CVEs published in January 2009
471 vulnerabilities, 71 critical, 0 exploited.
- codeavalanche freeforallCodeAvalanche FreeForAll stores sensitive information under the web root with insufficient access...7.5 High
- codeavalanche directoryCodeAvalanche Directory stores sensitive information under the web root with insufficient access...7.5 High
- codeavalanche freewallpaperCodeAvalanche FreeWallpaper stores sensitive information under the web root with insufficient...7.5 High
- codeavalanche ratemysiteCodeAvalanche RateMySite stores sensitive information under the web root with insufficient access...7.5 High
- mediathekaSQL injection vulnerability in connection.php in Mediatheka 4.2 and earlier allows remote...7.5 High
- mediathekaDirectory traversal vulnerability in index.php in Mediatheka 4.2 allows remote attackers to...6.8 Medium
- icash click\&emailCross-site scripting (XSS) vulnerability in admin_dblayers.asp in ClickAndEmail allows remote...2.6 Low
- icash click\&emailMultiple SQL injection vulnerabilities in ClickAndEmail allow remote attackers to execute...7.5 High
- injaderCross-site scripting (XSS) vulnerability in the profile editing functionality in Injader before 2...4.3 Medium
- injaderSQL injection vulnerability in feeds.php in Injader before 2.1.2 allows remote attackers to...7.5 High
- icash click\&rankCross-site scripting (XSS) vulnerability in user.asp in Click&Rank allows remote attackers to...4.3 Medium
- icash click\&rankMultiple SQL injection vulnerabilities in Click&Rank allow remote attackers to execute arbitrary...7.5 High
- tincan phplistphplist before 2.10.8 allows remote attackers to include files via unknown vectors, related to a ...5.0 Medium
- takempis discussion webTAKempis Discussion Web 4.0 stores sensitive information under the web root with insufficient...5.0 Medium
- thenetguys aspired2quoteThe Net Guys ASPired2Quote stores sensitive information under the web root with insufficient...5.0 Medium
- zkesoft ayeviewAyeView 2.20 allows user-assisted attackers to cause a denial of service (application crash) via...4.3 Medium
- mini-pubAbsolute path traversal vulnerability in front-end/dir.php in mini-pub 0.3 and earlier allows...7.8 High
- joomla xstandardDirectory traversal vulnerability in attachmentlibrary.php in the XStandard component for Joomla!...5.0 Medium
- expinion poll proCross-site request forgery (CSRF) vulnerability in admin/agent_edit.asp in PollPro 3.0 allows...6.8 Medium
- goople cms cmsSQL injection vulnerability in frontpage.php in Goople CMS 1.8.2 and earlier allows remote...7.5 High
- riotpixSQL injection vulnerability in read.php in RiotPix 0.61 and earlier allows remote attackers to...7.5 High
- riotpixSQL injection vulnerability in index.php in RiotPix 0.61 and earlier allows remote attackers to...7.5 High
- phpauctionsPHPAuctions (aka PHPAuctionSystem) allows remote attackers to bypass authentication and gain...7.5 High
- phpauctionsCross-site scripting (XSS) vulnerability in profile.php in PHPAuctions (aka PHPAuctionSystem)...4.3 Medium
- phpauctionsSQL injection vulnerability in profile.php in PHPAuctions (aka PHPAuctionSystem) allows remote...7.5 High
- se-ed ezpackCross-site scripting (XSS) vulnerability in index.php in EZpack 4.2b2 allows remote attackers to...4.3 Medium
- se-ed ezpackSQL injection vulnerability in index.php in EZpack 4.2b2 allows remote attackers to execute...7.5 High
- playsmsMultiple PHP remote file inclusion vulnerabilities in playSMS 0.9.3 allow remote attackers to...7.5 High
- avaya broadcast serverSQL injection vulnerability in login.asp in Citrix Application Gateway - Broadcast Server (BCS)...7.5 High
- playsmsMultiple directory traversal vulnerabilities in playSMS 0.9.3 allow remote attackers to include...7.5 High
- gforgeSQL injection vulnerability in GForge 4.5.19 allows remote attackers to execute arbitrary SQL...7.5 High
- gforgeSQL injection vulnerability in people/editprofile.php in Gforge 4.6 rc1 and earlier allows remote...7.5 High
- gforgeSQL injection vulnerability in frs/shownotes.php in Gforge 4.5.19 and earlier allows remote...7.5 High
- microsoft internet explorerMicrosoft Internet Explorer 6.0 through 8.0 beta2 allows remote attackers to cause a denial of...4.3 Medium
- mozilla firefoxMozilla Firefox 3.0.5 and earlier 3.0.x versions, when designMode is enabled, allows remote...2.6 Low
- apple safariInteger signedness error in Apple Safari allows remote attackers to read the contents of...9.3 High
- ca service level management, service metric analysis +1 moreThe smmsnmpd service in CA Service Metric Analysis r11.0 through r11.1 SP1 and Service Level...10.0 High
- gobbl cmsadmin/auth.php in Gobbl CMS 1.0 allows remote attackers to bypass authentication and gain...7.5 High
- phpclanwebsiteCross-site scripting (XSS) vulnerability in index.php in Phpclanwebsite (aka PCW) 1.23.3 Fix Pack...4.3 Medium
- phpclanwebsiteMultiple directory traversal vulnerabilities in Phpclanwebsite (aka PCW) 1.23.3 Fix Pack 5 and...5.1 Medium
- phpclanwebsiteMultiple SQL injection vulnerabilities in Phpclanwebsite (aka PCW) 1.23.3 Fix Pack 5 and earlier,...6.8 Medium
- irrlichtBuffer overflow in Irrlicht before 1.5 allows remote attackers to cause a denial of service ...9.3 High
- joomlahbs hotel booking reservation system, com lowcosthotels +1 moreSQL injection vulnerability in the com_lowcosthotels component in the Hotel Booking Reservation...7.5 High
- joomlahbs hotel booking reservation system, com 5starhotels, com allhotels +2 moreMultiple SQL injection vulnerabilities in the Hotel Booking Reservation System (aka HBS) for...7.5 High
- componentone sizerone, sap gui, tabone +1 more +3 moreMultiple heap-based buffer overflows in the AddTab method in the (1) Tab and (2) CTab ActiveX...9.3 High
- cisco gss 4480 global site selector, gss 4490 global site selector, gss 4491 global site selector +1 more +3 morednsserver in Cisco Application Control Engine Global Site Selector (GSS) before 3.0(1) allows...5.0 Medium
- hp openview network node managerMultiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51,...10.0 High
- yerbaYerba SACphp 6.3 and earlier allows remote attackers to bypass authentication and gain...7.5 High
- nortel multimedia communication server 5100Multiple unspecified vulnerabilities in the UNIStim File Transfer Protocol (UFTP) processing in...7.8 High
- nortel multimedia communication server 5100Nortel Multimedia Communication Server (MSC) 5100 3.0.13 does not verify credentials during call...6.4 Medium
- Show moreLoading…