Click to open the Alert Filter

 
Year Month
Severity
Categories
Search by Alert Name
Page(s) : 1 ... 318 319 320 321 322 323 324 325 326 327 [328] 329 330 331 332 333 334 335 336 337 338 ... Result(s) : 8833

Alerts Feed Alerts

DATE NAME CATEGORIES DETAIL
3.5 2009-03-04 CVE-2009-0809 cve The Web Editor in Dassault Systemes ENOVIA SmarTeam V5 before Release 18 Service Pack 8, and possibly CATIA and other products, allows remote authenticated users to read the pro...
2.1 2009-03-03 CVE-2009-0754 cve PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web server by modifying the mbstring.func_o...
2.1 2009-03-02 CVE-2009-0368 cve OpenSC before 0.11.7 allows physically proximate attackers to bypass intended PIN requirements and read private data objects via a (1) low level APDU command or (2) debugging to...
3.5 2009-02-27 CVE-2009-0743 cve Cross-site scripting (XSS) vulnerability in the edit account page in the Web Server in Cisco Unified MeetingPlace Web Conferencing 6.0 before 6.0(517.0) (aka 6.0 MR4) and 7.0 be...
2.1 2009-02-27 CVE-2009-0028 cve The clone system call in the Linux kernel 2.6.28 and earlier allows local users to send arbitrary signals to a parent process from an unprivileged child process by launching an ...
2.6 2009-02-26 CVE-2008-4308 cve The doRead method in Apache Tomcat 4.1.32 through 4.1.34 and 5.5.10 through 5.5.20 does not return a -1 to indicate when a certain error condition has occurred, which can cause ...
3.5 2009-02-26 CVE-2008-6299 cve Multiple cross-site scripting (XSS) vulnerabilities in Joomla! 1.5.7 and earlier allow remote authenticated users with certain privileges to inject arbitrary web script or HTML ...
2.6 2009-02-25 CVE-2009-0737 cve Multiple cross-site scripting (XSS) vulnerabilities in the web-based installer (config/index.php) in MediaWiki 1.6 before 1.6.12, 1.12 before 1.12.4, and 1.13 before 1.13.4, whe...
3.5 2009-02-23 CVE-2009-0699 cve Cross-site scripting (XSS) vulnerability in pagesUTF8/auftrag_allgemeinauftrag.jsp in Plunet BusinessManager 4.1 and earlier allows remote authenticated users to inject arbitrar...
2.1 2009-02-22 CVE-2009-0676 cve The sock_getsockopt function in net/core/sock.c in the Linux kernel before 2.6.28.6 does not initialize a certain structure member, which allows local users to obtain potentiall...
2.1 2009-02-22 CVE-2009-0675 cve The skfp_ioctl function in drivers/net/skfp/skfddi.c in the Linux kernel before 2.6.28.6 permits SKFP_CLR_STATS requests only when the CAP_NET_ADMIN capability is absent, instea...
3.5 2009-02-20 CVE-2008-6229 cve Cross-site scripting (XSS) vulnerability in the administrative interface in Drupal Content Construction Kit (CCK) 5.x before 5.x-1.10 and 6.x before 6.x-2.0, a module for Drupal...
2.1 2009-02-19 CVE-2008-6191 cve Conductor.exe in Intrinsic Swimage Encore before 5.0.1.21 contains a hardcoded password, which might allow local users to decrypt certain .bin files. NOTE: it is not clear whet...
3.5 2009-02-19 CVE-2008-6170 cve Cross-site scripting (XSS) vulnerability in Drupal 5.x before 5.12 and 6.x before 6.6 allows remote authenticated users with create book content or edit node book hierarchy perm...
2.1 2009-02-17 CVE-2009-0504 cve WSPolicy in the Web Services component in IBM WebSphere Application Server (WAS) 7.0.x before 7.0.0.1 does not properly recognize the IDAssertion.isUsed binding property, which ...
3.5 2009-02-17 CVE-2009-0359 cve Multiple cross-site scripting (XSS) vulnerabilities in Samizdat before 0.6.2 allow remote authenticated users to inject arbitrary web script or HTML via the (1) message title or...
3.5 2009-02-16 CVE-2009-0603 cve Cross-site scripting (XSS) vulnerability in index.php in the Link module 5.x-2.5 for Drupal 5.10 allows remote authenticated users, with "administer content types" privileges, t...
2.1 2009-02-16 CVE-2009-0601 cve Format string vulnerability in Wireshark 0.99.8 through 1.0.5 on non-Windows platforms allows local users to cause a denial of service (application crash) via format string spec...
2.1 2009-02-13 CVE-2009-0503 cve IBM WebSphere Message Broker 6.1.x before 6.1.0.2 writes a database connection password to the Event Log and System Log during exception handling for a JDBC error, which allows ...
2.1 2009-02-12 CVE-2009-0014 cve Folder Manager in Apple Mac OS X 10.5.6 uses insecure default permissions when recreating a Downloads folder after it has been deleted, which allows local users to bypass intend...
Page(s) : 1 ... 318 319 320 321 322 323 324 325 326 327 [328] 329 330 331 332 333 334 335 336 337 338 ... Result(s) : 8833