CVEs published in October 2009
357 vulnerabilities, 96 critical, 1 exploited.
- sambamount.cifs in Samba 3.0 before 3.0.37, 3.2 before 3.2.15, 3.3 before 3.3.8 and 3.4 before 3.4.2,...1.9 Low
- samba, canonical ubuntu linux +1 moresmbd in Samba 3.0 before 3.0.37, 3.2 before 3.2.15, 3.3 before 3.3.8, and 3.4 before 3.4.2 allows...4.0 Medium
- mortbay jettyCross-site scripting (XSS) vulnerability in the CookieDump.java sample application in Mort Bay...4.3 Medium
- tatsuhiro tsujikawa aria2Buffer overflow in DHTRoutingTableDeserializer.cc in aria2 0.15.3, 1.2.0, and other versions...10.0 High
- freebsdRace condition in the Pipe (IPC) close function in FreeBSD 6.3 and 6.4 allows local users to...6.9 Medium
- tony million tuniacTuniac 090517c allows remote attackers to cause a denial of service (crash) or possibly execute...9.3 High
- emc captiva pixtools distributed imagingMultiple insecure method vulnerabilities in the PDIControl.PDI.1 ActiveX control (PDIControl.dll)...9.3 High
- openbsdOpenBSD 4.4, 4.5, and 4.6, when running on an i386 kernel, does not properly handle XMM...4.9 Medium
- openoffice openoffice.orgUnspecified vulnerability in OpenOffice.org (OOo) has unknown impact and client-side attack...9.3 High
- openoffice openoffice.orgUnspecified vulnerability in OpenOffice.org (OOo) has unspecified impact and remote attack...10.0 High
- apache openoffice.orgStack-based buffer overflow in OpenOffice.org (OOo) allows remote attackers to execute arbitrary...9.3 High
- dave reid commentrssComment RSS 5.x before 5.x-2.2 and 6.x before 6.x-2.2, a module for Drupal, does not properly...5.0 Medium
- kayako esupport, supportsuite +1 moreCross-site scripting (XSS) vulnerability in modules/tickets/functions_ticketsui.php in Kayako...4.3 Medium
- reductivelabs puppetpuppetmasterd in puppet 0.24.6 does not reset supplementary groups when it switches to a...4.7 Medium
- xerverCross-site scripting (XSS) vulnerability in Xerver HTTP Server 4.32 allows remote attackers to...2.6 Low
- xerverDirectory traversal vulnerability in Xerver HTTP Server 4.32 allows remote attackers to read...5.0 Medium
- datawizard ftpxq serverDataWizard Technologies FtpXQ FTP Server 3.0 allows remote authenticated users to cause a denial...4.0 Medium
- xerverXerver HTTP Server 4.32 allows remote attackers to obtain the source code for a web page via an...5.0 Medium
- xenThe pyGrub boot loader in Xen 3.0.3, 3.3.0, and Xen-3.3.1 does not support the password option in...7.2 High
- hp hp-uxUnspecified vulnerability in bootpd in HP HP-UX B.11.11, B.11.23, and B.11.31 allows remote...7.8 High
- phenotype-cms phenotype cmsSQL injection vulnerability in _phenotype/admin/login.php in Phenotype CMS before 2.9 allows...7.5 High
- kneuro littlesite.phpDirectory traversal vulnerability in ls.php in LittleSite (aka LS or LittleSite.php) 0.1 allows...7.5 High
- phpgenealogyPHP remote file inclusion vulnerability in CoupleDB.php in PHPGenealogy 2.0 allows remote...7.5 High
- yourfreeworld ultra classifieds proCross-site scripting (XSS) vulnerability in listads.php in YourFreeWorld Ultra Classifieds Pro...4.3 Medium
- yourfreeworld ultra classifieds proMultiple cross-site scripting (XSS) vulnerabilities in YourFreeWorld Ultra Classifieds Pro allow...4.3 Medium
- allisclear clear contentDirectory traversal vulnerability in thumb.php in Clear Content 1.1 allows remote attackers to...7.5 High
- epicdjsoftware epicdjMultiple stack-based buffer overflows in EpicDJSoftware EpicDJ 1.3.9.1 allow remote attackers to...9.3 High
- epicdjsoftware epicvjMultiple stack-based buffer overflows in EpicDJSoftware EpicVJ 1.2.8.0 and 1.3.1.2 allow remote...9.3 High
- allisclear clear contentDirectory traversal vulnerability in image.php in Clear Content 1.1 allows remote attackers to...4.3 Medium
- lionwikiDirectory traversal vulnerability in index.php in LionWiki 3.0.3, when magic_quotes_gpc is...6.8 Medium
- john beranek meeting room booking systemSQL injection vulnerability in report.php in Meeting Room Booking System (MRBS) before 1.4.2...7.5 High
- logroverMultiple SQL injection vulnerabilities in login.asp (aka the login screen) in LogRover 2.3 and 2...7.5 High
- universe cmsSQL injection vulnerability in vnews.php in Universe CMS 1.0.6 allows remote attackers to execute...7.5 High
- radscripts radbidsCross-site scripting (XSS) vulnerability in storefront.php in RadScripts RadBids Gold 4 allows...4.3 Medium
- radscripts radbidsSQL injection vulnerability in index.php in RadScripts RadBids Gold 4 allows remote attackers to...6.8 Medium
- al4us mymsgSQL injection vulnerability in Profile.php in MyMsg 1.0.3 allows remote authenticated users to...6.5 Medium
- avast antivirus home, antivirus professional +1 moreUnspecified vulnerability in ashWsFtr.dll in avast! Home and Professional for Windows before 4.8...7.2 High
- avast antivirus home, antivirus professional +1 moreaavmKer4.sys in avast! Home and Professional for Windows before 4.8.1356 does not properly...6.9 Medium
- avast antivirus home, antivirus professional +1 moreStack-based buffer overflow in aswMon2.sys in avast! Home and Professional for Windows 4.8.1351,...7.2 High
- ibm tivoli composite application manager for wesbsphereMultiple cross-site scripting (XSS) vulnerabilities in the Visualization Engine (VE) in IBM...4.3 Medium
- cmsphp project cmsphpCross-site request forgery (CSRF) vulnerability in the Your_account module in CMSphp 0.21 allows...8.8 High
- oracle opensolaris, solaris +1 moreMultiple memory leaks in the IP module in the kernel in Sun Solaris 8 through 10, and OpenSolaris...4.9 Medium
- ibm installation managerArgument injection vulnerability in the iim: URI handler in IBMIM.exe in IBM Installation Manager...9.3 High
- ibm aixnfs.ext in IBM AIX 5.3.x through 5.3.9 and 6.1.0 through 6.1.2 does not properly use the...10.0 High
- ibm aixgssd in IBM AIX 5.3.x through 5.3.9 and 6.1.0 through 6.1.2 does not properly handle the NFSv4...7.2 High
- openbsd opensshA certain Red Hat modification to the ChrootDirectory feature in OpenSSH 4.8, as used in sshd in...6.9 Medium
- osisoft pi serverPI Server in OSIsoft PI System before 3.4.380.x does not properly use encryption in the default...6.4 Medium
- marcin manek d.net cmsDirectory traversal vulnerability in dnet_admin/index.php in d.net CMS allows remote...6.5 Medium
- marcin manek d.net cmsMultiple SQL injection vulnerabilities in d.net CMS allow remote attackers to execute arbitrary...6.5 Medium
- pilotgroup pg etrainingMultiple cross-site scripting (XSS) vulnerabilities in Pilot Group (PG) eTraining allow remote...4.3 Medium
- Show moreLoading…