Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2009
December

CVEs published in December 2009

439 vulnerabilities, 92 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

boldfx arctic issue trackerSQL injection vulnerability in index.php in Arctic Issue Tracker 2.1.1 allows remote attackers to...CVE-2009-43507.5 HighDecember 17, 2009
phpwebscripts link up goldCross-site request forgery (CSRF) vulnerability in administration/administrators.php in Link Up...CVE-2009-4349Public exploit6.8 MediumDecember 17, 2009
haroldbakker hb-nsCross-site scripting (XSS) vulnerability in index.php in Harold Bakker's NewsScript (HB-NS) 1.3...CVE-2009-43484.3 MediumDecember 17, 2009
liran tal daloradiusCross-site scripting (XSS) vulnerability in daloradius-users/login.php in daloRADIUS 0.9-8 and...CVE-2009-43474.3 MediumDecember 17, 2009
toni milovan fe rtenewsCross-site scripting (XSS) vulnerability in the Frontend news submitter with RTE (fe_rtenews)...CVE-2009-43464.3 MediumDecember 17, 2009
jonas renggli vshoutboxCross-site scripting (XSS) vulnerability in the vShoutbox (vshoutbox) extension 0.0.1 for TYPO3...CVE-2009-43454.3 MediumDecember 17, 2009
tobias sommer zid linklistCross-site scripting (XSS) vulnerability in the ZID Linkliste (zid_linklist) extension 1.0.0 for...CVE-2009-43444.3 MediumDecember 17, 2009
dominic eckart trainincdbCross-site scripting (XSS) vulnerability in the Training Company Database (trainincdb) extension...CVE-2009-43434.3 MediumDecember 17, 2009
melvin mach jobexchangeSQL injection vulnerability in the Job Exchange (jobexchange) extension 0.0.3 for TYPO3 allows...CVE-2009-43427.5 HighDecember 17, 2009
mischa heissmann no indexed searchSQL injection vulnerability in the No indexed Search (no_indexed_search) extension 0.2.0 for...CVE-2009-43417.5 HighDecember 17, 2009
mischa heissmann no indexed searchCross-site scripting (XSS) vulnerability in the No indexed Search (no_indexed_search) extension 0...CVE-2009-43404.3 MediumDecember 17, 2009
stephan vits mf subscriptionSQL injection vulnerability in the Subscription (mf_subscription) extension 0.2.2 for TYPO3...CVE-2009-43397.5 HighDecember 17, 2009
jean-david gadina slideshowSQL injection vulnerability in the Flash SlideShow (slideshow) extension 0.2.2 for TYPO3 allows...CVE-2009-43387.5 HighDecember 17, 2009
simon rundell pd calendar todaySQL injection vulnerability in the Diocese of Portsmouth Calendar (pd_calendar) extension 0.4.1...CVE-2009-43377.5 HighDecember 17, 2009
simon rundell pd calendar todayCross-site scripting (XSS) vulnerability in the Diocese of Portsmouth Calendar (pd_calendar)...CVE-2009-43364.3 MediumDecember 17, 2009
mozilla firefox, seamonkey +1 moreThe GeckoActiveXObject function in Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and...CVE-2009-39877.8 HighDecember 17, 2009
mozilla firefox, seamonkey, thunderbird +2 moreMultiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox 3.5.x before 3.5...CVE-2009-39829.3 HighDecember 17, 2009
mozilla firefox, seamonkey, thunderbird +2 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.6,...CVE-2009-39809.3 HighDecember 17, 2009
mozilla firefox, seamonkey +1 moreInteger overflow in libtheora in Xiph.Org Theora before 1.1, as used in Mozilla Firefox 3.5...CVE-2009-3389Fix available9.3 HighDecember 17, 2009
mozilla firefox, seamonkey +1 moreliboggplay in Mozilla Firefox 3.5.x before 3.5.6 and SeaMonkey before 2.0.1 might allow context...CVE-2009-3388Fix available9.3 HighDecember 17, 2009
linux kerneldrivers/firewire/ohci.c in the Linux kernel before 2.6.32-git9, when packet-per-buffer mode is...CVE-2009-41384.7 MediumDecember 16, 2009
ibm db2Multiple unspecified vulnerabilities in bundled stored procedures in the Spatial Extender...CVE-2009-433510.0 HighDecember 16, 2009
ibm db2The Self Tuning Memory Manager (STMM) component in IBM DB2 9.1 before FP8, 9.5 before FP5, and 9...CVE-2009-43344.6 MediumDecember 16, 2009
ibm db2The Relational Data Services component in IBM DB2 9.5 before FP5 allows attackers to obtain the...CVE-2009-43337.5 HighDecember 16, 2009
ibm db2db2pd in the Problem Determination component in IBM DB2 9.1 before FP7 and 9.5 before FP5 allows...CVE-2009-43325.0 MediumDecember 16, 2009
ibm db2The Install component in IBM DB2 9.5 before FP5 and 9.7 before FP1 configures the High...CVE-2009-43317.2 HighDecember 16, 2009
ibm db2Unspecified vulnerability in db2licm in the Engine Utilities component in IBM DB2 9.5 before FP5...CVE-2009-43307.2 HighDecember 16, 2009
ibm db2Unspecified vulnerability in the Engine Utilities component in IBM DB2 9.5 before FP5 allows...CVE-2009-43294.0 MediumDecember 16, 2009
ibm db2Unspecified vulnerability in the DRDA Services component in IBM DB2 9.5 before FP5 allows remote...CVE-2009-43284.0 MediumDecember 16, 2009
ibm db2The Common Code Infrastructure component in IBM DB2 9.5 before FP5 and 9.7 before FP1 does not...CVE-2009-43275.0 MediumDecember 16, 2009
ibm db2The RAND scalar function in the Common Code Infrastructure component in IBM DB2 9.5 before FP5...CVE-2009-43264.3 MediumDecember 16, 2009
ibm db2The Client Interfaces component in IBM DB2 8.2 before FP18, 9.1 before FP8, 9.5 before FP5, and 9...CVE-2009-43256.4 MediumDecember 16, 2009
vmware lab manager, server, stage manager +7 more +9 moreMultiple cross-site scripting (XSS) vulnerabilities in WebWorks Help 2.0 through 5.0 in VMware...CVE-2009-37314.3 MediumDecember 16, 2009
moodleSQL injection vulnerability in the SCORM module in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7...CVE-2009-43056.5 MediumDecember 16, 2009
moodleMoodle 1.8 before 1.8.11 and 1.9 before 1.9.7 does not use a random password salt in config.php,...CVE-2009-43047.5 HighDecember 16, 2009
moodleMoodle 1.8 before 1.8.11 and 1.9 before 1.9.7 stores (1) password hashes and (2) unspecified ...CVE-2009-43035.0 MediumDecember 16, 2009
moodlelogin/index_form.html in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 links to an index page on...CVE-2009-43025.0 MediumDecember 16, 2009
moodlemnet/lib.php in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7, when MNET services are enabled,...CVE-2009-43016.0 MediumDecember 16, 2009
moodleMultiple unspecified authentication plugins in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7...CVE-2009-43005.0 MediumDecember 16, 2009
moodlemod/glossary/showentry.php in the Glossary module for Moodle 1.8 before 1.8.11 and 1.9 before 1.9...CVE-2009-42995.0 MediumDecember 16, 2009
moodleThe LAMS module (mod/lams) for Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 stores the (1)...CVE-2009-42985.0 MediumDecember 16, 2009
moodleMultiple cross-site request forgery (CSRF) vulnerabilities in Moodle 1.8 before 1.8.11 and 1.9...CVE-2009-42976.8 MediumDecember 16, 2009
rubyonrails railsImproper Input Validation in actionpackCVE-2008-7248Public exploitFix available6.8 MediumDecember 16, 2009
mozilla firefox, seamonkey +1 moreMozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote...CVE-2009-39867.6 HighDecember 16, 2009
mozilla firefox, seamonkey +1 moreMozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote...CVE-2009-39856.8 MediumDecember 16, 2009
mozilla firefox, seamonkey, thunderbird +2 moreMozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote...CVE-2009-39846.8 MediumDecember 16, 2009
mozilla firefox, seamonkey, thunderbird +2 moreMozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote...CVE-2009-39836.8 MediumDecember 16, 2009
mozilla firefox, seamonkey, thunderbird +2 moreUnspecified vulnerability in the browser engine in Mozilla Firefox before 3.0.16, SeaMonkey...CVE-2009-39819.3 HighDecember 16, 2009
mozilla firefox, seamonkey +1 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.16 and 3...CVE-2009-39799.3 HighDecember 16, 2009
postgresqlPostgreSQL 7.4.x before 7.4.27, 8.0.x before 8.0.23, 8.1.x before 8.1.19, 8.2.x before 8.2.15, 8...CVE-2009-41366.5 MediumDecember 15, 2009
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open