CVEs published in December 2009
439 vulnerabilities, 92 critical, 1 exploited.
- teethgrinder.co.uk open flash chart, matomo +1 moreUnrestricted file upload vulnerability in ofc_upload_image.php in Open Flash Chart v2 Beta 1...7.5 High
- php-calendarMultiple absolute path traversal vulnerabilities in PHP-Calendar 1.1 allow remote attackers to...7.5 High
- wiresharkThe IPMI dissector in Wireshark 1.2.0 through 1.2.4 on Windows allows remote attackers to cause a...4.3 Medium
- wiresharkThe (1) SMB and (2) SMB2 dissectors in Wireshark 0.9.0 through 1.2.4 allow remote attackers to...4.3 Medium
- wiresharkBuffer overflow in the daintree_sna_read function in the Daintree SNA file parser in Wireshark 1...9.3 High
- gnome gpdf, kde kdegraphics, kpdf +1 more +3 moreThe FoFiType1::parse function in fofi/FoFiType1.cc in Xpdf 3.0.0, gpdf 2.8.2, kpdf in kdegraphics...9.3 High
- alienvault open source security information managementSQL injection vulnerability in repository/repository_attachment.php in AlienVault Open Source...7.5 High
- alienvault open source security information managementDirectory traversal vulnerability in repository/repository_attachment.php in AlienVault Open...7.5 High
- alienvault open source security information managementUnrestricted file upload vulnerability in repository/repository_attachment.php in AlienVault Open...7.5 High
- alienvault open source security information managementAlienVault Open Source Security Information Management (OSSIM) 2.1.5, and possibly other versions...7.5 High
- drupalCross-site scripting (XSS) vulnerability in the Locale module (modules/locale/locale.module) in...3.5 Low
- drupalCross-site scripting (XSS) vulnerability in the Menu module (modules/menu/menu.admin.inc) in...3.5 Low
- drupalCross-site scripting (XSS) vulnerability in the Contact module (modules/contact/contact.admin.inc...3.5 Low
- merethis centreonMultiple unspecified vulnerabilities in Centreon before 2.1.4 have unknown impact and attack...10.0 High
- sitecore staging moduleThe Staging Webservice ("sitecore modules/staging/service/api.asmx") in Sitecore Staging Module 5...6.8 Medium
- scriptsez ez blogCross-site scripting (XSS) vulnerability in index.php in ScriptsEz Ez Blog 1.0 allows remote...4.3 Medium
- scriptsez ez blogMultiple cross-site request forgery (CSRF) vulnerabilities in admin.php in ScriptsEz Ez Blog 1.0...4.3 Medium
- scriptsez ez blogCross-site scripting (XSS) vulnerability in index.php in ScriptsEz Ez Blog allows remote...4.3 Medium
- horde application framework, groupware +1 moreText_Filter/lib/Horde/Text/Filter/Xss.php in Horde Application Framework before 3.3.6, Horde...4.3 Medium
- ibm aixMultiple buffer overflows in qosmod in IBM AIX 6.1 allow local users to cause a denial of service...7.2 High
- ibm aixMultiple buffer overflows in qoslist in IBM AIX 6.1 allow local users to cause a denial of...7.2 High
- ghostscriptStack-based buffer overflow in the errprintf function in base/gsmisc.c in ghostscript 8.64...9.3 High
- phpPHP before 5.2.12 does not properly handle session data, which has unspecified impact and attack...10.0 High
- phpThe htmlspecialchars function in PHP before 5.2.12 does not properly handle (1) overlong UTF-8...4.3 Medium
- adobe flash media serverDirectory traversal vulnerability in Adobe Flash Media Server (FMS) before 3.5.3 allows attackers...10.0 High
- adobe flash media serverUnspecified vulnerability in Adobe Flash Media Server (FMS) before 3.5.3 allows attackers to...5.0 Medium
- horde application framework, groupware +1 moreMultiple cross-site scripting (XSS) vulnerabilities in the administration interface in Horde...4.3 Medium
- handcoders content moduleSQL injection vulnerability in modules/content/index.php in the Content module 0.5 for XOOPS...7.5 High
- marc-andre lanciault smartmediaCross-site scripting (XSS) vulnerability in folder.php in the SmartMedia 0.85 Beta module for...4.3 Medium
- freebsdfreebsd-update in FreeBSD 8.0, 7.2, 7.1, 6.4, and 6.3 uses insecure permissions in its working...4.7 Medium
- gnu automakeThe (1) dist or (2) distcheck rules in GNU Automake 1.11.1, 1.10.3, and release branches branch-1...4.4 Medium
- roman marxer ganetiMultiple directory traversal vulnerabilities in the iallocator framework in Ganeti 1.2.4 through...7.5 High
- ibm rational clearquest, rational clearcase +1 moreCQWeb (aka the web interface) in IBM Rational ClearQuest before 7.1.1 does not properly handle...5.0 Medium
- nullsoft winampMultiple integer overflows in the jpeg.w5s and png.w5s filters in Winamp before 5.57 allow remote...9.3 High
- nullsoft winamp, raphael assenat libmikmod +1 moreHeap-based buffer overflow in IN_MOD.DLL (aka the Module Decoder Plug-in) in Winamp before 5.57,...9.3 High
- fahlstad wp-forumMultiple SQL injection vulnerabilities in the WP-Forum plugin before 2.4 for WordPress allow...7.5 High
- cisco webexBuffer overflow in atrpui.dll in the Cisco WebEx WRF Player 26.x before 26.49.32 for Windows, 27...9.3 High
- cisco webexHeap-based buffer overflow in atas32.dll in the Cisco WebEx WRF Player 26.x before 26.49.32 (aka...9.3 High
- cisco webexHeap-based buffer overflow in atas32.dll in the Cisco WebEx WRF Player 26.x before 26.49.32 (aka...9.3 High
- cisco webexStack-based buffer overflow in ataudio.dll in the Cisco WebEx WRF Player 26.x before 26.49.32 for...9.3 High
- cisco webexHeap-based buffer overflow in atas32.dll in the Cisco WebEx WRF Player 26.x before 26.49.32 (aka...9.3 High
- cisco webexBuffer overflow in atas32.dll in the Cisco WebEx WRF Player 26.x before 26.49.32 for Windows, 27...9.3 High
- hp openview storage data protectorInteger overflow in the _ncp32._NtrpTCPReceiveMsg function in rds.exe in the Cell Manager...10.0 High
- hp openview storage data protectorStack-based buffer overflow in OmniInet.exe (aka the backup client service daemon) in the...10.0 High
- nullsoft winampInteger overflow in IN_MOD.DLL (aka the Module Decoder Plug-in) in Winamp before 5.57 might allow...9.3 High
- nullsoft winamp, raphael assenat libmikmod +1 moreMultiple heap-based buffer overflows in IN_MOD.DLL (aka the Module Decoder Plug-in) in Winamp...9.3 High
- transware active\! mailTransWARE Active! mail 2003 build 2003.0139.0871 and earlier does not properly secure the session...5.8 Medium
- transware active\! mailThe Mobile Edition of TransWARE Active! mail 2003 build 2003.0139.0871 and earlier, and possibly...5.8 Medium
- transware active mail 2003Multiple cross-site scripting (XSS) vulnerabilities in TransWARE Active! mail 2003 build 2003...4.3 Medium
- wscreatorSQL injection vulnerability in ADMIN/loginaction.php in WSCreator 1.1, when magic_quotes_gpc is...6.8 Medium
- Show moreLoading…