CVEs published in October 2009

357 vulnerabilities, 96 critical, 1 exploited.

• mahara Cross-site scripting (XSS) vulnerability in the resume blocktype in Mahara before 1.0.13, and 1.1... CVE-2009-3299 4.3 MediumOctober 31, 2009
• mahara Mahara before 1.0.13, and 1.1.x before 1.1.7, allows remote authenticated institution... CVE-2009-3298 6.5 MediumOctober 31, 2009
• opera browser Opera before 10.01 on Windows does not prevent use of Web fonts in rendering the product's own... CVE-2009-3832 5.8 MediumOctober 30, 2009
• opera browser Opera before 10.01 allows remote attackers to execute arbitrary code or cause a denial of service... CVE-2009-3831 9.3 HighOctober 30, 2009
• microsoft sharepoint server The download functionality in Team Services in Microsoft Office SharePoint Server 2007 12.0.0... CVE-2009-3830 Public exploit EPSS 32.6% 5.0 MediumOctober 30, 2009
• wireshark Integer overflow in wiretap/erf.c in Wireshark before 1.2.2 allows remote attackers to execute... CVE-2009-3829 Fix available 9.3 HighOctober 30, 2009
• linux kernel The handle_dr function in arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 2.6... CVE-2009-3722 7.1 HighOctober 30, 2009
• linux kernel The lookup_cb_cred function in fs/nfsd/nfs4callback.c in the nfsd4 subsystem in the Linux kernel... CVE-2009-3623 7.8 HighOctober 30, 2009
• wireshark Off-by-one error in the dissect_negprot_response function in packet-smb.c in the SMB dissector in... CVE-2009-3551 Fix available 5.0 MediumOctober 30, 2009
• wireshark The DCERPC/NT dissector in Wireshark 0.10.10 through 1.0.9 and 1.2.0 through 1.2.2 allows remote... CVE-2009-3550 Fix available 4.3 MediumOctober 30, 2009
• wireshark packet-paltalk.c in the Paltalk dissector in Wireshark 1.2.0 through 1.2.2, on SPARC and certain... CVE-2009-3549 Fix available 5.0 MediumOctober 30, 2009
• everfocus edr1600 The web interface for Everfocus EDR1600 DVR allows remote attackers to bypass authentication and... CVE-2009-3828 Public exploit 5.0 MediumOctober 30, 2009
• linux kernel The update_cr8_intercept function in arch/x86/kvm/x86.c in the KVM subsystem in the Linux kernel... CVE-2009-3640 4.9 MediumOctober 29, 2009
• linux kernel Integer overflow in the kvm_dev_ioctl_get_supported_cpuid function in arch/x86/kvm/x86.c in the... CVE-2009-3638 7.2 HighOctober 29, 2009
• perl Perl 5.10.1 allows context-dependent attackers to cause a denial of service (application crash)... CVE-2009-3626 Fix available 5.0 MediumOctober 29, 2009
• mozilla firefox Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox 3.5.x before 3.5... CVE-2009-3383 10.0 HighOctober 29, 2009
• mozilla firefox Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.4... CVE-2009-3381 10.0 HighOctober 29, 2009
• mozilla firefox Multiple unspecified vulnerabilities in libvorbis, as used in Mozilla Firefox 3.5.x before 3.5.4,... CVE-2009-3379 Fix available 10.0 HighOctober 29, 2009
• mozilla firefox The oggplay_data_handle_theora_frame function in media/liboggplay/src/liboggplay/oggplay_data.c... CVE-2009-3378 Fix available 9.3 HighOctober 29, 2009
• mozilla firefox Multiple unspecified vulnerabilities in liboggz before cf5feeaab69b05e24, as used in Mozilla... CVE-2009-3377 Fix available 10.0 HighOctober 29, 2009
• mozilla firefox Use-after-free vulnerability in Mozilla Firefox 3.5.x before 3.5.4 allows remote attackers to... CVE-2009-3371 10.0 HighOctober 29, 2009
• squidguard Multiple buffer overflows in squidGuard 1.4 allow remote attackers to bypass intended URL... CVE-2009-3826 Fix available 5.0 MediumOctober 28, 2009
• squidguard Buffer overflow in sgLog.c in squidGuard 1.3 and 1.4 allows remote attackers to cause a denial of... CVE-2009-3700 Fix available 5.0 MediumOctober 28, 2009
• snort Snort before 2.8.5.1, when the -v option is enabled, allows remote attackers to cause a denial of... CVE-2009-3641 Public exploit EPSS 38.8% 4.3 MediumOctober 28, 2009
• proftpd The mod_tls module in ProFTPD before 1.3.2b, and 1.3.3 before 1.3.3rc2, when the dNSNameRequired... CVE-2009-3639 Fix available 5.8 MediumOctober 28, 2009
• thomas graber gencms Multiple directory traversal vulnerabilities in GenCMS 2006 allow remote attackers to include and... CVE-2009-3825 Public exploit 7.5 HighOctober 28, 2009
• michael j greenwood php content manager Directory traversal vulnerability in include/processor.php in Greenwood PHP Content Manager 0.3.2... CVE-2009-3824 Public exploit 7.5 HighOctober 28, 2009
• ac4p mobilelib gold Directory traversal vulnerability in myhtml.php in Mobilelib GOLD 3.0, when magic_quotes_gpc is... CVE-2009-3823 Public exploit 4.3 MediumOctober 28, 2009
• fijiwebdesign com ajaxchat PHP remote file inclusion vulnerability in Fiji Web Design Ajax Chat (com_ajaxchat) component 1.0... CVE-2009-3822 Public exploit 7.5 HighOctober 28, 2009
• apache solr Apache Solr Search for TYPO3 vulnerable to Cross-site Scripting CVE-2009-3821 Fix available 4.3 MediumOctober 28, 2009
• flagbit fb filebase SQL injection vulnerability in the Flagbit Filebase (fb_filebase) extension 0.1.0 for TYPO3... CVE-2009-3820 7.5 HighOctober 28, 2009
• urs maag maag randomimage Unspecified vulnerability in the Random Images (maag_randomimage) extension 1.6.4 and earlier for... CVE-2009-3819 10.0 HighOctober 28, 2009
• stanislas rolland sr freecap freeCap CAPTCHA extension for TYPO3 has vulnerability in the session handling feature CVE-2009-3818 Fix available 10.0 HighOctober 28, 2009
• ordasoft com booklibrary PHP remote file inclusion vulnerability in doc/releasenote.php in the BookLibrary ... CVE-2009-3817 Public exploit 7.5 HighOctober 28, 2009
• ibm lotus connections Multiple cross-site scripting (XSS) vulnerabilities in Activities pages in the Mobile subsystem... CVE-2009-3816 4.3 MediumOctober 28, 2009
• libexpat project libexpat, apache http server +1 more The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python,... CVE-2009-3720 Fix available EPSS 27.9% 5.0 MediumOctober 28, 2009
• mozilla seamonkey The mail component in Mozilla SeaMonkey before 1.1.19 does not properly restrict execution of... CVE-2009-3385 7.1 HighOctober 28, 2009
• mozilla firefox layout/base/nsCSSFrameConstructor.cpp in the browser engine in Mozilla Firefox 3.0.x before 3.0... CVE-2009-3382 Public exploit EPSS 10.8% 10.0 HighOctober 28, 2009
• mozilla firefox Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.0.x before 3.0.15... CVE-2009-3380 10.0 HighOctober 28, 2009
• mozilla firefox, seamonkey +1 more Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, does not properly... CVE-2009-3376 9.3 HighOctober 28, 2009
• mozilla firefox content/html/document/src/nsHTMLDocument.cpp in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x... CVE-2009-3375 4.3 MediumOctober 28, 2009
• mozilla firefox The XPCVariant::VariantDataToJS function in the XPCOM implementation in Mozilla Firefox 3.0.x... CVE-2009-3374 7.5 HighOctober 28, 2009
• mozilla firefox, seamonkey +1 more Heap-based buffer overflow in the GIF image parser in Mozilla Firefox before 3.0.15 and 3.5.x... CVE-2009-3373 Public exploit EPSS 15.5% 10.0 HighOctober 28, 2009
• mozilla firefox, seamonkey +1 more Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, allows remote... CVE-2009-3372 9.3 HighOctober 28, 2009
• mozilla firefox Mozilla Firefox before 3.0.15, and 3.5.x before 3.5.4, allows remote attackers to read form... CVE-2009-3370 5.0 MediumOctober 28, 2009
• runcms RunCMS 2M1, when running with certain error_reporting levels, allows remote attackers to obtain... CVE-2009-3815 5.0 MediumOctober 27, 2009
• runcms Static code injection vulnerability in RunCMS 2M1 allows remote authenticated administrators to... CVE-2009-3814 6.5 MediumOctober 27, 2009
• runcms Multiple SQL injection vulnerabilities in RunCMS 2M1 allow remote authenticated users to execute... CVE-2009-3813 6.5 MediumOctober 27, 2009
• otslabs otsav dj, otsav radio, otsav tv +2 more Heap-based buffer overflow in OtsAV DJ trial version 1.85.64.0, Radio trial version 1.85.64.0, TV... CVE-2009-3812 Public exploit 9.3 HighOctober 27, 2009
• assistanttools music tag editor Stack-based buffer overflow in Music Tag Editor 1.61 build 212 allows remote attackers to execute... CVE-2009-3811 Public exploit 9.3 HighOctober 27, 2009
• Show olderLoading…