CVEs published in January 2009
471 vulnerabilities, 71 critical, 0 exploited.
- gravity-gtdEval injection vulnerability in library/setup/rpc.php in Gravity Getting Things Done (GTD) 0.4.5...10.0 High
- gravity-gtdDirectory traversal vulnerability in library/setup/rpc.php in Gravity Getting Things Done (GTD) 0...6.8 Medium
- tribiq cmsCross-site scripting (XSS) vulnerability in index.php in Tribiq CMS Community 5.0.10B and 5.0.11E...4.3 Medium
- tribiq cmsSQL injection vulnerability in index.php in Tribiq CMS Community 5.0.10B and 5.0.11E allows...7.5 High
- active web softwares testMultiple SQL injection vulnerabilities in start.asp in Active Test 2.1 allow remote attackers to...7.5 High
- activewebsoftwares active testMultiple SQL injection vulnerabilities in Active Test 2.1 allow remote attackers to execute...7.5 High
- mydyngallerySQL injection vulnerability in the Mydyngallery (com_mydyngallery) component 1.4.2 for Joomla!...7.5 High
- phpstreet webboardWbstreet (aka PHPSTREET Webboard) 1.0 stores sensitive information under the web root with...5.0 Medium
- phpstreet webboardSQL injection vulnerability in show.php in Wbstreet (aka PHPSTREET Webboard) 1.0 allows remote...7.5 High
- ktp computer customer database computer customer databaseSQL injection vulnerability in KTP Computer Customer Database (KTPCCD) CMS, when magic_quotes_gpc...6.8 Medium
- ktp computer customer database computer customer databaseDirectory traversal vulnerability in KTP Computer Customer Database (KTPCCD) CMS, when...7.5 High
- ktp computer customer database computer customer databaseSQL injection vulnerability in KTP Computer Customer Database (KTPCCD) CMS, when magic_quotes_gpc...6.0 Medium
- aspapps template creatureASP Template Creature stores sensitive information under the web root with insufficient access...5.0 Medium
- aspapps template creatureSQL injection vulnerability in media/media_level.asp in ASP Template Creature allows remote...7.5 High
- tiddlywiki cctiddlyMultiple PHP remote file inclusion vulnerabilities in ccTiddly 1.7.4 and 1.7.6 allow remote...7.5 High
- bncwiDirectory traversal vulnerability in index.php in BNCwi 1.04 and earlier allows remote attackers...7.5 High
- openoffice openoffice.orgThe Word processor in OpenOffice.org 1.1.2 through 1.1.5 allows remote attackers to cause a...9.3 High
- typo3Indexed Search Engine for TYPO3 Command Execution via Metacharacter Injection10.0 High
- typo3Multiple cross-site scripting (XSS) vulnerabilities in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4...4.3 Medium
- typo3Authentication library in TYPO3 vulnerable to session fixation7.5 High
- typo3, debian linux +1 moreThe System extension Install tool in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0...7.5 High
- easyhdrStack-based buffer overflow in easyHDR PRO 1.60.2 allows user-assisted attackers to execute...9.3 High
- mozilla firefoxMozilla Firefox 3.0.5 allows remote attackers to trick a user into visiting an arbitrary URL via...6.8 Medium
- cisco unified communications managerThe Certificate Authority Proxy Function (CAPF) service in Cisco Unified Communications Manager 5...4.3 Medium
- apple quicktime mpeg-2 playback componentUnspecified vulnerability in Apple QuickTime MPEG-2 Playback Component before 7.60.92.0 on...7.6 High
- cisco security managerCisco Security Manager 3.1 and 3.2 before 3.2.2, when Cisco IPS Event Viewer (IEV) is used,...6.8 Medium
- joey schulze mod auth mysqlSQL injection vulnerability in mod_auth_mysql.c in the mod-auth-mysql (aka libapache2-mod-auth...7.5 High
- enthrallweb ereservationsMultiple SQL injection vulnerabilities in default.asp in Enthrallweb eReservations allow remote...7.5 High
- ryneezy phosheezyStatic code injection vulnerability in admin.php in Ryneezy phoSheezy 0.2 allows remote...6.5 Medium
- ryneezy phosheezyRyneezy phoSheezy 0.2 stores sensitive information under the web root with insufficient access...5.0 Medium
- katywhitton rankemKaty Whitton RankEm stores sensitive information under the web root with insufficient access...5.0 Medium
- katywhitton rankemCross-site scripting (XSS) vulnerability in rankup.asp in Katy Whitton RankEm allows remote...4.3 Medium
- 53kf web im 2009The server for 53KF Web IM 2009 Home, Professional, and Enterprise editions relies on client-side...4.3 Medium
- easyhdrStack-based buffer overflow in easyHDR PRO 1.60.2 allows user-assisted attackers to execute...9.3 High
- yapbbPHP remote file inclusion vulnerability in include/class_yapbbcooker.php in YapBB 1.2.Beta 2...6.8 Medium
- php-fusionSQL injection vulnerability in readmore.php in PHP-Fusion 4.01 allows remote attackers to execute...7.5 High
- nukevietcms nukevietNukeviet 2.0 Beta allows remote attackers to bypass authentication and gain administrative access...7.5 High
- navboardCross-site scripting (XSS) vulnerability in modules.php in NavBoard 16 (2.6.0) allows remote...2.6 Low
- navboardMultiple directory traversal vulnerabilities in NavBoard 16 (2.6.0) allow remote attackers to...7.5 High
- modxcmsMultiple cross-site scripting (XSS) vulnerabilities in MODx before 0.9.6.3 allow remote attackers...4.3 Medium
- modxcmsCross-site request forgery (CSRF) vulnerability in MODx 0.9.6.1p2 and earlier allows remote...6.0 Medium
- modxcmsSQL injection vulnerability in index.php in MODx 0.9.6.2 and earlier, when magic_quotes_gpc is...6.8 Medium
- modxcmsCross-site scripting (XSS) vulnerability in index.php in MODx CMS 0.9.6.2 and earlier allows...4.3 Medium
- modxcmsPHP remote file inclusion vulnerability in assets/snippets/reflect/snippet.reflect.php in MODx...6.8 Medium
- usagi mynetsCross-site scripting (XSS) vulnerability in Usagi Project MyNETS 1.2.0.1 and earlier allows...4.3 Medium
- zkesoft ayeviewAyeView 2.20 allows user-assisted attackers to cause a denial of service (memory consumption or...7.8 High
- mini-pubfront-end/edit.php in mini-pub 0.3 and earlier allows remote attackers to read files and obtain...5.0 Medium
- microsoft windows mobileDirectory traversal vulnerability in the OBEX FTP Service in the Microsoft Bluetooth stack in...8.8 High
- microsoft windows 2000, windows server 2003, windows server 2008 +2 more +4 moreMicrosoft Windows does not properly enforce the Autorun and NoDriveTypeAutoRun registry values,...7.2 High
- squirrelmailA certain Red Hat patch for SquirrelMail 1.4.8 sets the same SQMSESSID cookie value for all...6.5 Medium
- Show moreLoading…