CVEs published in November 2009

303 vulnerabilities, 65 critical, 1 exploited.

• cutephp cutenews Multiple directory traversal vulnerabilities in CutePHP CuteNews 1.4.6, when magic_quotes_gpc is... CVE-2009-4116 3.5 LowNovember 30, 2009
• cutephp cutenews Multiple static code injection vulnerabilities in the Categories module in CutePHP CuteNews 1.4.6... CVE-2009-4115 Public exploit 6.5 MediumNovember 30, 2009
• kaspersky anti-virus kl1.sys in Kaspersky Anti-Virus 2010 9.0.0.463, and possibly other versions before 9.0.0.736,... CVE-2009-4114 Public exploit 4.9 MediumNovember 30, 2009
• cutephp cutenews, korn19 utf-8 cutenews +1 more Static code injection vulnerability in the Categories module in CutePHP CuteNews 1.4.6 and UTF-8... CVE-2009-4113 6.5 MediumNovember 30, 2009
• cacti Cacti 0.8.7e and earlier allows remote authenticated administrators to gain privileges by... CVE-2009-4112 Public exploitFix available EPSS 11.5% 9.0 HighNovember 30, 2009
• mysql MySQL 5.1.x before 5.1.41 allows local users to bypass certain privilege checks by calling CREATE... CVE-2009-4030 4.4 MediumNovember 30, 2009
• mysql The vio_verify_callback function in viosslfactories.c in MySQL 5.0.x before 5.0.88 and 5.1.x... CVE-2009-4028 6.8 MediumNovember 30, 2009
• mysql mysqld in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41 does not (1) properly handle errors... CVE-2009-4019 Public exploit EPSS 16.3% 4.0 MediumNovember 30, 2009
• mysql sql/sql_table.cc in MySQL 5.0.x through 5.0.88, 5.1.x through 5.1.41, and 6.0 before 6.0.9-alpha,... CVE-2008-7247 6.0 MediumNovember 30, 2009
• pear Argument injection vulnerability in the traceroute function in Traceroute.php in the... CVE-2009-4025 10.0 HighNovember 28, 2009
• pear Argument injection vulnerability in the ping function in Ping.php in the Net_Ping package before... CVE-2009-4024 Fix available 10.0 HighNovember 28, 2009
• dnnsoftware dotnetnuke Cross-site scripting (XSS) vulnerability in the search functionality in DotNetNuke 4.8 through 5... CVE-2009-4110 4.3 MediumNovember 28, 2009
• dnnsoftware dotnetnuke The install wizard in DotNetNuke 4.0 through 5.1.4 does not prevent anonymous users from... CVE-2009-4109 5.0 MediumNovember 28, 2009
• dxm2008 xm easy personal ftp server XM Easy Personal FTP Server 5.8.0 allows remote authenticated users to cause a denial of service ... CVE-2009-4108 Public exploit 4.0 MediumNovember 28, 2009
• amplusnet invisible browsing Buffer overflow in Invisible Browsing 5.0.52 allows user-assisted remote attackers to execute... CVE-2009-4107 Public exploit 9.3 HighNovember 28, 2009
• ohloh agoko cms Unrestricted file upload vulnerability in admintools/editpage-2.php in Agoko CMS 0.4 and earlier... CVE-2009-4106 Public exploit 7.5 HighNovember 28, 2009
• typsoft ftp server TYPSoft FTP Server 1.10 allows remote authenticated users to cause a denial of service (crash) by... CVE-2009-4105 Public exploit 3.5 LowNovember 28, 2009
• lyften com lyftenbloggie SQL injection vulnerability in Lyften Designs LyftenBloggie (com_lyftenbloggie) component 1.0.4... CVE-2009-4104 Public exploit 7.5 HighNovember 28, 2009
• robo-ftp Buffer overflow in Robo-FTP 3.6.17, and possibly other versions, allows remote FTP servers to... CVE-2009-4103 9.3 HighNovember 28, 2009
• mozilla firefox, sage.mozdev sage +1 more Sage 1.4.3 and earlier extension for Firefox performs certain operations with chrome privileges,... CVE-2009-4102 Fix available 9.3 HighNovember 28, 2009
• didier ernotte inforss infoRSS 1.1.4.2 and earlier extension for Firefox performs certain operations with chrome... CVE-2009-4101 9.3 HighNovember 28, 2009
• yoono Yoono extension before 6.1.1 for Firefox performs certain operations with chrome privileges,... CVE-2009-4100 9.3 HighNovember 28, 2009
• g4j.laoneo com gcalendar SQL injection vulnerability in the Google Calendar GCalendar (com_gcalendar) component 1.1.2, 2.1... CVE-2009-4099 Public exploit 7.5 HighNovember 28, 2009
• openx Unrestricted file upload vulnerability in banner-edit.php in OpenX adserver 2.8.1 and earlier... CVE-2009-4098 Public exploit EPSS 18.7% 6.0 MediumNovember 28, 2009
• malsmith serenity audio player Stack-based buffer overflow in the MplayInputFile function in Serenity Audio Player 3.2.3 and... CVE-2009-4097 Public exploit 9.3 HighNovember 28, 2009
• scriptlerim radio isetek scripti RADIO istek scripti 2.5 stores sensitive information under the web root with insufficient access... CVE-2009-4096 Public exploit 7.5 HighNovember 28, 2009
• companionway myphile myPhile 1.2.1 allows remote attackers to bypass authentication via an empty password. NOTE: some... CVE-2009-4095 7.5 HighNovember 27, 2009
• designforjoomla com ezine PHP remote file inclusion vulnerability in class/php/d4m_ajax_pagenav.php in the D4J eZine ... CVE-2009-4094 Public exploit 7.5 HighNovember 27, 2009
• simplog Multiple cross-site scripting (XSS) vulnerabilities in comments.php in Simplog 0.9.3.2, and... CVE-2009-4093 Public exploit 4.3 MediumNovember 27, 2009
• simplog Cross-site request forgery (CSRF) vulnerability in user.php in Simplog 0.9.3.2, and possibly... CVE-2009-4092 Public exploit 6.8 MediumNovember 27, 2009
• simplog comments.php in Simplog 0.9.3.2, and possibly earlier, does not properly restrict access, which... CVE-2009-4091 Public exploit 5.0 MediumNovember 27, 2009
• telepark telepark.wiki Unrestricted file upload vulnerability in ajax/addComment.php in telepark.wiki 2.4.23 and earlier... CVE-2009-4090 7.5 HighNovember 27, 2009
• telepark telepark.wiki telepark.wiki 2.4.23 and earlier allows remote attackers to bypass authorization and (1) delete... CVE-2009-4089 Public exploit 5.0 MediumNovember 27, 2009
• telepark telepark.wiki Multiple directory traversal vulnerabilities in telepark.wiki 2.4.23 and earlier allow remote... CVE-2009-4088 Public exploit 6.8 MediumNovember 27, 2009
• telepark telepark.wiki Cross-site scripting (XSS) vulnerability in index.php in telepark.wiki 2.4.23 and earlier allows... CVE-2009-4087 4.3 MediumNovember 27, 2009
• javascript xerver http server CRLF injection vulnerability in Xerver HTTP Server 4.31 and 4.32 allows remote attackers to... CVE-2009-4086 Public exploit 5.0 MediumNovember 27, 2009
• jabba laci phptraverser PHP remote file inclusion vulnerability in assets/plugins/mp3_id/mp3_id.php in PHP Traverser 0.8... CVE-2009-4085 Public exploit 7.5 HighNovember 27, 2009
• e107 SQL injection vulnerability in the search feature in e107 0.7.16 and earlier allows remote... CVE-2009-4084 7.5 HighNovember 27, 2009
• e107 Multiple cross-site scripting (XSS) vulnerabilities in e107 0.7.16 and earlier allow remote... CVE-2009-4083 4.3 MediumNovember 27, 2009
• lanifex outreach project tool PHP remote file inclusion vulnerability in forums/Forum_Include/index.php in Outreach Project... CVE-2009-4082 Public exploit 7.5 HighNovember 27, 2009
• dag.wieers dstat Untrusted search path vulnerability in dstat before r3199 allows local users to gain privileges... CVE-2009-4081 4.4 MediumNovember 27, 2009
• sun opensolaris, sunos +1 more Multiple unspecified vulnerabilities in ldap_cachemgr (aka the LDAP client configuration cache... CVE-2009-4080 2.1 LowNovember 27, 2009
• dag.wieers dstat Multiple untrusted search path vulnerabilities in dstat before 0.7.0 allow local users to gain... CVE-2009-3894 Fix available 4.4 MediumNovember 27, 2009
• gnu libtool ltdl.c in libltdl in GNU Libtool 1.5.x, and 2.2.6 before 2.2.6b, as used in Ham Radio Control... CVE-2009-3736 Fix available 6.9 MediumNovember 27, 2009
• cacti Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.7e allow remote attackers to... CVE-2009-4032 Public exploitFix available 4.3 MediumNovember 27, 2009
• linux kernel The do_insn_fetch function in arch/x86/kvm/emulate.c in the x86 emulator in the KVM subsystem in... CVE-2009-4031 Fix available 7.8 HighNovember 27, 2009
• php The proc_open function in ext/standard/proc_open.c in PHP before 5.2.11 and 5.3.x before 5.3.1... CVE-2009-4018 Public exploit EPSS 11.3% 7.5 HighNovember 27, 2009
• redmine Cross-site request forgery (CSRF) vulnerability in Redmine 0.8.5 and earlier allows remote... CVE-2009-4079 Fix available 6.8 MediumNovember 25, 2009
• redmine Multiple cross-site scripting (XSS) vulnerabilities in Redmine 0.8.5 and earlier allow remote... CVE-2009-4078 Fix available 4.3 MediumNovember 25, 2009
• roundcube webmail Cross-site request forgery (CSRF) vulnerability in Roundcube Webmail 0.2.2 and earlier allows... CVE-2009-4077 Fix available 6.8 MediumNovember 25, 2009
• Show olderLoading…