CVEs published in January 2009

471 vulnerabilities, 71 critical, 0 exploited.

• google chrome ** DISPUTED ** Google Chrome 1.0.154.43 allows remote attackers to trick a user into visiting an... CVE-2009-0374 Public exploitDisputed 4.3 MediumJanuary 30, 2009
• elearningforce flash magazine deluxe SQL injection vulnerability in the ElearningForce Flash Magazine Deluxe (com_flashmagazinedeluxe)... CVE-2009-0373 Public exploit 7.5 HighJanuary 30, 2009
• memht portal Unrestricted file upload vulnerability in index.php in Miltenovik Manojlo MemHT Portal 4.0.1 and... CVE-2009-0372 Public exploit 6.5 MediumJanuary 30, 2009
• sitexs cms cms Directory traversal vulnerability in post.php in SiteXS CMS 0.1.1 and earlier allows remote... CVE-2009-0371 Public exploit 6.8 MediumJanuary 30, 2009
• ibm aix Multiple unspecified vulnerabilities in IBM AIX 5.2.0 through 6.1.2 allow local users to append... CVE-2009-0370 7.2 HighJanuary 30, 2009
• microsoft internet explorer Microsoft Internet Explorer 7 allows remote attackers to trick a user into visiting an arbitrary... CVE-2009-0369 Public exploit EPSS 10.6% 4.3 MediumJanuary 30, 2009
• hp select access Cross-site scripting (XSS) vulnerability in HP Select Access 6.1 and 6.2 allows remote attackers... CVE-2009-0204 4.3 MediumJanuary 30, 2009
• gratisoft sudo, vmware esx +1 more parse.c in sudo 1.6.9p17 through 1.6.9p19 does not properly interpret a system group (aka %group)... CVE-2009-0034 Fix available 7.8 HighJanuary 30, 2009
• redhat dogtag certificate system, certificate system +1 more The verifyProof function in the Token Processing System (TPS) component in Red Hat Certificate... CVE-2008-5082 6.0 MediumJanuary 30, 2009
• editeurscripts esfaq SQL injection vulnerability in questions.php in EsFaq 2.0 allows remote attackers to execute... CVE-2008-6016 Public exploit 7.5 HighJanuary 30, 2009
• editeurscripts esfaq Multiple SQL injection vulnerabilities in search.php in EsFaq 2.0 allow remote attackers to... CVE-2008-6015 7.5 HighJanuary 30, 2009
• rianxosencabos cms cms SQL injection vulnerability in scripts/links.php in Rianxosencabos CMS 0.9 allows remote... CVE-2008-6014 Public exploit 7.5 HighJanuary 30, 2009
• openfreeway freeway Multiple SQL injection vulnerabilities in Freeway before 1.4.3.210 allow remote attackers to... CVE-2008-6013 7.5 HighJanuary 30, 2009
• hardkap pritlog Directory traversal vulnerability in index.php in Pritlog 0.4 and earlier, when magic_quotes_gpc... CVE-2008-6012 Public exploit 4.3 MediumJanuary 30, 2009
• sg real estate portal real estate portal SQL injection vulnerability in index.php in SG Real Estate Portal 2.0 allows remote attackers to... CVE-2008-6011 Public exploit 7.5 HighJanuary 30, 2009
• sg real estate portal real estate portal Multiple directory traversal vulnerabilities in SG Real Estate Portal 2.0 allow remote attackers... CVE-2008-6010 Public exploit 5.0 MediumJanuary 30, 2009
• sg real estate portal real estate portal SG Real Estate Portal 2.0 allows remote attackers to bypass authentication and gain... CVE-2008-6009 Public exploit 7.5 HighJanuary 30, 2009
• herongyang hybook hyBook Guestbook Script stores sensitive information under the web root with insufficient access... CVE-2008-6008 5.0 MediumJanuary 30, 2009
• quidascript bookmarks favourites script SQL injection vulnerability in view_group.php in QuidaScript BookMarks Favourites Script (APB)... CVE-2008-6007 Public exploit 7.5 HighJanuary 30, 2009
• minbank micronation banking system Multiple PHP remote file inclusion vulnerabilities in Micronation Banking System (minba) 1.5.0... CVE-2008-6006 Public exploit 7.5 HighJanuary 30, 2009
• wftpserver winftp ftp server Stack-based buffer overflow in WFTPSRV.exe in WinFTP 2.3.0 allows remote authenticated users to... CVE-2009-0351 Public exploit 9.0 HighJanuary 29, 2009
• merak media player Stack-based buffer overflow in Merak Media Player 3.2 allows remote attackers to execute... CVE-2009-0350 Public exploit EPSS 10.2% 9.3 HighJanuary 29, 2009
• ftpshell server Stack-based buffer overflow in FTPShell Server 4.3 allows user-assisted remote attackers to cause... CVE-2009-0349 Public exploit 9.3 HighJanuary 29, 2009
• sun java system access manager The login module in Sun Java System Access Manager 6 2005Q1 (aka 6.3), 7 2005Q4 (aka 7.0), and 7... CVE-2009-0348 Public exploit 5.0 MediumJanuary 29, 2009
• autonomy ultraseek Open redirect vulnerability in cs.html in the Autonomy (formerly Verity) Ultraseek search engine... CVE-2009-0347 Public exploit EPSS 10.9% 5.8 MediumJanuary 29, 2009
• sun opensolaris, solaris +1 more The IP-in-IP packet processing implementation in the IPsec and IP stacks in the kernel in Sun... CVE-2009-0346 4.9 MediumJanuary 29, 2009
• sun fire x2100 m2, fire x2200 m2 +1 more Unspecified vulnerability in the Embedded Lights Out Manager (ELOM) on the Sun Fire X2100 M2 and... CVE-2009-0345 10.0 HighJanuary 29, 2009
• sun fire x2100 m2, fire x2200 m2 +1 more Unspecified vulnerability in the Embedded Lights Out Manager (ELOM) on the Sun Fire X2100 M2 and... CVE-2009-0344 10.0 HighJanuary 29, 2009
• niels provos systrace Niels Provos Systrace 1.6f and earlier on the x86_64 Linux platform allows local users to bypass... CVE-2009-0343 Public exploit 7.2 HighJanuary 29, 2009
• provos systrace Niels Provos Systrace before 1.6f on the x86_64 Linux platform allows local users to bypass... CVE-2009-0342 7.2 HighJanuary 29, 2009
• microsoft internet explorer The shell32 module in Microsoft Internet Explorer 7.0 on Windows XP SP3 might allow remote... CVE-2009-0341 Public exploit EPSS 16.0% 9.3 HighJanuary 29, 2009
• quirm simple php newsletter Multiple directory traversal vulnerabilities in Simple PHP Newsletter 1.5 allow remote attackers... CVE-2009-0340 Public exploit 6.8 MediumJanuary 29, 2009
• dmxready blog manager SQL injection vulnerability in inc_webblogmanager.asp in DMXReady Blog Manager allows remote... CVE-2009-0339 Public exploit 7.5 HighJanuary 29, 2009
• dmxready blog manager Cross-site scripting (XSS) vulnerability in inc_webblogmanager.asp in DMXReady Blog Manager... CVE-2009-0338 Public exploit 4.3 MediumJanuary 29, 2009
• katywhitton blogit\! SQL injection vulnerability in index.asp in Katy Whitton BlogIt! allows remote attackers to... CVE-2009-0337 Public exploit 7.5 HighJanuary 29, 2009
• katywhitton blogit\! Katy Whitton BlogIt! stores sensitive information under the web root with insufficient access... CVE-2009-0336 Public exploit 5.0 MediumJanuary 29, 2009
• katywhitton blogit\! Cross-site scripting (XSS) vulnerability in index.asp in Katy Whitton BlogIt! allows remote... CVE-2009-0335 Public exploit 4.3 MediumJanuary 29, 2009
• katywhitton blogit\! SQL injection vulnerability in index.asp in Katy Whitton BlogIt! allows remote attackers to... CVE-2009-0334 Public exploit 7.5 HighJanuary 29, 2009
• joomla com waticketsystem SQL injection vulnerability in the WebAmoeba (WA) Ticket System (com_waticketsystem) component... CVE-2009-0333 Public exploit 7.5 HighJanuary 29, 2009
• avbooklibrary Multiple SQL injection vulnerabilities in AV Book Library before 1.1 allow remote attackers to... CVE-2009-0332 7.5 HighJanuary 29, 2009
• quirm espg Directory traversal vulnerability in gallery/comment.php in Enhanced Simple PHP Gallery (ESPG) 1... CVE-2009-0331 Public exploit 7.8 HighJanuary 29, 2009
• wss-pro scms Directory traversal vulnerability in index.php in Simple Content Management System (SCMS) 1... CVE-2009-0330 Public exploit 6.8 MediumJanuary 29, 2009
• joomla com pccookbook SQL injection vulnerability in the PcCookBook (com_pccookbook) component for Joomla! allows... CVE-2009-0329 Public exploit 7.5 HighJanuary 29, 2009
• robs-projects digital sales ipn ROBS-PROJECTS Digital Sales IPN (aka DS-IPN.NET or DS-IPN Paypal Shop) stores sensitive... CVE-2009-0328 Public exploit 5.0 MediumJanuary 29, 2009
• seraphimtech free bible search php script SQL injection vulnerability in readbible.php in Free Bible Search PHP Script 1.0 allows remote... CVE-2009-0327 Public exploit 7.5 HighJanuary 29, 2009
• dark age cms age cms SQL injection vulnerability in login.php in Dark Age CMS 0.2c beta allows remote attackers to... CVE-2009-0326 Public exploit 7.5 HighJanuary 29, 2009
• ninjadesigns ninja blog Directory traversal vulnerability in entries/index.php in Ninja Blog 4.8, when magic_quotes_gpc... CVE-2009-0325 Public exploit 4.3 MediumJanuary 29, 2009
• bibciter Multiple SQL injection vulnerabilities in BibCiter 1.4 allow remote attackers to execute... CVE-2009-0324 Public exploit 7.5 HighJanuary 29, 2009
• w3 amaya Multiple stack-based buffer overflows in W3C Amaya Web Browser 10.0 and 11.0 allow remote... CVE-2009-0323 Public exploit EPSS 62.5% 10.0 HighJanuary 28, 2009
• w3c amaya web browser Multiple buffer overflows in the CheckUniqueName function in W3C Amaya Web Browser 10.0.1, and... CVE-2008-6005 10.0 HighJanuary 28, 2009
• Show olderLoading…