CVEs published in December 2009
439 vulnerabilities, 92 critical, 1 exploited.
- adobe air, flash player +1 moreMultiple unspecified vulnerabilities in Adobe Flash Player before 10.0.42.34 and Adobe AIR before...9.3 High
- adobe air, flash player +1 moreInteger overflow in the Verifier::parseExceptionHandlers function in Adobe Flash Player before 10...9.3 High
- adobe air, flash player +1 moreAdobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 might allow attackers to execute...9.3 High
- adobe air, flash player +1 moreAdobe Flash Player 10.x before 10.0.42.34 and Adobe AIR before 1.5.3 might allow attackers to...9.3 High
- adobe air, flash player +1 moreAdobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 might allow attackers to execute...9.3 High
- adobe air, flash player +1 moreHeap-based buffer overflow in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3...9.3 High
- yabsoft advanced image hosting scriptCross-site scripting (XSS) vulnerability in search.php in YABSoft Advanced Image Hosting (AIH)...4.3 Medium
- pointdev ideal administration 2009Stack-based buffer overflow in Ideal Administration 2009 9.7.1, and possibly other versions,...9.3 High
- aroundmePHP remote file inclusion vulnerability in components/core/connect.php in AROUNDMe 1.1 and...6.8 Medium
- ptcpay gen3SQL injection vulnerability in main_forum.php in PTCPay GeN3 forum 1.3 allows remote attackers to...7.5 High
- haroldbakker hb-nsHarold Bakker's NewsScript (HB-NS) 1.3 allows remote attackers to obtain access to the admin...7.5 High
- truesolution alefmentorMultiple SQL injection vulnerabilities in cource.php in AlefMentor 2.0 and 2.2 allow remote...7.5 High
- youjoomla you\!hostit\!Cross-site scripting (XSS) vulnerability in the You!Hostit! template 1.0.1 for Joomla! allows...4.3 Medium
- phpee pphloggerPowerPhlogger 2.2.5 allows remote attackers to obtain sensitive information via a direct request...5.0 Medium
- phpee pphloggerCross-site scripting (XSS) vulnerability in dspStats.php in PowerPhlogger 2.2.5 allows remote...4.3 Medium
- clixint image hosting script dpiCross-site scripting (XSS) vulnerability in images.php in Image Hosting Script DPI 1.1 Final (1...4.3 Medium
- corel paint shop proStack-based buffer overflow in Jasc Paint Shop Pro 8.10 (aka Corel Paint Shop Pro) allows user...9.3 High
- cutephp cutenews, korn19 utf-8 cutenews +1 moreMultiple cross-site scripting (XSS) vulnerabilities in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews...4.3 Medium
- cutephp cutenewsMultiple cross-site scripting (XSS) vulnerabilities in CutePHP CuteNews 1.4.6, when...2.6 Low
- ibm infosphere information serverMultiple buffer overflows in unspecified setuid executables in the DataStage subsystem in IBM...10.0 High
- ibm infosphere information serverCross-site scripting (XSS) vulnerability in the Web console in IBM InfoSphere Information Server...4.3 Medium
- ca service deskCross-site scripting (XSS) vulnerability in the web interface in CA Service Desk 12.1 allows...4.3 Medium
- microsoft windows 2000, windows server 2003, windows server 2008 +2 more +4 moreThe Internet Authentication Service (IAS) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server...10.0 High
- microsoft windows 2000, windows 2003 server, windows xp +2 moreLSASS.exe in the Local Security Authority Subsystem Service (LSASS) in Microsoft Windows 2000 SP4...6.8 Medium
- microsoft internet explorer, windows 2000, windows 7 +4 more +6 moreMicrosoft Internet Explorer 8 does not properly handle objects in memory, which allows remote...9.3 High
- microsoft internet explorer, windows 2000, windows 7 +4 more +6 moreMicrosoft Internet Explorer 7 and 8 does not properly handle objects in memory, which allows...9.3 High
- microsoft internet explorer, ie, windows 2000 +5 more +7 moreMicrosoft Internet Explorer 8 does not properly handle objects in memory, which allows remote...9.3 High
- microsoft windows server 2003, windows server 2008 +1 moreActive Directory Federation Services (ADFS) in Microsoft Windows Server 2003 SP2 and Server 2008...9.0 High
- microsoft windows server 2003, windows server 2008 +1 moreThe single sign-on implementation in Active Directory Federation Services (ADFS) in Microsoft...6.9 Medium
- microsoft office converter pack, office word, windows 2000 +4 more +6 moreInteger overflow in the text converters in Microsoft Office Word 2002 SP3 and 2003 SP3; Works 8.5...9.3 High
- microsoft windows vista, windows server 2008 +1 moreThe Internet Authentication Service (IAS) in Microsoft Windows Vista SP2 and Server 2008 SP2 does...10.0 High
- microsoft office project, project portfolio server, project server +2 moreMicrosoft Project 2000 SR1 and 2002 SP1, and Office Project 2003 SP3, does not properly handle...9.3 High
- ec-cube ver2The process function in data/class/pages/admin/customer/LC_Page_Admin_Customer_SearchCustomer.php...5.0 Medium
- hp openview data protector application recovery managerStack-based buffer overflow in the OmniInet process in HP OpenView Data Protector Application...10.0 High
- novell iprintMultiple stack-based buffer overflows in Novell iPrint Client 4.38, 5.30, and possibly other...9.3 High
- novell iprint clientStack-based buffer overflow in ienipp.ocx in Novell iPrint Client 5.30, and possibly other...9.3 High
- tim hockin acpidacpid 1.0.4 sets an unrestrictive umask, which might allow local users to leverage weak...6.9 Medium
- micronet network access controller sp1910Cross-site scripting (XSS) vulnerability in loginpages/error_user.shtml on the Micronet Network...4.3 Medium
- youjoomla yj whoisCross-site scripting (XSS) vulnerability in modules/mod_yj_whois.php in the YJ Whois component 1...4.3 Medium
- jonijnm com kideThe Kide Shoutbox (com_kide) component 0.4.6 for Joomla! does not properly perform authentication...5.0 Medium
- basic-cms sweetriceDirectory traversal vulnerability in as/lib/plugins.php in SweetRice 0.5.3 and earlier allows...7.5 High
- ruven pillay iipimage serverMultiple stack-based buffer overflows in src/Task.cc in the FastCGI program in IIPImage Server...7.5 High
- activewebsoftwares active bidsMultiple SQL injection vulnerabilities in ActiveWebSoftwares Active Bids allow remote attackers...7.5 High
- tim hockin acpidA certain Red Hat patch for acpid 1.0.4 effectively triggers a call to the open function with...6.9 Medium
- xfigStack consumption vulnerability in u_bound.c in Xfig 3.2.5b and earlier allows remote attackers...4.3 Medium
- xfigStack-based buffer overflow in the read_1_3_textobject function in f_readold.c in Xfig 3.2.5b and...6.8 Medium
- sun opensolarisRace condition in the IP module in the kernel in Sun OpenSolaris snv_106 through snv_124 allows...7.1 High
- ca etrust pestpatrole ppctl.dll activexStack-based buffer overflow in the PestPatrol ActiveX control (ppctl.dll) 5.6.7.9 in CA eTrust...9.3 High
- frank yaul corehttpOff-by-one error in src/http.c in CoreHTTP 0.5.3.1 and earlier allows remote attackers to cause a...7.5 High
- denton woods devilStack-based buffer overflow in the GetUID function in src-IL/src/il_dicom.c in DevIL 1.7.8 allows...9.3 High
- Show moreLoading…