CVEs published in December 2009

439 vulnerabilities, 92 critical, 1 exploited.

• valenok mongoose Mongoose 2.8.0 and earlier allows remote attackers to obtain the source code for a web page by... CVE-2009-4535 Public exploit 5.0 MediumDecember 31, 2009
• nanwich faq ask Open redirect vulnerability in the FAQ Ask module 5.x and 6.x before 6.x-2.0, a module for Drupal... CVE-2009-4534 4.3 MediumDecember 31, 2009
• nathan haug webform The Webform module 5.x before 5.x-2.8 and 6.x before 6.x-2.8, a module for Drupal, does not... CVE-2009-4533 5.0 MediumDecember 31, 2009
• nathan haug webform Cross-site scripting (XSS) vulnerability in the Webform module 5.x before 5.x-2.8 and 6.x before... CVE-2009-4532 3.5 LowDecember 31, 2009
• jasper httpdx httpdx 1.4.4 and earlier allows remote attackers to obtain the source code for a web page by... CVE-2009-4531 Public exploit 5.0 MediumDecember 31, 2009
• sergey lyubka mongoose Mongoose 2.8.0 and earlier allows remote attackers to obtain the source code for a web page by... CVE-2009-4530 5.0 MediumDecember 31, 2009
• intervations navicopa web server InterVations NaviCOPA Web Server 3.0.1.2 and earlier allows remote attackers to obtain the source... CVE-2009-4529 5.0 MediumDecember 31, 2009
• moshe weitzman og vocab The Organic Groups (OG) Vocabulary module 6.x before 6.x-1.0 for Drupal allows remote... CVE-2009-4528 6.5 MediumDecember 31, 2009
• niif shib auth The Shibboleth authentication module 5.x before 5.x-3.4 and 6.x before 6.x-3.2, a module for... CVE-2009-4527 4.6 MediumDecember 31, 2009
• joao ventura print The Send by e-mail sub-module in the Print (aka Printer, e-mail and PDF versions) module 5.x... CVE-2009-4526 5.0 MediumDecember 31, 2009
• joao ventura print Cross-site scripting (XSS) vulnerability in the Print (aka Printer, e-mail and PDF versions)... CVE-2009-4525 4.3 MediumDecember 31, 2009
• nancy wichmann realname Cross-site scripting (XSS) vulnerability in the RealName module 6.x-1.x before 6.x-1.3 for Drupal... CVE-2009-4524 4.3 MediumDecember 31, 2009
• zainu Cross-site scripting (XSS) vulnerability in index.php in Zainu 1.0 allows remote attackers to... CVE-2009-4523 Public exploit 4.3 MediumDecember 31, 2009
• bloofox bloofoxcms Cross-site scripting (XSS) vulnerability in search.5.html in BloofoxCMS 0.3.5 allows remote... CVE-2009-4522 Public exploit 4.3 MediumDecember 31, 2009
• eclipse birt Cross-site scripting (XSS) vulnerability in birt-viewer/run in Eclipse Business Intelligence and... CVE-2009-4521 Public exploit 4.3 MediumDecember 31, 2009
• kristof de jaeger commentreference The CCK Comment Reference module 5.x before 5.x-1.2 and 6.x before 6.x-1.3, a module for Drupal,... CVE-2009-4520 5.0 MediumDecember 31, 2009
• ortro Multiple unspecified vulnerabilities in Ortro before 1.3.4 have unknown impact and attack vectors. CVE-2009-4519 10.0 HighDecember 31, 2009
• mark burton insertnode Cross-site scripting (XSS) vulnerability in the Insert Node module 5.x before 5.x-1.2 for Drupal... CVE-2009-4518 4.3 MediumDecember 31, 2009
• nanwich faq ask Cross-site request forgery (CSRF) vulnerability in the FAQ Ask module 5.x and 6.x before 6.x-2.0,... CVE-2009-4517 6.8 MediumDecember 31, 2009
• nanwich faq ask Cross-site scripting (XSS) vulnerability in the FAQ Ask module 5.x and 6.x before 6.x-2.0, a... CVE-2009-4516 4.3 MediumDecember 31, 2009
• speedtech storm The Storm module 6.x before 6.x-1.25 for Drupal does not enforce privilege requirements for... CVE-2009-4515 5.0 MediumDecember 31, 2009
• astha bhatnagar shindigintegrator Cross-site scripting (XSS) vulnerability in the OpenSocial Shindig-Integrator module 5.x and 6.x... CVE-2009-4514 3.5 LowDecember 31, 2009
• john vandyk workflow Multiple cross-site scripting (XSS) vulnerabilities in the Workflow module 5.x before 5.x-2.4 and... CVE-2009-4513 3.5 LowDecember 31, 2009
• indymedia oscailt Directory traversal vulnerability in index.php in Oscailt 3.3, when Use Friendly URL's is... CVE-2009-4512 Public exploit 5.1 MediumDecember 31, 2009
• zabbix The NET_TCP_LISTEN function in net.c in Zabbix Agent before 1.6.7, when running on FreeBSD or... CVE-2009-4502 Public exploitFix available EPSS 21.6% 9.3 HighDecember 31, 2009
• zabbix The zbx_get_next_field function in libs/zbxcommon/str.c in Zabbix Server before 1.6.8 allows... CVE-2009-4501 Public exploitFix available 5.0 MediumDecember 31, 2009
• zabbix The process_trap function in trapper/trapper.c in Zabbix Server before 1.6.6 allows remote... CVE-2009-4500 Fix available 5.0 MediumDecember 31, 2009
• zabbix SQL injection vulnerability in the get_history_lastid function in the nodewatcher component in... CVE-2009-4499 Public exploitFix available 7.5 HighDecember 31, 2009
• zabbix The node_process_command function in Zabbix Server before 1.8 allows remote attackers to execute... CVE-2009-4498 Public exploitFix available EPSS 31.9% 6.8 MediumDecember 31, 2009
• pedro lineu orso sarg Cross-site scripting (XSS) vulnerability in Squid Analysis Report Generator (Sarg) 2.2.4 allows... CVE-2008-7250 Fix available 4.3 MediumDecember 30, 2009
• pedro lineu orso sarg Buffer overflow in Squid Analysis Report Generator (Sarg) 2.2.3.1, and probably later, allows... CVE-2008-7249 Fix available 9.3 HighDecember 30, 2009
• oracle mysql, wolfssl yassl, canonical ubuntu linux +2 more +4 more Multiple stack-based buffer overflows in the CertDecoder::GetName function in src/asn.cpp in... CVE-2009-4484 Public exploit EPSS 69.6% 7.5 HighDecember 30, 2009
• mailsite Unspecified vulnerability in LDAP3A.exe in MailSite 8.0.4 allows remote attackers to cause a... CVE-2009-4483 5.0 MediumDecember 30, 2009
• tversity Buffer overflow in MediaServer.exe in TVersity 1.6 allows remote attackers to execute arbitrary... CVE-2009-4482 10.0 HighDecember 30, 2009
• azeotech daqfactory Buffer overflow in the web service in AzeoTech DAQFactory 5.77 might allow remote attackers to... CVE-2009-4480 9.3 HighDecember 30, 2009
• mailsite LDAP3A.exe in MailSite 8.0.4 allows remote attackers to cause a denial of service (heap memory... CVE-2009-4479 7.8 HighDecember 30, 2009
• xstate real estate Multiple cross-site scripting (XSS) vulnerabilities in Xstate Real Estate 1.0 allow remote... CVE-2009-4478 Public exploit 4.3 MediumDecember 30, 2009
• xstate real estate SQL injection vulnerability in page.html in Xstate Real Estate 1.0 allows remote attackers to... CVE-2009-4477 Public exploit 7.5 HighDecember 30, 2009
• hauri virobot desktop Stack-based buffer overflow in HAURI ViRobot Desktop 5.5 before 2009-09-28.00 allows remote... CVE-2009-4476 10.0 HighDecember 30, 2009
• joomlub com joomlub SQL injection vulnerability in the Joomlub (com_joomlub) component for Joomla! allows remote... CVE-2009-4475 Public exploit 7.5 HighDecember 30, 2009
• mikedeboer com zoom SQL injection vulnerability in the Mike de Boer zoom (com_zoom) component 2.0 for Mambo allows... CVE-2009-4474 Public exploit 7.5 HighDecember 30, 2009
• ektron cms4000.net Multiple cross-site scripting (XSS) vulnerabilities in WorkArea/ContentDesigner/ekformsiframe... CVE-2009-4473 4.3 MediumDecember 30, 2009
• phpope Multiple PHP remote file inclusion vulnerabilities in PHPope 1.0.0 and earlier allow remote... CVE-2009-4472 Public exploit 7.5 HighDecember 30, 2009
• freeschool Multiple PHP remote file inclusion vulnerabilities in FreeSchool 1.1.0 and earlier allow remote... CVE-2009-4471 Public exploit 7.5 HighDecember 30, 2009
• dvbbs SQL injection vulnerability in boardrule.php in DVBBS 2.0 allows remote attackers to execute... CVE-2009-4470 Public exploit 7.5 HighDecember 30, 2009
• giombetti phppowercards Multiple cross-site scripting (XSS) vulnerabilities in pagenumber.inc.php in phpPowerCards 2.0... CVE-2009-4469 Public exploit 4.3 MediumDecember 30, 2009
• deluxebb Cross-site scripting (XSS) vulnerability in misc.php in DeluxeBB 1.3 allows remote attackers to... CVE-2009-4468 Public exploit 4.3 MediumDecember 30, 2009
• deluxebb misc.php in DeluxeBB 1.3 allows remote attackers to register accounts without a valid email... CVE-2009-4467 Public exploit 4.0 MediumDecember 30, 2009
• deluxebb DeluxeBB 1.3 allows remote attackers to obtain sensitive information via a crafted page parameter... CVE-2009-4466 Public exploit 5.0 MediumDecember 30, 2009
• deluxebb DeluxeBB 1.3 stores sensitive information under the web root with insufficient access control,... CVE-2009-4465 Public exploit 7.5 HighDecember 30, 2009
• Show olderLoading…