Design/Logic Flaw

Unspecified vulnerability in Socks Server 5 before 3.7.8-8 has unknown impact and attack vectors...

CVE-2009-2368

CVE-2009-2368 affects Socks Server 5 (ss5) before 3.7.8-8. The ALT Linux entries explicitly mention an array index overflow as the security issue and note NMU fixes for ss5 3.6.4-alt2.rel3.2 and 3.6.4-alt2.rel3.2 for the 5/6 packages. Red Hat/NVD entries describe an unspecified vulnerability with...

CVE-2009-2368

Unspecified vulnerability in Socks Server 5 before 3.7.8-8 has unknown impact and attack vectors...

acroread: multiple security fixes in version 8.1.6 (APSB09-07)

Multiple unspecified vulnerabilities in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 have unknown impact and attack vectors, related to "Adobe internally discovered issues."...

CVE-2009-2038

Technical details for CVE-2009-2038 are not publicly provided in the supplied documents. The available sources confirm an unspecified vulnerability in the Finnish Bank Payment module for osCommerce but do not disclose affected versions, impact, or remediation.

CVE-2009-2028

Multiple unspecified vulnerabilities in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 have unknown impact and attack vectors, related to "Adobe internally discovered issues."...

CVE-2009-2028

Multiple unspecified vulnerabilities in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 have unknown impact and attack vectors, related to "Adobe internally discovered issues."...

DEBIAN-CVE-2009-1443

Multiple unspecified vulnerabilities in the Server component in OCS Inventory NG before 1.02 have unknown impact and attack vectors...

CVE-2009-1443

Multiple unspecified vulnerabilities in the Server component in OCS Inventory NG before 1.02 have unknown impact and attack vectors...

CVE-2009-1443

Multiple unspecified vulnerabilities in the Server component in OCS Inventory NG before 1.02 have unknown impact and attack vectors...

CVE-2009-1266

CVE-2009-1266 is observed in Wireshark up to version prior to 1.0.7, where the vulnerability is addressed by upgrading to Wireshark 1.0.7. Multiple advisories (SUSE OpenVAS/Nessus entries) reference fixes for Wireshark in this version, including a specific note that CVE-2009-1266 relates to addit...

Default credentials

The Oracle Applications Framework component in Oracle E-Business Suite 12.0.6 and 11i10CU2 uses default passwords for unspecified "FND Applications Users not DB users," which has unknown impact and attack vectors...

Security feature bypass

Unspecified vulnerability in Download Center Lite before 2.1 has unknown impact and attack vectors related to "A minor security fix."...

CVE-2008-6598

Multiple race conditions in WANPIPE before 3.3.6 have unknown impact and attack vectors related to "bri restart logic."...

CVE-2009-0840

Heap-based buffer underflow in the readPostBody function in cgiutil.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 allows remote attackers to have an unknown impact via a negative value in the Content-Length HTTP header...

Security feature bypass

Unspecified vulnerability in Octopussy before 0.9.5.8 has unknown impact and attack vectors related to a "major security" vulnerability...

CVE-2008-6566

Unspecified vulnerability in Octopussy before 0.9.5.8 has unknown impact and attack vectors related to a "major security" vulnerability...

CVE-2007-6721

The Legion of the Bouncy Castle Java Cryptography API before release 1.38, as used in Crypto Provider Package before 1.36, has unknown impact and remote attack vectors related to "a Bleichenbacher vulnerability in simple RSA CMS signatures without signed attributes."...

DEBIAN-CVE-2008-6536

Unspecified vulnerability in 7-zip before 4.5.7 has unknown impact and remote attack vectors, as demonstrated by the PROTOS GENOME test suite for Archive Formats c10...

CVE-2008-6546

CVE-2008-6546 concerns phpns before 2.1.3 with a vulnerability related to activation permissions. The connected documents confirm the affected software and version but do not specify the underlying root cause, concrete impact, or exploitation details. The description consistently notes unknown im...