CVEs published in December 2009
439 vulnerabilities, 92 critical, 1 exploited.
- phpThe unserialize function in PHP 5.3.0 and earlier allows context-dependent attackers to cause a...5.0 Medium
- zend frameworkThe shutdown function in the Zend_Log_Writer_Mail class in Zend Framework (ZF) allows context...5.0 Medium
- phpgroupwareCross-site scripting (XSS) vulnerability in login.php in phpGroupWare 0.9.16.12, and possibly...4.3 Medium
- phpgroupwareMultiple directory traversal vulnerabilities in phpGroupWare 0.9.16.12, and possibly other...7.5 High
- phpgroupwareSQL injection vulnerability in phpgwapi /inc/class.auth_sql.inc.php in phpGroupWare 0.9.16.12,...6.8 Medium
- pps.jussieu polipoThe httpClientDiscardBody function in client.c in Polipo 0.9.8, 0.9.12, 1.0.4, and possibly other...5.0 Medium
- s9y serendipityUnrestricted file upload vulnerability in Serendipity before 1.5 allows remote authenticated...6.0 Medium
- xfs aclThe (1) setfacl and (2) getfacl commands in XFS acl 2.2.47, when running in recursive (-R) mode,...3.7 Low
- linux kernelThe fuse_ioctl_copy_user function in the ioctl handler in fs/fuse/file.c in the Linux kernel 2.6...4.9 Medium
- matomoThe loadContentFromCookie function in core/Cookie.php in Piwik before 0.5 does not validate...7.5 High
- pps.jussieu polipoPolipo 1.0.4, and possibly other versions, allows remote attackers to cause a denial of service ...5.0 Medium
- iij seil\/b1The (1) CHAP and (2) MS-CHAP-V2 authentication capabilities in the PPP Access Concentrator (PPPAC...2.6 Low
- pyforumMultiple cross-site scripting (XSS) vulnerabilities in models.parser in PyForum 1.0.3 and...4.3 Medium
- pyforumMultiple cross-site request forgery (CSRF) vulnerabilities in PyForum 1.0.3 and possibly earlier...6.8 Medium
- apc ap7932 b2, ap7932 b2 firmware +1 moreCross-site scripting (XSS) vulnerability in Forms/login1 in American Power Conversion (APC)...4.3 Medium
- edgewall tracTrac is vulnerable to improper policy checks and missing 'raw' role check in docutils7.5 High
- gnome networkmanagernm-connection-editor in NetworkManager (NM) 0.7.x exports connection objects over D-Bus upon...2.1 Low
- gnome networkmanagerNetworkManager (NM) 0.7.2 does not ensure that the configured Certification Authority (CA)...6.8 Medium
- jochen striepe t-protUnspecified vulnerability in t-prot (TOFU Protection) before 2.8 allows remote attackers to cause...4.3 Medium
- rumbacms rumba xmlCross-site scripting (XSS) vulnerability in index.php in Rumba XML 1.8 allows remote attackers to...4.3 Medium
- sql-ledgerThe default configuration of SQL-Ledger 2.8.24 allows remote attackers to perform unspecified...7.5 High
- condor project condor, redhat enterprise mrg +1 moreCondor 6.5.4 through 7.2.4, 7.3.x, and 7.4.0, as used in MRG, Grid for MRG, and Grid Execute Node...6.5 Medium
- sql-ledgerSQL-Ledger 2.8.24 does not set the secure flag for the session cookie in an https session, which...5.0 Medium
- sql-ledgerDirectory traversal vulnerability in the Preferences menu item in SQL-Ledger 2.8.24 allows remote...5.1 Medium
- sql-ledgerMultiple SQL injection vulnerabilities in the delete subroutine in SQL-Ledger 2.8.24 allow remote...6.5 Medium
- sql-ledgerMultiple cross-site scripting (XSS) vulnerabilities in SQL-Ledger 2.8.24 allow remote...3.5 Low
- sql-ledgerCross-site request forgery (CSRF) vulnerability in am.pl in SQL-Ledger 2.8.24 allows remote...6.8 Medium
- fr.simon rundell ste parish adminSQL injection vulnerability in the Parish Administration Database (ste_parish_admin) extension 0...7.5 High
- fr.simon rundell ste parish adminCross-site scripting (XSS) vulnerability in the Parish Administration Database (ste_parish_admin)...4.3 Medium
- fr.simon rundell hs religiousartgallerySQL injection vulnerability in the Parish of the Holy Spirit Religious Art Gallery ...7.5 High
- fr.simon rundell hs religiousartgalleryCross-site scripting (XSS) vulnerability in the Parish of the Holy Spirit Religious Art Gallery ...4.3 Medium
- fr.simon rundell pd resourcesCross-site scripting (XSS) vulnerability in the Diocese of Portsmouth Resources Database ...4.3 Medium
- fr.simon rundell pd resourcesSQL injection vulnerability in the Diocese of Portsmouth Resources Database (pd_resources)...7.5 High
- fr.simon rundell ste prayer2Cross-site scripting (XSS) vulnerability in the Random Prayer 2 (ste_prayer2) extension 0.0.3 and...4.3 Medium
- fr.simon rundell ste prayer2SQL injection vulnerability in the Random Prayer 2 (ste_prayer2) extension 0.0.3 and earlier for...7.5 High
- daniel ptzinger danp documentdirsSQL injection vulnerability in the Document Directorys (danp_documentdirs) extension 1.10.7 and...7.5 High
- typo3 xds staffSQL injection vulnerability in the XDS Staff List (xds_staff) extension 0.0.3 and earlier for...7.5 High
- daniel regelein dr blobCross-site scripting (XSS) vulnerability in the File list (dr_blob) extension 2.1.1 for TYPO3...4.3 Medium
- jochen rieger carSQL injection vulnerability in the Car (car) extension 0.1.1 for TYPO3 allows remote attackers to...7.5 High
- robert puntigam aba watchdogUnspecified vulnerability in the Watchdog (aba_watchdog) extension 2.0.2 and earlier for TYPO3...5.0 Medium
- frank krger nl listmanCross-site scripting (XSS) vulnerability in the ListMan (nl_listman) extension 1.2.1 for TYPO3...4.3 Medium
- manageengine password manager pro, password manager pro6.1 +1 moreThe cross-site scripting (XSS) protection mechanism in ShowInContentAreaAction.do in ManageEngine...4.3 Medium
- bookingcentre booking system for hotels groupSQL injection vulnerability in hotel_tiempolibre_ext.php in Venalsur Booking Centre Booking...7.5 High
- scriptsez ez poll hosterMultiple cross-site request forgery (CSRF) vulnerabilities in Scriptsez.net Ez Poll Hoster (EPH)...6.8 Medium
- scriptsez ez poll hosterMultiple cross-site scripting (XSS) vulnerabilities in Scriptsez.net Ez Poll Hoster (EPH) allow...4.3 Medium
- rocomotion p forumDirectory traversal vulnerability in Pforum.php in Rocomotion P forum before 1.28 allows remote...5.0 Medium
- phpfaber content management systemCross-site scripting (XSS) vulnerability in module.php in PHPFABER CMS, possibly 1.3.36, allows...4.3 Medium
- texmedia million pixel scriptCross-site scripting (XSS) vulnerability in index.php in texmedia Million Pixel Script 3 allows...4.3 Medium
- valarsoft webmaticMultiple SQL injection vulnerabilities in Valarsoft Webmatic before 3.0.3 allow remote attackers...7.5 High
- valarsoft webmaticMultiple cross-site scripting (XSS) vulnerabilities in Valarsoft Webmatic before 3.0.3 allow...4.3 Medium
- Show moreLoading…