CVEs published in January 2009
471 vulnerabilities, 71 critical, 0 exploited.
- wazzum dating softwareSQL injection vulnerability in profile_view.php in Wazzum Dating Software, possibly 2.0, allows...7.5 High
- shop-inetSQL injection vulnerability in show_cat2.php in SHOP-INET 4 allows remote attackers to execute...7.5 High
- openxDirectory traversal vulnerability in fc.php in OpenX 2.6.3 allows remote attackers to include and...7.5 High
- apple cupsCUPS on Mandriva Linux 2008.0, 2008.1, 2009.0, Corporate Server (CS) 3.0 and 4.0, and Multi...6.9 Medium
- sir gnuboardDirectory traversal vulnerability in common.php in SIR GNUBoard 4.31.03 allows remote attackers...6.8 Medium
- windows tftp utility tftputilk23productions TFTPUtil GUI 1.2.0 and 1.3.0 allows remote attackers to cause a denial of service ...5.0 Medium
- windows tftp utility tftputilDirectory traversal vulnerability in k23productions TFTPUtil GUI 1.2.0 and 1.3.0 allows remote...5.0 Medium
- keep toolkit toolkitSQL injection vulnerability in lib/patUser.php in KEEP Toolkit before 2.5.1 allows remote...7.5 High
- opengooDirectory traversal vulnerability in upgrade/index.php in OpenGoo 1.1, when register_globals is...2.6 Low
- bbsxpCross-site scripting (XSS) vulnerability in error.asp in BBSXP 5.13 and earlier allows remote...4.3 Medium
- flaxweb flax article managerSQL injection vulnerability in category.php in Flax Article Manager 1.1 allows remote attackers...7.5 High
- aobosoft oblogCross-site scripting (XSS) vulnerability in err.asp in Oblog allows remote attackers to inject...4.3 Medium
- ralinktech rt73Integer overflow in Ralink Technology USB wireless adapter (RT73) 3.08 for Windows, and other...9.3 High
- warhound walking clubSQL injection vulnerability in login.aspx in WarHound Walking Club allows remote attackers to...7.5 High
- asp-projectAsp Project Management 1.0 allows remote attackers to bypass authentication and gain...7.5 High
- pardalcmsSQL injection vulnerability in comentar.php in Pardal CMS 0.2.0 and earlier allows remote...7.5 High
- sun java system application serverSun Java System Application Server (AS) 8.1 and 8.2 allows remote attackers to read the Web...5.0 Medium
- sun opensolarisUnspecified vulnerability in the kernel in OpenSolaris snv_100 through snv_102 on the Sun...7.8 High
- pacosdrivers pacpollPacPoll 4.0 stores sensitive information under the web root with insufficient access control,...5.0 Medium
- ocean12 technologies mailing list managerOcean12 Mailing List Manager Gold stores sensitive data under the web root with insufficient...5.0 Medium
- ocean12 technologies mailing list managerCross-site scripting (XSS) vulnerability in default.asp in Ocean12 Mailing List Manager Gold...4.3 Medium
- ocean12 technologies mailing list managerMultiple SQL injection vulnerabilities in Ocean12 Mailing List Manager Gold allow remote...7.5 High
- preprojects php jobwebsite proSQL injection vulnerability in siteadmin/forgot.php in PHP JOBWEBSITE PRO allows remote attackers...7.5 High
- preprojects php jobwebsite proMultiple cross-site scripting (XSS) vulnerabilities in siteadmin/forgot.php in PHP JOBWEBSITE PRO...4.3 Medium
- activewebsoftwares active price comparisonSQL injection vulnerability in links.asp in Active Price Comparison 4.0 allows remote attackers...7.5 High
- activewebsoftwares active price comparisonMultiple SQL injection vulnerabilities in login.aspx in Active Price Comparison 4.0 allow remote...7.5 High
- activewebsoftwares active web mailSQL injection vulnerability in login.aspx in Active Web Mail 4.0 allows remote attackers to...7.5 High
- activewebsoftwares active business directorySQL injection vulnerability in default.asp in Active Business Directory 2 allows remote attackers...7.5 High
- i-netsolution orkut cloneCross-site scripting (XSS) vulnerability in profile_social.php in i-Net Solution Orkut Clone...4.3 Medium
- i-netsolution orkut cloneSQL injection vulnerability in profile_social.php in i-Net Solution Orkut Clone allows remote...6.5 Medium
- sunbyte e-flowerSQL injection vulnerability in popupproduct.php in Sunbyte e-Flower allows remote attackers to...7.5 High
- ryneezy phosheezyStatic code injection vulnerability in admin.php in Ryneezy phoSheezy 0.2 allows remote...6.5 Medium
- phpicalendarDirectory traversal vulnerability in print.php in PHP iCalendar 2.24 and earlier allows remote...7.5 High
- phpicalendaradmin/index.php in PHP iCalendar 2.3.4, 2.24, and earlier does not require administrative...7.5 High
- globsyglobsy_edit.php in Globsy 1.0 and earlier allows remote attackers to create or overwrite...7.5 High
- lokicmsDirectory traversal vulnerability in index.php in LokiCMS 0.3.4 and earlier, when...5.0 Medium
- fujitsu systemcastwizard liteDirectory traversal vulnerability in the TFTP service in Fujitsu SystemcastWizard Lite 2.0A, 2.0,...5.0 Medium
- fujitsu systemcastwizard liteStack-based buffer overflow in PXEService.exe in Fujitsu SystemcastWizard Lite 2.0A, 2.0, 1.9,...10.0 High
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 morefs/ecryptfs/inode.c in the eCryptfs subsystem in the Linux kernel before 2.6.28.1 allows local...4.9 Medium
- sun opensolaris, solaris +1 moreRace condition in the pseudo-terminal (aka pty) driver module in Sun Solaris 8 through 10, and...4.9 Medium
- sun opensolaris, solaris +1 morelibike in Sun Solaris 9 and 10, and OpenSolaris before snv_100, does not properly check packets,...5.0 Medium
- trilogic media playerStack-based buffer overflow in Triologic Media Player 8.0.0.0 allows user-assisted remote...9.3 High
- isc bindInternet Systems Consortium (ISC) BIND 9.6.0 and earlier does not properly check the return value...7.5 High
- fujitsu systemcastwizard liteBuffer overflow in the Registry Setting Tool in Fujitsu SystemcastWizard Lite 2.0A, 2.0, 1.9, and...10.0 High
- axis camera controlHeap-based buffer overflow in the CamImage.CamImage.1 ActiveX control in AxisCamControl.ocx in...9.3 High
- nullsoft winampMultiple buffer overflows in Winamp 5.541 and earlier allow remote attackers to cause a denial of...10.0 High
- trilogic media playerStack-based buffer overflow in Triologic Media Player 7 and 8.0.0.0 allows user-assisted remote...9.3 High
- effectmatrix total video playerStack-based buffer overflow in EffectMatrix Total Video Player 1.31 allows user-assisted...9.3 High
- moinmoinMoinMoin Multiple cross-site scripting (XSS) vulnerabilities4.3 Medium
- impresscmsSession fixation vulnerability in Social ImpressCMS before 1.1.1 RC1 allows remote attackers to...6.8 Medium
- Show moreLoading…