CVEs published in November 2009
303 vulnerabilities, 65 critical, 1 exploited.
- roundcube webmailCross-site request forgery (CSRF) vulnerability in Roundcube Webmail 0.2.2 and earlier allows...6.8 Medium
- sun opensolaris, solaris +1 moreUnspecified vulnerability in the timeout mechanism in sshd in Sun Solaris 10, and OpenSolaris...5.0 Medium
- microsoft internet explorerThe XSS Filter in Microsoft Internet Explorer 8 allows remote attackers to leverage the "response...4.3 Medium
- isc bindUnspecified vulnerability in ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P4, 9.5 before 9.5.2...2.6 Low
- linux kernelThe fuse_direct_io function in fs/fuse/file.c in the fuse subsystem in the Linux kernel before 2...4.9 Medium
- symantec altiris deployment solution, altiris notification server, altiris management platform +2 moreBuffer overflow in the RunCmd method in the Altiris eXpress NS Console Utilities ActiveX control...9.3 High
- phpThe zend_restore_ini_entry_cb function in zend_ini.c in PHP 5.3.0, 5.2.10, and earlier versions...6.4 Medium
- microsoft internet explorerThe printing functionality in Microsoft Internet Explorer 8 allows remote attackers to discover a...5.0 Medium
- opera browserUnspecified vulnerability in Opera before 10.10 has unknown impact and attack vectors, related to...10.0 High
- opera browserOpera before 10.10, when exception stacktraces are enabled, places scripting error messages from...5.8 Medium
- f5 nginxDirectory traversal vulnerability in src/http/modules/ngx_http_dav_module.c in nginx (aka Engine...4.9 Medium
- dovecotDovecot 1.2.x before 1.2.8 sets 0777 permissions during creation of certain directories at...5.5 Medium
- autodesk alias wavefront maya, maya +1 moreAutodesk Maya 8.0, 8.5, 2008, 2009, and 2010 and Alias Wavefront Maya 6.5 and 7.0 allow remote...9.3 High
- autodesk 3ds maxAutodesk 3D Studio Max (3DSMax) 6 through 9 and 2008 through 2010 allows remote attackers to...9.3 High
- autodesk softimage, softimage xsi +1 moreAutodesk Softimage 7.x and Softimage XSI 6.x allow remote attackers to execute arbitrary...9.3 High
- drupal, paul beaney phplist +1 moreMultiple cross-site request forgery (CSRF) vulnerabilities in the "My Account" feature in PHPList...6.8 Medium
- jeff miccolis strongarm moduleCross-site scripting (XSS) vulnerability in the settings page in the Strongarm module 6.x before...4.3 Medium
- puntolatinoclub gallery assist moduleCross-site scripting (XSS) vulnerability in the Gallery Assist module 6.x before 6.x-1.7 for...4.3 Medium
- ezra barnett gildesgame og subgroupsCross-site scripting (XSS) vulnerability in the Subgroups for Organic Groups (OG) module 5.x...4.3 Medium
- anon-design printfriendlyMultiple cross-site scripting (XSS) vulnerabilities in the Printfriendly module 6.x before 6.x-1...4.3 Medium
- yuriy babenko agreement moduleMultiple cross-site scripting (XSS) vulnerabilities in the Agreement module 6.x before 6.x-1.2...4.3 Medium
- cubecartSQL injection vulnerability in includes/content/viewProd.inc.php in CubeCart before 4.3.7 remote...7.5 High
- .joomclan com joomclipSQL injection vulnerability in the JoomClip (com_joomclip) component for Joomla! allows remote...6.8 Medium
- telebidauctionscript telebid auction scriptSQL injection vulnerability in allauctions.php in Telebid Auction Script allows remote attackers...7.5 High
- inertialfate com if nexusSQL injection vulnerability in the inertialFATE iF Portfolio Nexus (com_if_nexus) component 1.1...7.5 High
- betsy cmsDirectory traversal vulnerability in admin/popup.php in Betsy CMS 3.5 allows remote attackers to...7.5 High
- php, apple mac os x, debian linux +2 morePHP before 5.2.12 and 5.3.x before 5.3.1 does not restrict the number of temporary files created...5.0 Medium
- hp operations managerHP Operations Manager 8.10 on Windows contains a "hidden account" in the XML file that specifies...10.0 High
- home ftp server project ftp serverMultiple directory traversal vulnerabilities in Home FTP Server 1.10.1.139 allow remote...6.5 Medium
- ibm rational application developer for websphere, rational software architect +1 moreMultiple cross-site scripting (XSS) vulnerabilities in the JSF Widget Library Runtime in IBM...4.3 Medium
- downstairs.dnsalias home ftp serverHome FTP Server 1.10.1.139 allows remote attackers to cause a denial of service (daemon outage)...5.0 Medium
- phpmybackupproDirectory traversal vulnerability in get_file.php in phpMyBackupPro 2.1 allows remote attackers...5.0 Medium
- avast antivirus home, antivirus professional +1 moreHeap-based buffer overflow in aswRdr.sys (aka the TDI RDR driver) in avast! Home and Professional...7.2 High
- dxmsoft xm easy personal ftp serverDxmsoft XM Easy Personal FTP Server 5.8.0 allows remote authenticated users to cause a denial of...4.0 Medium
- p-hd phd help deskMultiple cross-site scripting (XSS) vulnerabilities in PHD Help Desk 1.43 allow remote attackers...4.3 Medium
- phpThe posix_mkfifo function in ext/posix/posix.c in PHP before 5.2.12 and 5.3.x before 5.3.1 allows...6.8 Medium
- phpThe tempnam function in ext/standard/file.c in PHP before 5.2.12 and 5.3.x before 5.3.1 allows...5.0 Medium
- pear mailArgument injection vulnerability in Mail/sendmail.php in the Mail package 1.1.14, 1.2.0b2, and...6.8 Medium
- pearArgument injection vulnerability in the sendmail implementation of the Mail::Send method (Mail...7.5 High
- php** DISPUTED ** main/streams/plain_wrapper.c in PHP 5.3.x before 5.3.1 does not recognize the...7.5 High
- gforgeCross-site scripting (XSS) vulnerability in www/help/tracker.php in GForge 4.5.14, 4.7 rc2, and 4...4.3 Medium
- frontaccountingMultiple SQL injection vulnerabilities in FrontAccounting (FA) 2.2.x before 2.2 RC allow remote...7.5 High
- frontaccountingMultiple SQL injection vulnerabilities in FrontAccounting (FA) before 2.1.7 allow remote...7.5 High
- bruno massa web servicesThe Web Services module 6.x for Drupal does not perform the expected access control, which allows...7.5 High
- patrick przybilla addtoanyCross-site scripting (XSS) vulnerability in the AddToAny module 5.x before 5.x-2.4 and 6.x before...4.3 Medium
- marek sotak rootcandyCross-site scripting (XSS) vulnerability in the RootCandy theme 6.x before 6.x-1.5 for Drupal...4.3 Medium
- usebbUseBB 1.0.9 before 1.0.10 allows remote attackers to cause a denial of service (infinite loop)...5.0 Medium
- phpmyfaqCross-site scripting (XSS) vulnerability in phpMyFAQ before 2.0.17 and 2.5.x before 2.5.2, when...4.3 Medium
- piwigoCross-site scripting (XSS) vulnerability in Piwigo before 2.0.6 allows remote attackers to inject...4.3 Medium
- nch axon virtual pbxMultiple cross-site scripting (XSS) vulnerabilities in NCH Software Axon Virtual PBX 2.10 and 2...4.3 Medium
- Show moreLoading…