CVEs published in August 2009
525 vulnerabilities, 81 critical, 1 exploited.
- pidgin protocols/jabber/auth.c in libpurple in Pidgin 2.6.0, and possibly other versions, does not... 5.0 Medium
- pidgin Unspecified vulnerability in Pidgin 2.6.0 allows remote attackers to cause a denial of service ... 4.3 Medium
- io-socket-ssl The verify_hostname_of_cert function in the certificate checking feature in IO-Socket-SSL (IO:... 4.3 Medium
- microsoft internet information server Buffer overflow in the FTP Service in Microsoft Internet Information Services (IIS) 5.0 through 6... 9.0 High
- itd-inc bingo\!cms Cross-site request forgery (CSRF) vulnerability in bingo!CMS 1.2 and earlier allows remote... 6.5 Medium
- geeklog, yoshinori tahara mycaljp +1 more Cross-site scripting (XSS) vulnerability in Site Calendar 'mycaljp' plugin 2.0.0 through 2.0.6,... 4.3 Medium
- microsoft windows server 2003 win32k.sys in Microsoft Windows Server 2003 SP2 allows remote attackers to cause a denial of... 7.1 High
- microsoft internet explorer Microsoft Internet Explorer 6 on Windows XP SP2 and SP3, and Internet Explorer 7 on Vista, allows... 5.0 Medium
- maxthon browser Maxthon Browser 3.0.0.145 Alpha with Ultramode does not properly block javascript: and data: URIs... 4.3 Medium
- orcabrowser orca browser Orca Browser 1.2 build 5 does not properly block data: URIs in Refresh and Location headers in... 4.3 Medium
- apple safari Apple Safari 4.0.3 does not properly block javascript: and data: URIs in Refresh headers in HTTP... 4.3 Medium
- qtweb QtWeb 3.0 Builds 001 and 003 does not properly block javascript: and data: URIs in Refresh and... 4.3 Medium
- mozilla firefox, mozilla, mozilla seamonkey +2 more Mozilla Firefox 3.0.13 and earlier, 3.5, 3.6 a1 pre, and 3.7 a1 pre; SeaMonkey 1.1.17; and... 4.3 Medium
- opera browser Opera 9.52 and earlier, and 10.00 Beta 3 Build 1699, does not properly block data: URIs in... 4.3 Medium
- mozilla firefox Mozilla Firefox 3.0.13 and earlier, 3.5, 3.6 a1 pre, and 3.7 a1 pre does not properly block data:... 4.3 Medium
- google chrome Google Chrome 1.0.154.48 and earlier, 2.0.172.28, 2.0.172.37, and 3.0.193.2 Beta does not... 4.3 Medium
- mozilla firefox, mozilla, mozilla seamonkey +2 more Mozilla Firefox 3.0.13 and earlier, 3.5, 3.6 a1 pre, and 3.7 a1 pre; SeaMonkey 1.1.17; and... 4.3 Medium
- peter kohlmann db2 monitoring console Unspecified vulnerability in DB2 Monitoring Console 2.2.4 and earlier allows remote attackers to... 6.8 Medium
- peter kohlmann db2 monitoring console Unspecified vulnerability in DB2 Monitoring Console 2.2.4 and earlier allows remote attackers to... 5.0 Medium
- xyssl XySSL before 0.9 allows remote attackers to cause a denial of service (infinite loop) via an X... 5.0 Medium
- xyssl The ssl_parse_client_key_exchange function in XySSL before 0.9 does not protect against certain... 7.5 High
- microfocus visibroker osagent.exe in Borland VisiBroker Smart Agent 08.00.00.C1.03 and earlier allows remote attackers... 5.0 Medium
- microfocus visibroker Integer overflow in osagent.exe in Borland VisiBroker Smart Agent 08.00.00.C1.03 and earlier... 10.0 High
- ariadne-cms ariadne cms pphoto in Ariadne before 2.6 allows remote authenticated users with certain privileges to execute... 9.0 High
- zkup zKup CMS 2.0 through 2.3 does not require administrative authentication for admin/configuration... 7.5 High
- zkup Static code injection vulnerability in admin/configuration/modifier.php in zKup CMS 2.0 through 2... 6.8 Medium
- evansprogramming registry pro Multiple insecure method vulnerabilities in an ActiveX control in (epRegPro.ocx) in Evans... 10.0 High
- ikiwiki Incomplete blacklist vulnerability in the teximg plugin in ikiwiki before 3.1415926 and 2.x... 5.0 Medium
- christophe thibault k-meleon K-Meleon 1.5.3 allows context-dependent attackers to spoof the address bar, via window.open with... 4.3 Medium
- flock, mozilla firefox, seamonkey +2 more Mozilla Firefox 3.5.1 and SeaMonkey 1.1.17, and Flock 2.5.1, allow context-dependent attackers to... 4.3 Medium
- maxthon browser Maxthon Browser 2.5.3.80 UNICODE allows remote attackers to spoof the address bar, via window... 4.3 Medium
- lunascape Lunascape 5.1.3 and 5.1.4 allows remote attackers to spoof the address bar, via window.open with... 4.3 Medium
- avant force browser Avant Browser 11.7 Builds 35 and 36 allows remote attackers to spoof the address bar, via window... 4.3 Medium
- microsoft internet explorer Microsoft Internet Explorer 6 through 8 allows remote attackers to spoof the address bar, via... 4.3 Medium
- linux kernel, canonical ubuntu linux +1 more The Linux kernel before 2.6.31-rc7 does not initialize certain data structures within getname... 4.9 Medium
- linux kernel, canonical ubuntu linux +1 more The llc_ui_getname function in net/llc/af_llc.c in the Linux kernel 2.6.31-rc7 and earlier does... 4.9 Medium
- sun opensolaris, solaris +1 more The sockfs module in the kernel in Sun Solaris 10 and OpenSolaris snv_41 through snv_122, when... 7.1 High
- linux kernel The Linux kernel before 2.6.31-rc7 does not properly prevent mmap operations that target page... 7.2 High
- mrcgiguy hot links sql-php Cross-site scripting (XSS) vulnerability in Mr. CGI Guy Hot Links SQL-PHP 3 and earlier allows... 4.3 Medium
- mrcgiguy hot links sql-php SQL injection vulnerability in Mr. CGI Guy Hot Links SQL-PHP 3 and earlier allows remote... 7.5 High
- webidsupport webid SQL injection vulnerability in item.php in WeBid auction script 0.5.4 allows remote attackers to... 7.5 High
- webidsupport webid WeBid auction script 0.5.4 stores sensitive information under the web root with insufficient... 5.0 Medium
- webidsupport webid eledicss.php in WeBid auction script 0.5.4 allows remote attackers to modify arbitrary cascading... 5.0 Medium
- webidsupport webid SQL injection vulnerability in the admin panel (admin/) in WeBid auction script 0.5.4 allows... 7.5 High
- belkin f5d7632-4, wireless g router +1 more The web interface to the Belkin Wireless G router and ADSL2 modem F5D7632-4V6 with firmware 6.01... 10.0 High
- ifusionservices ifdate SQL injection vulnerability in members_search.php in iFusion Services iFdate 2.0.3 and earlier... 6.8 Medium
- kyoceramita scanner file utility The Scanner File Utility (aka listener) in Kyocera Mita (KM) 3.3.0.1 uses a small space of... 6.4 Medium
- kyoceramita scanner file utility The Scanner File Utility (aka listener) in Kyocera Mita (KM) 3.3.0.1 allows remote attackers to... 5.0 Medium
- kyoceramita scanner file utility The Scanner File Utility (aka listener) in Kyocera Mita (KM) 3.3.0.1 does not restrict the... 9.3 High
- kyoceramita scanner file utility Directory traversal vulnerability in the Scanner File Utility (aka listener) in Kyocera Mita (KM)... 7.8 High
- Show olderLoading…