Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

dan kaminsky vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2009-2409
The Network Security Services (NSS) library prior to 3.12.3, as used in Firefox; GnuTLS prior to 2.6.4 and 2.7.4; OpenSSL 0.9.8 up to and including 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote malicious users to spoof certificates by us...
Mozilla FirefoxMozilla NssMozilla Nss 3.0Mozilla Nss 3.2Mozilla Nss 3.2.1Mozilla Nss 3.3Mozilla Nss 3.3.1Mozilla Nss 3.3.2Mozilla Nss 3.4Mozilla Nss 3.4.1Mozilla Nss 3.4.2Mozilla Nss 3.4.3Mozilla Nss 3.5Mozilla Nss 3.6Mozilla Nss 3.6.1Mozilla Nss 3.7Mozilla Nss 3.7.1Mozilla Nss 3.7.2Mozilla Nss 3.7.3Mozilla Nss 3.7.5Mozilla Nss 3.7.7Mozilla Nss 3.8
NA
CVE-2009-2730
libgnutls in GnuTLS prior to 2.8.2 does not properly handle a '\0' character in a domain name in the subject's (1) Common Name (CN) or (2) Subject Alternative Name (SAN) field of an X.509 certificate, which allows man-in-the-middle malicious users to spoof arbitrar...
Gnu Gnutls 2.6.5Gnu Gnutls 2.4.2Gnu Gnutls 2.3.3Gnu Gnutls 2.3.9Gnu Gnutls 1.0.18Gnu Gnutls 1.0.19Gnu Gnutls 1.1.14Gnu Gnutls 1.1.15Gnu Gnutls 1.2.0Gnu Gnutls 1.2.11Gnu Gnutls 1.2.6Gnu Gnutls 1.2.8.1a1Gnu Gnutls 1.3.4Gnu Gnutls 1.3.5Gnu Gnutls 2.2.1Gnu Gnutls 1.7.12Gnu Gnutls 2.2.5Gnu Gnutls 1.7.16Gnu Gnutls 2.0.3Gnu Gnutls 1.4.3Gnu Gnutls 2.0.0Gnu Gnutls 1.5.2
NA
CVE-2009-2404
Heap-based buffer overflow in a regular-expression parser in Mozilla Network Security Services (NSS) prior to 3.12.3, as used in Firefox, Thunderbird, SeaMonkey, Evolution, Pidgin, and AOL Instant Messenger (AIM), allows remote SSL servers to cause a denial of service (applicatio...
Mozilla Network Security Services 3.12.3
5.9
CVSSv3
CVE-2009-2408
Mozilla Network Security Services (NSS) prior to 3.12.3, Firefox prior to 3.0.13, Thunderbird prior to 2.0.0.23, and SeaMonkey prior to 1.1.18 do not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, ...
Mozilla Network Security ServicesMozilla FirefoxMozilla SeamonkeyMozilla ThunderbirdSuse Linux Enterprise Server 9Suse Linux Enterprise 11.0Suse Linux Enterprise 10.0Opensuse OpensuseDebian Debian Linux 5.0Canonical Ubuntu Linux 9.04Canonical Ubuntu Linux 8.10Canonical Ubuntu Linux 8.04
5.3
CVSSv3
CVE-2023-41045
Graylog is a free and open log management platform. Graylog makes use of only one single source port for DNS queries. Graylog binds a single socket for outgoing DNS queries and while that socket is bound to a random port number it is never changed again. This goes against recomme...
Graylog Graylog
NA
CVE-2009-2663
libvorbis before r16182, as used in Mozilla Firefox 3.5.x prior to 3.5.2 and other products, allows context-dependent malicious users to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted .ogg file.
Mozilla Firefox 0.10.1Mozilla Firefox 0.9.1Mozilla Firefox 3.0.5Mozilla Firefox 1.0.3Mozilla Firefox 1.0.6Mozilla Firefox 2.0.0.9Mozilla Firefox 2.0 .6Mozilla Firefox 2.0 .7Mozilla Firefox 2.0 .9Mozilla Firefox 2.0.0.11Mozilla Firefox 0.10Mozilla Firefox 0.8Mozilla Firefox 2.0.0.20Mozilla Firefox 1.0Mozilla Firefox 1.0.4Mozilla Firefox 1.0.7Mozilla Firefox 2.0 .4Mozilla Firefox 2.0 .5Mozilla Firefox 2.0.0.10Mozilla Firefox 2.0.0.16Mozilla Firefox 0.3Mozilla Firefox 1.5.0.5
NA
CVE-2009-3389
Integer overflow in libtheora in Xiph.Org Theora prior to 1.1, as used in Mozilla Firefox 3.5 prior to 3.5.6 and SeaMonkey prior to 2.0.1, allows remote malicious users to cause a denial of service (application crash) or possibly execute arbitrary code via a video with large dime...
Mozilla Firefox 3.5.5Mozilla Seamonkey 1.0.8Mozilla Seamonkey 1.0.2Mozilla Seamonkey 1.0Mozilla Seamonkey 1.1.14Mozilla Seamonkey 1.1.12Mozilla Seamonkey 1.1.13Mozilla Seamonkey 1.1.11Mozilla Seamonkey 1.1.6Mozilla Seamonkey 2.0Mozilla Seamonkey 1.5.0.10Mozilla Seamonkey 1.0.7Mozilla Seamonkey 1.0.6Mozilla Seamonkey 1.0.1Mozilla Seamonkey 1.1Mozilla Seamonkey 1.1.15Mozilla Seamonkey 1.1.4Mozilla Seamonkey 1.1.9Mozilla Seamonkey 1.1.5Mozilla Seamonkey 2.0a1Mozilla Seamonkey 2.0a1preMozilla Firefox 3.5.1
NA
CVE-2009-2702
KDE KSSL in kdelibs 3.5.4, 4.2.4, and 4.3 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle malicious users to spoof arbitrary SSL servers via a crafted certificate is...
Kde Kdelibs 4.3Kde Kdelibs 3.5.4Kde Kdelibs 4.2.4
NA
CVE-2009-3379
Multiple unspecified vulnerabilities in libvorbis, as used in Mozilla Firefox 3.5.x prior to 3.5.4, allow remote malicious users to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors. NOTE: this might overlap CVE-2009-2663.
Mozilla Firefox 3.5.1Mozilla Firefox 3.5.2Mozilla Firefox 3.5.3
NA
CVE-2009-3728
Directory traversal vulnerability in the ICC_Profile.getInstance method in Java Runtime Environment (JRE) in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, allows remote malicious users to determine the existence of local International Color Consortium (ICC...
Sun Jre 1.5.0Sun Jre 1.6.0Sun Openjdk
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionSSRFbuffer overflowCVE-2023-28952CVE-2023-41822CVE-2024-27956CVE-2023-7028CVE-2024-34447CVE-2024-34460
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook