CVEs published in November 2009
303 vulnerabilities, 65 critical, 1 exploited.
- frontaccountingMultiple SQL injection vulnerabilities in FrontAccounting (FA) before 2.1.7, and 2.2.x before 2.2...7.5 High
- philippe jounin tftpd32Race condition in Philippe Jounin Tftpd32 before 2.80 allows remote attackers to cause a denial...4.3 Medium
- philippe jounin tftpd32tftpd in Philippe Jounin Tftpd32 2.74 and earlier, as used in Wyse Simple Imager (WSI) and other...5.0 Medium
- libexif project libexifHeap-based buffer overflow in the exif_entry_fix function (aka the tag fixup routine) in libexif...6.8 Medium
- hp color laserjet cp3525 printer, color laserjet m3530 multifunction printer +1 moreUnspecified vulnerability on the HP Color LaserJet M3530 Multifunction Printer with firmware 05...10.0 High
- mozilla bugzillaTemplate.pm in Bugzilla 3.3.2 through 3.4.3 and 3.5 through 3.5.1 allows remote attackers to...5.0 Medium
- debian linux, linux kernel, canonical ubuntu linux +10 more +12 moreArray index error in the gdth_read_event function in drivers/scsi/gdth.c in the Linux kernel...7.2 High
- solarwinds serv-u file serverStack-based buffer overflow in the TEA decoding algorithm in RhinoSoft Serv-U FTP server 7.0.0.1,...10.0 High
- linux kernelThe collect_rx_frame function in drivers/isdn/hisax/hfc_usb.c in the Linux kernel before 2.6.32...7.2 High
- linux kernelBuffer overflow in the kvm_vcpu_ioctl_x86_setup_mce function in arch/x86/kvm/x86.c in the KVM...7.8 High
- apple cups, mac os x, mac os x server +4 more +6 moreUse-after-free vulnerability in the abstract file-descriptor handling interface in the...7.5 High
- mozilla firefoxThe nsGIFDecoder2::GifWrite function in decoders/gif/nsGIFDecoder2.cpp in libpr0n in Mozilla...4.3 Medium
- hp openview network node managerMultiple buffer overflows in a certain ActiveX control in ActiveDom.ocx in HP OpenView Network...5.0 Medium
- gimpInteger overflow in the read_channel_data function in plug-ins/file-psd/psd-load.c in GIMP 2.6.7...9.3 High
- hp openview network node managerThe embedded database engine service (aka ovdbrun.exe) in HP OpenView Network Node Manager (OV...5.0 Medium
- labtam-inc proftpBuffer overflow in Labtam ProFTP 2.9 allows remote FTP servers to cause a denial of service ...9.3 High
- moagallery moaSQL injection vulnerability in index.php in Moa Gallery 1.1.0 and 1.2.0 allows remote attackers...6.8 Medium
- invisioncommunity invision power boardMultiple SQL injection vulnerabilities in Invision Power Board (IPB or IP.Board) 3.0.0, 3.0.1,...7.5 High
- turnkeyarcade turnkey arcade scriptSQL injection vulnerability in index.php in Turnkey Arcade Script allows remote attackers to...7.5 High
- qproje com siirlerSQL injection vulnerability in the Q-Proje Siirler Bileseni (com_siirler) component 1.2 RC for...7.5 High
- jtips com jtipsSQL injection vulnerability in the jTips (com_jtips) component 1.0.7 and 1.0.9 for Joomla! allows...7.5 High
- phpdirsubmit php dir submitSQL injection vulnerability in index.php in PHP Dir Submit (aka WebsiteSubmitter or Submitter...6.5 Medium
- faslo playerStack-based buffer overflow in Faslo Player 7.0 allows remote attackers to cause a denial of...9.3 High
- itechscripts itechbidsMultiple SQL injection vulnerabilities in ITechBids 8.0 allow remote attackers to execute...7.5 High
- ed charkow supercharged linkingSQL injection vulnerability in browse.php in Ed Charkow SuperCharged Linking allows remote...7.5 High
- arcadetradescript arcade trade scriptArcade Trade Script 1.0 allows remote attackers to bypass authentication and gain administrative...7.5 High
- maniacomputer new5starratingSQL injection vulnerability in rating.php in New 5 star Rating 1.0 allows remote attackers to...7.5 High
- ninjaforge com ninjamonialsSQL injection vulnerability in the NinjaMonials (com_ninjacentral) component 1.1.0 for Joomla!...7.5 High
- xoopsMultiple unspecified vulnerabilities in XOOPS before 2.4.0 Final have unknown impact and attack...7.5 High
- 2wire 1700hg, 1701hg, 1800hw +3 more +5 moreThe management interface on the 2wire Gateway 1700HG, 1701HG, 1800HW, 2071, 2700HG, and 2701HG-T...7.8 High
- jos de ruijter superseriousstatsSQL injection vulnerability in user.php in Super Serious Stats (aka superseriousstats) before 1.1...7.5 High
- bestpractical rtCross-site scripting (XSS) vulnerability in Best Practical Solutions RT 3.6.x before 3.6.9, 3.8.x...4.3 Medium
- wordpressCross-site scripting (XSS) vulnerability in wp-admin/press-this.php in WordPress before 2.8.6...3.5 Low
- wordpressUnrestricted file upload vulnerability in the wp_check_filetype function in wp-includes/functions...6.0 Medium
- hp discovery\&dependency mapping inventoryUnspecified vulnerability in HP Discovery & Dependency Mapping Inventory (DDMI) 2.5x, 7.5x, and 7...9.0 High
- bract suntrackMultiple cross-site scripting (XSS) vulnerabilities in Bractus SunTrack allow remote attackers to...4.3 Medium
- vivaprograms infinity scriptcp/profile.php in VivaPrograms Infinity 2.0.5 and earlier does not require administrative...7.5 High
- cowonamerica cowon media center-jetaudioJetAudio 7.5.3 COWON Media Center allows remote attackers to cause a denial of service (memory...4.3 Medium
- tandberg mxp endpointsBuffer overflow in the FTP service on the Tandberg MXP F7.0 allows remote attackers to cause a...9.3 High
- joomla joomla\!Joomla! before 1.5.15 allows remote attackers to read an extension's XML file, and thereby obtain...5.0 Medium
- joomla joomla\!Unspecified vulnerability in the Front-End Editor in the com_content component in Joomla! before...5.5 Medium
- rim blackberry 8800, blackberry browser +1 moreResearch In Motion (RIM) BlackBerry Browser on the BlackBerry 8800 allows remote attackers to...5.0 Medium
- microsoft internet explorerMicrosoft Internet Explorer 6 through 6.0.2900.2180 and 7 through 7.0.6000.16711 allows remote...5.0 Medium
- martin lambers msmtpMartin Lambers msmtp before 1.4.19, when OpenSSL is used, does not properly handle a '\0'...6.4 Medium
- martin lambers mpopMartin Lambers mpop before 1.0.19, when OpenSSL is used, does not properly handle a '\0'...5.0 Medium
- sun virtualbox, xvm virtualbox +1 moreUnspecified vulnerability in Guest Additions in Sun xVM VirtualBox 1.6.x and 2.0.x before 2.0.12,...2.1 Low
- debian linux, linux kernel, avaya aura application enablement services +15 more +17 moreThe poll_mode_io file for the megaraid_sas driver in the Linux kernel 2.6.31.6 and earlier has...7.1 High
- linux kernelThe dbg_lvl file for the megaraid_sas driver in the Linux kernel before 2.6.27 has world-writable...6.6 Medium
- linux kernelThe do_mmap_pgoff function in mm/nommu.c in the Linux kernel before 2.6.31.6, when the CPU lacks...4.9 Medium
- ibm websphere application serverCross-site request forgery (CSRF) vulnerability in the administrative console in the Security...6.8 Medium
- Show moreLoading…