CVEs published in December 2009
439 vulnerabilities, 92 critical, 1 exploited.
- apple mac os x, mac os x server +1 moreJava for Mac OS X 10.5 before Update 6 and 10.6 before Update 1 accepts expired certificates for...5.0 Medium
- ibm communications enabled applications, websphere application server +1 moreFeature Pack for Communications Enabled Applications (CEA) before 1.0.0.1 for IBM WebSphere...6.4 Medium
- ntpntp_request.c in ntpd in NTP before 4.2.4p8, and 4.2.5, allows remote attackers to cause a denial...6.4 Medium
- linux kernelThe ip_frag_reasm function in net/ipv4/ip_fragment.c in the Linux kernel 2.6.32-rc8, and 2.6.29...7.8 High
- basic-cms sweetriceMultiple PHP remote file inclusion vulnerabilities in SweetRice 0.5.4, 0.5.3, and earlier allow...6.8 Medium
- gianni tommasi kr-php web content serverPHP remote file inclusion vulnerability in adm/krgourl.php in KR-Web 1.1b2 and earlier allows...7.5 High
- smartisoft phpbazarphpBazar 2.1.1fix and earlier does not require administrative authentication for admin/admin.php,...7.5 High
- smartisoft phpbazarSQL injection vulnerability in classified.php in phpBazar 2.1.1fix and earlier allows remote...7.5 High
- raphael mazoyer pointcommaPHP remote file inclusion vulnerability in includes/classes/pctemplate.php in PointComma 3.8b2...7.5 High
- haihaisoft universal playerStack-based buffer overflow in the MYACTIVEX.MyActiveXCtrl.1 ActiveX control in MyActiveX.ocx 1.4...9.3 High
- jiros jbsxMultiple SQL injection vulnerabilities in files/login.asp in JiRo's Banner System eXperience ...7.5 High
- itamar elharar com musicgallerySQL injection vulnerability in the Itamar Elharar MusicGallery (com_musicgallery) component for...7.5 High
- klinza professional cmsDirectory traversal vulnerability in funzioni/lib/menulast.php in klinza professional cms 5.0.1...9.3 High
- pandasecurity panda global protection, panda antivirus, panda internet security +2 morePanda Global Protection 2010, Internet Security 2010, and Antivirus Pro 2010 use weak permissions...7.2 High
- rubyonrails rails, ruby on rails +1 moreModerate severity vulnerability that affects rails4.3 Medium
- disa srr for solarisThe U.S. Defense Information Systems Agency (DISA) Security Readiness Review (SRR) script for the...9.3 High
- linux kernelStack-based buffer overflow in the hfs subsystem in the Linux kernel 2.6.32 allows remote...7.8 High
- mozilo mozilocmsMultiple cross-site scripting (XSS) vulnerabilities in admin/index.php in moziloCMS 1.11.1 allow...4.3 Medium
- open-schoolSQL injection vulnerability in the os_news module in Open-school (OS) 1.0 allows remote attackers...7.5 High
- nathan haug webformCross-site scripting (XSS) vulnerability in the Webform module 5.x before 5.x-2.7 and 6.x before...4.3 Medium
- cmsnx million dollar text linksSQL injection vulnerability in admin.link.modify.php in Million Dollar Text Links 1.0 and earlier...7.5 High
- ringsworld flashlight free editionDirectory traversal vulnerability in admin.php in Flashlight Free Edition allows remote attackers...7.5 High
- ringsworld flashlight free editionSQL injection vulnerability in read.php in Flashlight Free Edition allows remote attackers to...7.5 High
- arabportal arab portalMultiple SQL injection vulnerabilities in admin/aclass/admin_func.php in Arab Portal 2.2 allow...7.5 High
- omilenitsolutions com omphotogalleryDirectory traversal vulnerability in the Omilen Photo Gallery (com_omphotogallery) component Beta...7.5 High
- assistanttools mp3 tag assistance professionalMultiple stack-based buffer overflows in Mp3 Tag Assistant Professional 2.92 build 300 allow...9.3 High
- vollmar com seminarSQL injection vulnerability in the Seminar (com_seminar) component 1.28 for Joomla! allows remote...7.5 High
- mamboforge com mosresMultiple SQL injection vulnerabilities in the Mambo Resident (aka Mos Res or com_mosres)...6.8 Medium
- cupidsystems myminibillSQL injection vulnerability in my_orders.php in MyMiniBill allows remote authenticated users to...6.5 Medium
- daz3d daz studioDAZ Studio 2.3.3.161, 2.3.3.163, and 3.0.1.135 allows remote attackers to execute arbitrary...9.3 High
- huawei mt882 modem, mt882 modem firmware +1 morerpwizPppoe.htm in Huawei MT882 V100R002B020 ARG-T running firmware 3.7.9.98 contains a form that...4.7 Medium
- huawei mt882 v100t002b020 arg-tMultiple cross-site scripting (XSS) vulnerabilities in multiple scripts in Forms/ in Huawei MT882...4.3 Medium
- adobe illustratorBuffer overflow in Adobe Illustrator CS4 14.0.0, CS3 13.0.3 and earlier, and CS3 13.0.0 allows...9.3 High
- aladdin safenet securewire access gateway, sonicwall e-class ssl vpn, ssl vpn +4 more +6 moreClientless SSL VPN products break web browser domain-based security models6.8 Medium
- libexpat project libexpat, apache http server +1 moreThe big2_toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used in the XML-Twig...5.0 Medium
- kmint21 golden ftp serverDirectory traversal vulnerability in Golden FTP Server 4.30 Free and Professional, 4.50, and...8.1 High
- merkaartorMerkaartor 0.14 allows local users to append data to arbitrary files via a symlink attack on the ...3.3 Low
- interspire knowledge managerDirectory traversal vulnerability in dialog/file_manager.php in Interspire Knowledge Manager 5...5.0 Medium
- roxio creator, easy media creator +1 moreInteger overflow in Roxio Easy Media Creator 9.0.136, and Roxio Creator 2010 before SP1, might...9.3 High
- sun opensolaris, sunos +1 moreUnspecified vulnerability in the kernel in Sun Solaris 10 and OpenSolaris 2009.06 on the x86-64...7.2 High
- sun opensolarisUnspecified vulnerability in the kernel in Sun OpenSolaris 2009.06 allows remote attackers to...7.8 High
- hp operations managerHP Operations Manager has a default password of OvW*busr1 for the ovwebusr account, which allows...10.0 High
- hp operations dashboardHP Operations Dashboard has a default password of j2deployer for the j2deployer account, which...10.0 High
- sun java system portal serverMultiple cross-site scripting (XSS) vulnerabilities in the Gateway component in Sun Java System...4.3 Medium
- apple safariStack consumption vulnerability in Apple Safari 4.0.3 on Windows allows remote attackers to cause...9.3 High
- larts uploader activex controlMultiple stack-based buffer overflows in the Lateral Arts Photobox uploader ActiveX control 1.x...9.3 High
- novell edirectoryInteger overflow in Novell eDirectory 8.7.3.x before 8.7.3.10 ftf2 and 8.8.x before 8.8.5.2...10.0 High
- gforgeGForge 4.5.14, 4.7 rc2, and 4.8.2 allows local users to overwrite arbitrary files via a symlink...3.3 Low
- cutephp cutenews, korn19 utf-8 cutenews +1 moreCutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allows remote attackers to obtain sensitive...5.0 Medium
- cutephp cutenews, korn19 utf-8 cutenews +1 moreThe editnews module in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b, when magic_quotes_gpc...6.0 Medium
- Show moreLoading…