SQL injection vulnerabilities in admin/usercheck.php in FlexPHPNews 0.0.6 allow remote...7.5 High
- asp-dev internal e-mail systemMultiple SQL injection vulnerabilities in login.asp in ASP-DEv Internal E-Mail System allow...7.5 High
- asp-dev xm events diaryASP-DEv XM Events Diary stores sensitive information under the web root with insufficient access...5.0 Medium
- asp-dev xm events diarySQL injection vulnerability in diary_viewC.asp in ASP-DEv XM Events Diary allows remote attackers...7.5 High
- asp-dev xm events diarySQL injection vulnerability in default.asp in ASP-DEv XM Events Diary allows remote attackers to...7.5 High
- cfagcmsMultiple PHP remote file inclusion vulnerabilities in themes/default/index.php in Cant Find A...7.5 High
- umerinc songs portalSQL injection vulnerability in albums.php in Umer Inc Songs Portal allows remote attackers to...7.5 High
- gangliaStack-based buffer overflow in the process_path function in gmetad/server.c in Ganglia 3.1.1...7.5 High
- tigris websvnlisting.php in WebSVN 2.0 and possibly 1.7 beta, when using an SVN authz file, allows remote...3.5 Low
- linux kernelMemory leak in the keyctl_join_session_keyring function (security/keys/keyctl.c) in Linux kernel...4.9 Medium
- tigris websvnThe create_anchors function in utils.inc in WebSVN 1.x allows remote attackers to execute...7.5 High
- tigris websvnDirectory traversal vulnerability in rss.php in WebSVN 2.0 and earlier, when magic_quotes_gpc is...6.8 Medium
- tigris websvnCross-site scripting (XSS) vulnerability in the getParameterisedSelfUrl function in index.php in...4.3 Medium
- horde application frameworkCross-site scripting (XSS) vulnerability in the XSS filter (framework/Text_Filter/Filter/xss.php)...4.3 Medium
- research in motion limited blackberry enterprise server, blackberry professional software, blackberry unite +2 moreThe PDF distiller in the Attachment Service in Research in Motion (RIM) BlackBerry Enterprise...9.3 High
- vuplayerBuffer overflow in VUPlayer 2.49 and earlier allows user-assisted attackers to execute arbitrary...8.8 High
- vuplayerBuffer overflow in VUPlayer allows user-assisted attackers to have an unknown impact via a long...9.3 High
- nfs nfs-utilsCertain Fedora build scripts for nfs-utils before 1.1.2-9.fc9 on Fedora 9, and before 1.1.4-6...7.5 High
- igno saitz libmikmodlibmikmod 3.1.11 through 3.2.0, as used by MikMod and possibly other products, allows user...4.3 Medium
- ibm hardware management consoleUnspecified vulnerability in IBM Hardware Management Console (HMC) 7 release 3.2.0 SP1 has...10.0 High
- google chromeAn unspecified function in the JavaScript implementation in Google Chrome creates and exposes a ...2.1 Low
- apple safariAn unspecified function in the JavaScript implementation in Apple Safari creates and exposes a ...2.1 Low
- mozilla firefox, seamonkey +1 moreThe Math.random function in the JavaScript implementation in Mozilla Firefox 3.5.x before 3.5.10...4.9 Medium
- microsoft internet explorerAn unspecified function in the JavaScript implementation in Microsoft Internet Explorer creates...2.1 Low
- symantec appstream clientThe LaunchObj ActiveX control before 5.2.2.865 in launcher.dll in Symantec AppStream Client 5.2.x...9.3 High
- redhat certificate systemRed Hat Certificate System 7.2 stores passwords in cleartext in the UserDirEnrollment log, the RA...2.1 Low
- redhat certificate systemRed Hat Certificate System 7.2 uses world-readable permissions for password.conf and unspecified...2.1 Low
- igno saitz libmikmodlibmikmod 3.1.9 through 3.2.0, as used by MikMod, SDL-mixer, and possibly other products, relies...4.3 Medium
- vmware ace, fusion, server +2 more +4 morevmwarebase.dll, as used in the vmware-authd service (aka vmware-authd.exe), in VMware Workstation...5.0 Medium
- research in motion limited blackberry enterprise server, blackberry professional software, blackberry unite +2 moreMultiple heap-based buffer overflows in the PDF distiller in the Attachment Service in Research...9.3 High
- heathcosoft mp3 trackmakerHeap-based buffer overflow in Heathco Software MP3 TrackMaker 1.5 allows remote attackers to...9.3 High
- Show moreLoading…