CVEs published in December 2009
439 vulnerabilities, 92 critical, 1 exploited.
- activewebsoftwares active business directoryCross-site scripting (XSS) vulnerability in searchadvance.asp in Active Business Directory 2...4.3 Medium
- intellicom netbiter webscada firmware, netbiter webscada ws100, netbiter webscada ws200 +2 moreIntellicom NetBiter WebSCADA devices use default passwords for the HICP network configuration...10.0 High
- intellicom netbiterconfigStack-based buffer overflow in the NetBiterConfig utility (NetBiterConfig.exe) 1.3.0 for...10.0 High
- flatpressMultiple cross-site scripting (XSS) vulnerabilities in FlatPress 0.909 allow remote attackers to...4.3 Medium
- ljscripts auto-surf traffic exchange scriptMultiple cross-site scripting (XSS) vulnerabilities in Auto-Surf Traffic Exchange Script 1.1...4.3 Medium
- redmineRedmine 0.8.7 and earlier uses the title tag before defining the character encoding in a meta tag...4.3 Medium
- freepbxMultiple cross-site scripting (XSS) vulnerabilities in FreePBX 2.5.2 and 2.6.0rc2, and possibly...4.3 Medium
- provider4u vsftpd webmin moduleMultiple unspecified vulnerabilities in the Vsftpd Webmin module before 1.3b for the Vsftpd...7.5 High
- greendesktiny green desktinySQL injection vulnerability in news_detail.php in Green Desktiny 2.3.1, and possibly earlier...7.5 High
- cisco adaptive security appliance 5500The default configuration of Cisco ASA 5500 Series Adaptive Security Appliance (Cisco ASA) 7.0, 7...6.5 Medium
- saini videocachevccleaner in VideoCache 1.9.2 allows local users with Squid proxy user privileges to overwrite...3.3 Low
- softcab sound converter activexInsecure method vulnerability in SoftCab Sound Converter ActiveX control (sndConverter.ocx) 1.2...8.8 High
- kaspersky lab anti-virus, internet security, anti-virus 2009 +4 more +6 moreKaspersky Anti-Virus 5.0 (5.0.712); Antivirus Personal 5.0.x; Anti-Virus 6.0 (6.0.3.837), 7 (7.0...6.8 Medium
- php.html kandalf upperUnrestricted file upload vulnerability in upper.php in kandalf upper 0.1 allows remote attackers...6.8 Medium
- livezillaMultiple cross-site scripting (XSS) vulnerabilities in map.php in LiveZilla 3.1.8.3 allow remote...4.3 Medium
- mybbDirectory traversal vulnerability in MyBB (aka MyBulletinBoard) 1.4.10, and possibly earlier...6.5 Medium
- mybbinc/functions_time.php in MyBB (aka MyBulletinBoard) 1.4.10, and possibly earlier versions,...5.0 Medium
- jax scripts guestbookJax Guestbook 3.5.0 allows remote attackers to bypass authentication and modify administrator...7.5 High
- ikemcg phpinstantgalleryCross-site scripting (XSS) vulnerability in admin.php in phpInstantGallery 1.1 allows remote...4.3 Medium
- microsoft internet information servicesMicrosoft Internet Information Services (IIS), when used in conjunction with unspecified third...6.0 Medium
- microsoft internet information servicesMicrosoft Internet Information Services (IIS) 5.x and 6.x uses only the portion of a filename...6.0 Medium
- mit kerberos 5The prep_reprocess_req function in kdc/do_tgs_req.c in the cross-realm referral implementation in...5.0 Medium
- sun java system directory serverUnspecified vulnerability in the psearch (aka persistent search) functionality in Directory Proxy...4.3 Medium
- sun java system directory serverDirectory Proxy Server (DPS) in Sun Java System Directory Server Enterprise Edition 6.0 through 6...5.0 Medium
- sun java system directory serverDirectory Proxy Server (DPS) in Sun Java System Directory Server Enterprise Edition 6.0 through 6...5.0 Medium
- sun java system directory serverDirectory Proxy Server (DPS) in Sun Java System Directory Server Enterprise Edition 6.0 through 6...6.8 Medium
- ibm db2Unspecified vulnerability in the Query Compiler, Rewrite, and Optimizer component in IBM DB2 9.5...4.0 Medium
- ibm db2The Query Compiler, Rewrite, and Optimizer component in IBM DB2 9.1 before FP8, 9.5 before FP5,...6.5 Medium
- openttdUnspecified vulnerability in the NormaliseTrainConsist function in src/train_cmd.cpp in OpenTTD...5.0 Medium
- apc network management card, switched rack pdu +1 moreMultiple cross-site scripting (XSS) vulnerabilities on the Network Management Card (NMC) on...4.3 Medium
- apc network management card, switched rack pdu +1 moreMultiple cross-site request forgery (CSRF) vulnerabilities on the Network Management Card (NMC)...6.8 Medium
- activewebsoftwares active auction houseMultiple SQL injection vulnerabilities in Active Auction House 3.6 allow remote attackers to...7.5 High
- activewebsoftwares ewebquizMultiple SQL injection vulnerabilities in Active Web Softwares eWebquiz 8 allow remote attackers...7.5 High
- compmaster.prv.pl f3siteMultiple directory traversal vulnerabilities in F3Site 2009 allow remote attackers to include and...6.8 Medium
- idevspot isupportDirectory traversal vulnerability in index.php in IDevSpot iSupport 1.8 and earlier allows remote...5.0 Medium
- idevspot isupportMultiple cross-site scripting (XSS) vulnerabilities in IDevSpot iSupport 1.8 and earlier allow...4.3 Medium
- codemight videocmsSQL injection vulnerability in index.php in CodeMight VideoCMS 3.1 allows remote attackers to...7.5 High
- anything-digital com jcalproPHP remote file inclusion vulnerability in cal_popup.php in the Anything Digital Development JCal...7.5 High
- virtuemartSQL injection vulnerability in index.php in VirtueMart 1.0 allows remote attackers to execute...7.5 High
- alexander hass sections moduleCross-site scripting (XSS) vulnerability in the Sections module 5.x before 5.x-1.3 and 6.x before...3.5 Low
- joomplace com joomportfolioSQL injection vulnerability in the JoomPortfolio (com_joomportfolio) component 1.0.0 for Joomla!...7.5 High
- phpldapadmin project phpldapadminDirectory traversal vulnerability in cmd.php in phpLDAPadmin 1.1.0.5 allows remote attackers to...7.5 High
- launchpad ignitionMultiple directory traversal vulnerabilities in Ignition 1.2, when magic_quotes_gpc is disabled,...6.8 Medium
- idevspot idevcartCross-site scripting (XSS) vulnerability in index.php in iDevCart 1.09 allows remote attackers to...4.3 Medium
- imotta pyrmont pluginSQL injection vulnerability in results.php in the Pyrmont plugin 2 for WordPress allows remote...7.5 High
- weentech weencompanySQL injection vulnerability in index.php in weenCompany 4.0.0 allows remote attackers to execute...7.5 High
- aditus jpgraphMultiple cross-site scripting (XSS) vulnerabilities in the GetURLArguments function in jpgraph...4.3 Medium
- alexander palmo simple php blogDirectory traversal vulnerability in languages_cgi.php in Simple PHP Blog 0.5.1 and earlier...6.5 Medium
- f5 big-ip application security manager, big-ip protocol security manager, big-ip protocol security module +2 moreBuffer overflow in the bd daemon in F5 Networks BIG-IP Application Security Manager (ASM) 9.4.4...7.8 High
- intel q43 express chipset, gm45 chipset, pm45 express chipset +2 more +4 moreIntel Q35, GM45, PM45 Express, Q45, and Q43 Express chipsets in the SINIT Authenticated Code...7.2 High
- Show moreLoading…