CVEs published in November 2009
303 vulnerabilities, 65 critical, 1 exploited.
- sun jdk, jre, sdk +2 moreUnspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6...5.0 Medium
- sun jdk, jre, sdk +2 moreUnspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6...5.0 Medium
- sun jdk, jre, sdk +2 moreThe MessageDigest.isEqual function in Java Runtime Environment (JRE) in Sun Java SE in JDK and...5.0 Medium
- sun jdk, jre, sdk +2 moreInteger overflow in the JPEGImageReader implementation in the ImageI/O component in Sun Java SE...9.3 High
- sun jdk, jre, sdk +2 moreThe JPEG Image Writer in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before...9.3 High
- sun jdk, jre, sdk +2 moreUnspecified vulnerability in the JPEG JFIF Decoder in Sun Java SE in JDK and JRE 5.0 before...9.3 High
- sun jdk, jre, sdk +2 moreHeap-based buffer overflow in the setBytePixels function in the Abstract Window Toolkit (AWT) in...9.3 High
- sun jdk, jre, sdk +2 moreStack-based buffer overflow in the setDiffICM function in the Abstract Window Toolkit (AWT) in...9.3 High
- sun jdk, jre, sdk +2 moreSun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3...9.3 High
- sun jdk, jre, sdk +2 moreStack-based buffer overflow in the HsbParser.getSoundBank function in Sun Java SE in JDK and JRE...9.3 High
- sun jdk, jre +1 moreThe Java Web Start Installer in Sun Java SE in JDK and JRE 6 before Update 17 does not properly...9.3 High
- sun jdk, jre +1 moreThe launch method in the Deployment Toolkit plugin in Java Runtime Environment (JRE) in Sun Java...9.3 High
- microsoft windows, sun jdk, jre +2 moreThe Java Update functionality in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0...7.5 High
- novell groupwiseBuffer overflow in the gxmim1.dll ActiveX control in Novell Groupwise Client 7.0.3.1294 allows...5.0 Medium
- novell edirectoryThe NDSD process in Novell eDirectory 8.7.3 before 8.7.3.10 ftf2 and eDirectory 8.8 before 8.8.5...5.0 Medium
- safenet-inc softremoteStack-based buffer overflow in SafeNet SoftRemote 10.8.5 (Build 2) and 10.3.5 (Build 6), and...6.9 Medium
- idefense comraiderMultiple insecure method vulnerabilities in Idefense Labs COMRaider allow remote attackers to...5.8 Medium
- eeye retina network security scanner, retina wifi scanner +1 moreBuffer overflow in eEye Retina WiFi Scanner 1.0.8.68, as used in Retina Network Security Scanner...9.3 High
- gejosoftCross-site scripting (XSS) vulnerability in GejoSoft allows remote attackers to inject arbitrary...4.3 Medium
- softonic sciteBuffer overflow in Softonic International SciTE 1.72 allows user-assisted remote attackers to...4.3 Medium
- twilightcms twilight cmsCross-site scripting (XSS) vulnerability in the default URI in news/ in Twilight CMS before 4.1...4.3 Medium
- ibm tivoli storage managerMultiple unspecified vulnerabilities in the (1) UNIX and (2) Linux backup-archive clients, and...9.3 High
- ibm tivoli storage managerBuffer overflow in the traditional client scheduler in the client in IBM Tivoli Storage Manager ...10.0 High
- ibm tivoli storage managerStack-based buffer overflow in the client acceptor daemon (CAD) scheduler in the client in IBM...9.3 High
- linux kernel, canonical ubuntu linux, fedoraproject fedora +11 more +13 moreMultiple race conditions in fs/pipe.c in the Linux kernel before 2.6.32-rc6 allow local users to...7.0 High
- adobe shockwave playerAdobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via a...9.3 High
- adobe shockwave playerAdobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via...9.3 High
- adobe shockwave playerAdobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via...9.3 High
- adobe shockwave playerArray index error in Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute...9.3 High
- ibm lotus notes intellisync, rim blackberry desktop software +1 moreBuffer overflow in the IBM Lotus Notes Intellisync ActiveX control in lnresobject.dll in...9.3 High
- ibm runtimes for java technologyUnspecified vulnerability in the XML component in IBM Runtimes for Java Technology 5.0.0 before...7.5 High
- sun solarisTrusted Extensions in Sun Solaris 10 interferes with the operation of the xscreensaver-demo...7.2 High
- symantec altiris deployment solution, altiris notification server, altiris management platform +2 moreStack-based buffer overflow in the BrowseAndSaveFile method in the Altiris eXpress NS...9.3 High
- sun opensolaris, solaris +1 moreUnspecified vulnerability in the Solaris Trusted Extensions Policy configuration in Sun Solaris...6.8 Medium
- pmail pegasus mailStack-based buffer overflow in Pegasus Mail (PMail) 4.41 and possibly 4.51 allows remote POP3...9.3 High
- eureka-email eureka emailStack-based buffer overflow in Eureka Email 2.2q allows remote POP3 servers to execute arbitrary...9.3 High
- arubanetworks aruba mobility controller, arubaos +1 moreArubaOS 3.3.1.x, 3.3.2.x, RN 3.1.x, 3.4.x, and 3.3.2.x-FIPS on the Aruba Mobility Controller...6.1 Medium
- whorl ltd jshopSQL injection vulnerability in the JShop (com_jshop) component for Joomla! allows remote...7.5 High
- webguerilla com photoblogSQL injection vulnerability in the Photoblog (com_photoblog) component alpha 3 and alpha 3a for...7.5 High
- tftgalleryCross-site scripting (XSS) vulnerability in index.php in TFTgallery 0.13 allows remote attackers...4.3 Medium
- vmware esx, esxi, server +2 moreDirectory traversal vulnerability in VMware Server 1.x before 1.0.10 build 203137 and 2.x before...5.0 Medium
- typo3Typo3 API Install Tool vulnerable to Cross-site Scripting4.3 Medium
- typo3TYPO3 Install Tool Subcomponent Allows Access Using Only a Password's MD5 Hash as a Credential6.8 Medium
- typo3Cross-site scripting (XSS) vulnerability in the Frontend Login Box (aka felogin) subcomponent in...4.3 Medium
- typo3TYPO3 API function vulnerable to Cross-site Scripting4.3 Medium
- typo3SQL injection vulnerability in the traditional frontend editing feature in the Frontend Editing...6.5 Medium
- typo3TYPO3 Backend Command Injection via Shell Metacharacters in Uploaded File Name8.5 High
- typo3TYPO3 Backend vulnerable to Frame Hijacking5.5 Medium
- typo3TYPO3 Backend vulnerable to Cross-site Scripting3.5 Low
- typo3TYPO3 Backend Discloses Encryption Key4.0 Medium
- Show moreLoading…