CVEs published in January 2010
330 vulnerabilities, 64 critical, 3 exploited.
- stefan tannhaeuser tv21 talkshowCross-site scripting (XSS) vulnerability in the TV21 Talkshow (tv21_talkshow) extension 1.0.1 and...4.3 Medium
- julian fries jf easymapsSQL injection vulnerability in the Googlemaps for tt_news (jf_easymaps) extension 1.0.2 and...7.5 High
- alex kellner powermailTYPO3 powermail Extension Vulnerable to SQL Injection via Unspecified Vectors7.5 High
- rastislav birka cs2 unitconvCross-site scripting (XSS) vulnerability in the Unit Converter (cs2_unitconv) extension 1.0.4 for...4.3 Medium
- julian kleinhans kj imagelightbox2Cross-site scripting (XSS) vulnerability in the KJ: Imagelightbox (kj_imagelightbox2) extension 2...4.3 Medium
- francois suter devlogCross-site scripting (XSS) vulnerability in the Developer log (devlog) extension 2.9.1 and...4.3 Medium
- sebastian baumann sb folderdownloadUnspecified vulnerability in the SB Folderdownload (sb_folderdownload) extension 0.2.2 and...5.0 Medium
- patrick bauerochse ref listSQL injection vulnerability in the Customer Reference List (ref_list) extension 1.0.1 and earlier...7.5 High
- arco van geest goof fotoboekUnspecified vulnerability in the Photo Book (goof_fotoboek) extension 1.7.14 and earlier for...7.8 High
- matthias karr mk anydropdownmenuSQL injection vulnerability in the init function in MK-AnydropdownMenu (mk_anydropdownmenu)...7.5 High
- jamit job boardCross-site scripting (XSS) vulnerability in jobs/index.php in Jamit Job Board 3.0 allows remote...4.3 Medium
- x10media glitter central scriptCross-site scripting (XSS) vulnerability in submitlink.php in Glitter Central Script allows...4.3 Medium
- docmintCross-site scripting (XSS) vulnerability in index.php in Docmint 1.0 and 2.1 allows remote...4.3 Medium
- freebsdThe replay functionality for ZFS Intent Log (ZIL) in FreeBSD 7.1, 7.2, and 8.0, when creating...6.9 Medium
- novell netwareNovell Netware 6.5 SP8 allows remote attackers to cause a denial of service (NULL pointer...7.8 High
- google sketchupInteger overflow in Google SketchUp before 7.1 M2 allows remote attackers to cause a denial of...9.3 High
- google sketchup, jan eric krprianidis lib3ds +1 moreArray index error in Jan Eric Kyprianidis lib3ds 1.x, as used in Google SketchUp 7.x before 7.1...9.3 High
- microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 on Windows 2000...8.8 High
- linux.thai libthaiMultiple integer overflows in LibThai before 0.1.13 might allow context-dependent attackers to...10.0 High
- google chromeWebKit before r53607, as used in Google Chrome before 4.0.249.89, allows remote attackers to...5.0 Medium
- apple safariApple Safari allows remote attackers to discover a redirect's target URL, for the session of a...5.0 Medium
- sun java system directory serverThe core_get_proxyauth_dn function in ns-slapd in Sun Java System Directory Server Enterprise...5.0 Medium
- ibm tivoli directory serverThe do_extendedOp function in ibmslapd in IBM Tivoli Directory Server (TDS) 6.2 on Linux allows...5.0 Medium
- sun java system identity serverUnspecified vulnerability in Sun Java System Identity Manager (aka IdM) 8.1.0.5 and 8.1.0.6, when...6.8 Medium
- sun solarisTrusted Extensions in Sun Solaris 10 allows local users to gain privileges via vectors related to...6.8 Medium
- tibco runtime agentThe (1) domainutility and (2) domainutilitycmd components in TIBCO Domain Utility in TIBCO...7.2 High
- netartmedia real estate portalSQL injection vulnerability in realestate20/loginaction.php in NetArt Media Real Estate Portal 2...7.5 High
- gnu glibcnis/nss_nis/nis-pwd.c in the GNU C Library (aka glibc or libc6) 2.7 and Embedded GLIBC (EGLIBC) 2...7.5 High
- fedoraproject sssdSystem Security Services Daemon (SSSD) before 1.0.1, when the krb5 auth_provider is configured...3.7 Low
- gnu bashThe /etc/profile.d/60alias.sh script in the Mandriva bash package for Bash 2.05b, 3.0, 3.2, 3.2...2.1 Low
- hp web jetadminMultiple unspecified vulnerabilities in HP Web Jetadmin 10.2, when a remote SQL server is used,...9.0 High
- mortbay jettyMultiple cross-site scripting (XSS) vulnerabilities in the WebApp JSP Snoop page in Mort Bay...4.3 Medium
- mortbay jettyImproper input validation in Mort Bay Jetty7.5 High
- mortbay jettyMultiple cross-site scripting (XSS) vulnerabilities in Mort Bay Jetty 6.x and 7.0.0 allow remote...4.3 Medium
- mortbay jettyThe Dump Servlet in Mort Bay Jetty 6.x and 7.0.0 allows remote attackers to obtain sensitive...5.0 Medium
- boaBoa 0.94.14rc21 writes data to a log file without sanitizing non-printable characters, which...5.0 Medium
- yawsYaws 1.85 writes data to a log file without sanitizing non-printable characters, which might...5.0 Medium
- aol aolserverAOLserver 4.5.1 writes data to a log file without sanitizing non-printable characters, which...5.0 Medium
- orion application serverOrion Application Server 2.0.7 writes data to a log file without sanitizing non-printable...5.0 Medium
- ruby-lang webrickWEBrick Improper Input Validation vulnerability7.5 High
- acme mini httpdmini_httpd 1.19 writes data to a log file without sanitizing non-printable characters, which...5.0 Medium
- cherokee-project cherokeeheader.c in Cherokee before 0.99.32 writes data to a log file without sanitizing non-printable...5.0 Medium
- varnish.projects.linpro varnish** DISPUTED ** Varnish 2.0.6 writes data to a log file without sanitizing non-printable...5.0 Medium
- f5 nginxnginx 0.7.64 writes data to a log file without sanitizing non-printable characters, which might...6.8 Medium
- microsoft windows 2000, windows 7, windows server 2008 +3 more +5 moreInteger overflow in the Embedded OpenType (EOT) Font Engine (t2embed.dll) in Microsoft Windows...9.3 High
- adobe acrobat, acrobat reader +1 moreInteger overflow in the U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, and 8.x...10.0 High
- adobe acrobat, acrobat reader +1 moreMultiple stack-based buffer overflows in the NOS Microsystems getPlus Helper ActiveX control...10.0 High
- adobe acrobat, acrobat reader +1 moreAdobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, might allow...5.0 Medium
- adobe acrobat, acrobat reader +1 moreThe default configuration of Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on...10.0 High
- adobe acrobat, acrobat reader +1 moreAdobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows...10.0 High
- Show moreLoading…