CVEs published February 4, 2009
21 CVEs were published on February 4, 2009: 0 critical, 0 high. Browse them by severity, product and exploitation status.
- Published
- 21
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 21
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 21
- CVE-2009-0352Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.6, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allow…
- CVE-2009-0353Unspecified vulnerability in Mozilla Firefox 3.x before 3.0.6, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allows remote…
- CVE-2009-0354Cross-domain vulnerability in js/src/jsobj.cpp in Mozilla Firefox 3.x before 3.0.6 allows remote attackers to bypass the Same Origin…
- CVE-2009-0355components/sessionstore/src/nsSessionStore.js in Mozilla Firefox before 3.0.6 does not block changes of INPUT elements to type="file"…
- CVE-2009-0356Mozilla Firefox before 3.0.6 and SeaMonkey do not block links to the (1) about:plugins and (2) about:config URIs from .desktop files…
- CVE-2009-0357Mozilla Firefox before 3.0.6 and SeaMonkey before 1.1.15 do not properly restrict access from web pages to the (1) Set-Cookie and (2)…
- CVE-2009-0358Mozilla Firefox 3.x before 3.0.6 does not properly implement the (1) no-store and (2) no-cache Cache-Control directives, which allows…
- CVE-2009-0388Multiple integer signedness errors in (1) UltraVNC 1.0.2 and 1.0.5 and (2) TightVnc 1.3.9 allow remote VNC servers to cause a denial of…
- CVE-2009-0418The IPv6 Neighbor Discovery Protocol (NDP) implementation in HP HP-UX B.11.11, B.11.23, and B.11.31 does not validate the origin of…
- CVE-2009-0419Microsoft XML Core Services, as used in Microsoft Expression Web, Office, Internet Explorer 6 and 7, and other products, does not properly…
- CVE-2008-6046SQL injection vulnerability in ADbNewsSender before 1.5.2 allows remote attackers to execute arbitrary SQL commands via unspecified…
- CVE-2008-6047Cross-site scripting (XSS) vulnerability in ADbNewsSender before 1.5.2 allows remote attackers to inject arbitrary web script or HTML via…
- CVE-2008-6048Multiple cross-site request forgery (CSRF) vulnerabilities in TangoCMS before 2.2.0 allow remote attackers to hijack the authentication of…
- CVE-2008-6050SQL injection vulnerability in the Tech Articles (com_tech_article) 1.0 component for Joomla! allows remote attackers to execute arbitrary…
- CVE-2008-6051MetaCart Free stores metacart.mdb under the web root with insufficient access control, which allows remote attackers to obtain usernames…
- CVE-2008-6052PreProjects Pre E-Learning Portal stores db_elearning.mdb under the web root with insufficient access control, which allows remote…
- CVE-2008-6053PreProjects Pre Resume Submitter stores onlineresume.mdb under the web root with insufficient access control, which allows remote…
- CVE-2008-6054PreProjects Pre Courier and Cargo Business stores dbcourior.mdb under the web root with insufficient access control, which allows remote…
- CVE-2008-6055PreProjects Pre Classified Listings stores pclasp.mdb under the web root with insufficient access control, which allows remote attackers…
- CVE-2008-6056Multiple cross-site scripting (XSS) vulnerabilities in World Recipe 2.11 allow remote attackers to inject arbitrary web script or HTML via…
- CVE-2008-6057Doug Luxem Liberum Help Desk 0.97.3 stores db/helpdesk2000.mdb under the web root with insufficient access control, which allows remote…