CVEs published in January 2010
330 vulnerabilities, 64 critical, 3 exploited.
- wireshark Multiple buffer overflows in the LWRES dissector in Wireshark 0.9.15 through 1.0.10 and 1.2.0... 7.5 High
- roundcube webmail Roundcube 0.3.1 and earlier does not request that the web browser avoid DNS prefetching of domain... 5.0 Medium
- horde imp Horde IMP 4.3.6 and earlier does not request that the web browser avoid DNS prefetching of domain... 5.0 Medium
- viewvc query.py in the query interface in ViewVC before 1.1.3 does not reject configurations that... 7.5 High
- viewvc ViewVC before 1.1.3 composes the root listing view without using the authorizer for each root,... 5.0 Medium
- mozilla firefox, seamonkey, thunderbird +2 more Mozilla Necko, as used in Firefox, SeaMonkey, and other applications, performs DNS prefetching of... 5.0 Medium
- mozilla seamonkey, thunderbird +1 more Mozilla Necko, as used in Thunderbird 3.0.1, SeaMonkey, and other applications, performs DNS... 5.0 Medium
- dinko korunic hybserv2 mystring.c in hybserv in IRCD-Hybrid (aka Hybrid2 IRC Services) 1.9.2 through 1.9.4 allows remote... 5.0 Medium
- ibm db2 Heap-based buffer overflow in IBM DB2 9.1 before FP9, 9.5 before FP6, and 9.7 before FP2 allows... 6.5 Medium
- joomla com casino SQL injection vulnerability in the casino (com_casino) component 1.0 for Joomla! allows remote... 6.5 Medium
- kayako supportsuite, esupport +1 more Multiple cross-site scripting (XSS) vulnerabilities in staff/index.php in Kayako SupportSuite 3... 3.5 Low
- yoflash com mochigames SQL injection vulnerability in the Mochigames (com_mochigames) component 0.51 and possibly other... 7.5 High
- netartmedia blog system Multiple SQL injection vulnerabilities in NetArt Media Blog System 1.5 allow remote attackers to... 7.5 High
- a3malnet magic-portal SQL injection vulnerability in home.php in magic-portal 2.1 allows remote attackers to execute... 7.5 High
- indianpulses com gameserver SQL injection vulnerability in the indianpulse Game Server (com_gameserver) component 1.2 for... 7.5 High
- punbb Cross-site scripting (XSS) vulnerability in forum/viewtopic.php in PunBB 1.3 allows remote... 4.3 Medium
- fabricadigital publique\! SQL injection vulnerability in cgi/cgilua.exe/sys/start.htm in Publique! 2.3 allows remote... 7.5 High
- cisco unified meetingplace MeetingTime in Cisco Unified MeetingPlace 6 before MR5, and possibly 5, allows remote... 8.5 High
- cisco unified meetingplace MeetingTime in Cisco Unified MeetingPlace 6 before MR5, and possibly 5, allows remote attackers... 6.4 Medium
- cisco unified meetingplace Multiple unspecified vulnerabilities in the web server in Cisco Unified MeetingPlace 7 before 7.0... 10.0 High
- cisco unified meetingplace Cisco Unified MeetingPlace 7 before 7.0(2.3) hotfix 5F, 6 before 6.0.639.2, and possibly 5 does... 9.0 High
- hp openview storage data protector Unspecified vulnerability in HP OpenView Storage Data Protector 6.00 and 6.10 allows local users... 4.6 Medium
- apache tomcat Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Apache Tomcat 4.3 Medium
- apache tomcat Improper Authentication in Apache Tomcat 4.3 Medium
- apache tomcat Apache Tomcat Directory Traversal vulnerability 5.8 Medium
- sun storedge 6130 arrays Unspecified vulnerability on certain Sun StorEdge 6130 (SE6130) Controller Arrays allows remote... 7.5 High
- sun iplanet messaging server, one messaging server +1 more Webmail in Sun ONE Messaging Server 6.1 and iPlanet Messaging Server 5.2 before 5.2hf2.02 allows... 4.3 Medium
- sun iplanet messaging server, one messaging server +1 more Cross-site scripting (XSS) vulnerability in Webmail in Sun ONE Messaging Server 6.1 and iPlanet... 4.3 Medium
- sun change manager Buffer overflow in pamverifier in Change Manager (CM) 1.0 for Sun Management Center (SunMC) 3.0... 10.0 High
- symantec vxfs VERITAS File System (VxFS) 3.3.3, 3.4, and 3.5 before MP1 Rolling Patch 02 for Sun Solaris 2.5.1... 4.6 Medium
- maildrop main.C in maildrop 2.3.0 and earlier, when run by root with the -d option, uses the gid of root... 6.9 Medium
- linux kernel, redhat enterprise linux desktop, enterprise linux eus +3 more +5 more A certain Red Hat patch for net/ipv4/route.c in the Linux kernel 2.6.18 on Red Hat Enterprise... 7.5 High
- linux kernel, redhat enterprise linux +1 more A certain Red Hat configuration step for the qla2xxx driver in the Linux kernel 2.6.18 on Red Hat... 1.9 Low
- ircd-ratbox cache.c in ircd-ratbox before 2.2.9 allows remote attackers to cause a denial of service (NULL... 5.0 Medium
- ircd-hybrid, ircd-ratbox, oftc oftc-hybrid +2 more Integer underflow in the clean_string function in irc_string.c in (1) IRCD-hybrid 7.2.2 and 7.2.3... 6.8 Medium
- debian lintian Lintian 1.23.x through 1.23.28, 1.24.x through 1.24.2.1, and 2.x before 2.3.2 allows remote... 7.5 High
- debian lintian Multiple format string vulnerabilities in Lintian 1.23.x through 1.23.28, 1.24.x through 1.24.2.1... 7.5 High
- debian lintian, canonical ubuntu linux, debian linux +2 more Multiple directory traversal vulnerabilities in Lintian 1.23.x through 1.23.28, 1.24.x through 1... 9.8 Critical
- thegreenbow ipsec vpn client Stack-based buffer overflow in vpnconf.exe in TheGreenBow IPSec VPN Client 4.51.001, 4.65.003,... 9.3 High
- embarcadero interbase smp 2009 Multiple stack-based buffer overflows in Embarcadero Technologies InterBase SMP 2009 9.0.3.437... 7.5 High
- phpf1 max\'s image uploader Unrestricted file upload vulnerability in maxImageUpload/index.php in PHP F1 Max's Image Uploader... 6.8 Medium
- linux kernel The ipv6_hop_jumbo function in net/ipv6/exthdrs.c in the Linux kernel before 2.6.32.4, when... 7.1 High
- debian linux, linux kernel +1 more The print_fatal_signal function in kernel/signal.c in the Linux kernel before 2.6.32.4 on the... 5.4 Medium
- systemtap stap-server in SystemTap before 1.1 allows remote attackers to execute arbitrary commands via... 10.0 High
- oracle database server Unspecified vulnerability in the Oracle OLAP component in Oracle Database Server 10.1.0.4 (10g)... 6.8 Medium
- sun java system web server The admin server in Sun Java System Web Server 7.0 Update 6 allows remote attackers to cause a... 5.0 Medium
- sun java system web server Format string vulnerability in the WebDAV implementation in webservd in Sun Java System Web... 7.5 High
- sun java system web server Multiple heap-based buffer overflows in (1) webservd and (2) the admin server in Sun Java System... 7.5 High
- sun java system application server The default configuration of Sun Java System Application Server 7 and 7 2004Q2 enables the HTTP... 4.3 Medium
- tor Tor before 0.2.1.22, and 0.2.2.x before 0.2.2.7-alpha, when functioning as a bridge directory... 5.0 Medium
- Show olderLoading…