CVEs published in November 2009
303 vulnerabilities, 65 critical, 1 exploited.
- apple mac os x, mac os x server +1 moreMultiple integer overflows in CoreGraphics in Apple Mac OS X 10.5.8 allow remote attackers to...6.8 Medium
- apple mac os x, mac os x server +1 moreCertificate Assistant in Apple Mac OS X before 10.6.2 does not properly handle a '\0' character...4.3 Medium
- apple mac os x, mac os x server +1 moreMultiple buffer overflows in Apple Type Services (ATS) in Apple Mac OS X 10.5.8 allow remote...6.8 Medium
- apple mac os x, mac os x server +1 moreThe Apache HTTP Server in Apple Mac OS X before 10.6.2 enables the HTTP TRACE method, which...4.3 Medium
- apple mac os x, mac os x server +1 moreAFP Client in Apple Mac OS X 10.5.8 allows remote AFP servers to execute arbitrary code or cause...9.3 High
- apple mac os x serverAdaptive Firewall in Apple Mac OS X before 10.6.2 does not properly handle invalid usernames in...5.0 Medium
- apple mac os x, mac os x server +1 moreLaunch Services in Apple Mac OS X 10.6.x before 10.6.2 recursively clears quarantine information...6.8 Medium
- apple mac os x, mac os x server +1 moreHelp Viewer in Apple Mac OS X before 10.6.2 does not use an HTTPS connection to retrieve Apple...5.4 Medium
- digium asterisk, asterisknow, s800i +2 moreAsterisk Open Source 1.2.x before 1.2.35, 1.4.x before 1.4.26.3, 1.6.0.x before 1.6.0.17, and 1.6...5.0 Medium
- punkbuster, raven software soldier of fortune 2 +1 moreBuffer overflow in pbsv.dll, as used in Soldier of Fortune II and possibly other applications...9.3 High
- viewvcUnspecified vulnerability in ViewVC 1.0 before 1.0.9 and 1.1 before 1.1.2 has unknown impact and...5.0 Medium
- viewvcCross-site scripting (XSS) vulnerability in viewvc.py in ViewVC 1.0 before 1.0.9 and 1.1 before 1...4.3 Medium
- sun virtual desktop infrastructure, virtualbox +1 moreThe VirtualBox 2.0.8 and 2.0.10 web service in Sun Virtual Desktop Infrastructure (VDI) 3.0 does...7.5 High
- apple mac os x, mac os x server +1 moreThe web interface in CUPS before 1.4.2, as used on Apple Mac OS X before 10.6.2 and other...4.3 Medium
- sun jreThe Java Web Start implementation in Sun Java SE 6 before Update 17 does not properly handle the...7.5 High
- sun jreSun Java SE 5.0 before Update 22 and 6 before Update 17 on Windows allows remote attackers to...5.0 Medium
- sun openjdk, jre +1 moreThe TimeZone.getTimeZone method in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and...5.0 Medium
- sun jdk, openjdk, jre +2 moreMultiple unspecified vulnerabilities in the Windows Pluggable Look and Feel (PL&F) feature in the...7.5 High
- sun jdk, openjdk, jre +2 moreMultiple unspecified vulnerabilities in the Swing implementation in Sun Java SE 5.0 before Update...7.5 High
- sun openjdk, jre +1 moreSun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, does not prevent the...7.5 High
- sun jre, openjdk +1 moreThe Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE 5.0 before...5.0 Medium
- sun openjdk, jre +1 moreMultiple unspecified vulnerabilities in the (1) X11 and (2) Win32GraphicsDevice subsystems in Sun...7.5 High
- sun jreUnspecified vulnerability in the TrueType font parsing functionality in Sun Java SE 5.0 before...5.0 Medium
- sun jre, openjdk +1 moreDirectory traversal vulnerability in the ICC_Profile.getInstance method in Java Runtime...5.0 Medium
- linux kernelThe nfs4_proc_lock function in fs/nfs/nfs4proc.c in the NFSv4 client in the Linux kernel before 2...7.8 High
- chad phillips userprotectMultiple cross-site request forgery (CSRF) vulnerabilities in the User Protect module 5.x before...6.8 Medium
- ezra barnett gildesgame smartqueue ogThe Smartqueue_og module 5.x before 5.x-1.3 and 6.x before 6.x-1.0-rc3, a module for Drupal, does...4.0 Medium
- sean robertson crmngpAn administration page in the NGP COO/CWP Integration (crmngp) module 6.x before 6.x-1.12 for...5.0 Medium
- sean robertson crmngpCross-site scripting (XSS) vulnerability in the NGP COO/CWP Integration (crmngp) module 6.x...4.3 Medium
- karim ratib zoomifyCross-site scripting (XSS) vulnerability in the Zoomify module 5.x before 5.x-2.2 and 6.x before...4.3 Medium
- greg knaddison s5Cross-site scripting (XSS) vulnerability in the S5 Presentation Player module 6.x-1.x before 6.x...4.3 Medium
- ronan dowling nodehierarchyCross-site scripting (XSS) vulnerability in the Node Hierarchy module 5.x before 5.x-1.3 and 6.x...4.3 Medium
- john c fiala linkCross-site scripting (XSS) vulnerability in the "Separate title and URL" formatter in the Link...4.3 Medium
- wolfgang ziegler temporary invitationCross-site scripting (XSS) vulnerability in the Temporary Invitation module 5.x before 5.x-2.3...4.3 Medium
- xerox fiery webtoolsSQL injection vulnerability in summary.php in Xerox Fiery Webtools allows remote attackers to...7.5 High
- tftgalleryDirectory traversal vulnerability in index.php in TFTgallery 0.13 allows remote attackers to read...5.0 Medium
- tftgalleryCross-site scripting (XSS) vulnerability in settings.php in TFTgallery 0.13 allows remote...4.3 Medium
- apache http server, gnu gnutls, mozilla nss +5 more +7 moreApache Tomcat affected by vulnerability in TLS and SSL protocol5.8 Medium
- ecouriersoftware e-courirer cmsMultiple cross-site scripting (XSS) vulnerabilities in e-Courier CMS allow remote attackers to...4.3 Medium
- cubecartclasses/session/cc_admin_session.php in CubeCart 4.3.4 does not properly restrict administrative...7.5 High
- manageengine netflow analyzerMultiple cross-site scripting (XSS) vulnerabilities in jspui/index.jsp in ManageEngine Netflow...4.3 Medium
- cherokee httpdDirectory traversal vulnerability in Cherokee Web Server 0.5.4 and earlier for Windows allows...5.0 Medium
- ecouriersoftware e-courirer cmsMultiple cross-site scripting (XSS) vulnerabilities in e-Courier CMS allow remote attackers to...4.3 Medium
- ibm powerhaUnspecified vulnerability in the Cluster Management component in IBM PowerHA 5.4, 5.4.1, 5.5, and...7.8 High
- sun opensolaris, solaris +1 moreMemory leak in the Sockets Direct Protocol (SDP) driver in Sun Solaris 10, and OpenSolaris snv_57...7.8 High
- blenderBlender 2.34, 2.35a, 2.40, and 2.49b allows remote attackers to execute arbitrary code via a ...9.3 High
- linux kernel, canonical ubuntu linux +1 moreThe connector layer in the Linux kernel before 2.6.31.5 does not require the CAP_SYS_ADMIN...7.2 High
- internet2 identity provider, service provider +1 moreMultiple cross-site scripting (XSS) vulnerabilities in the Identity Provider (IdP) 1.3.x before 1...2.6 Low
- hp power managerStack-based buffer overflow in the login form in the management web server in HP Power Manager...10.0 High
- sun java system web serverBuffer overflow in Sun Java System Web Server 7.0 Update 6 has unspecified impact and remote...9.3 High
- Show moreLoading…