Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2009
January

CVEs published in January 2009

471 vulnerabilities, 71 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

debian linux, linux kernel, canonical ubuntu linux +2 moredrivers/firmware/dell_rbu.c in the Linux kernel before 2.6.27.13, and 2.6.28.x before 2.6.28.2,...CVE-2009-03224.9 MediumJanuary 28, 2009
apple safariApple Safari 3.2.1 (aka AppVer 3.525.27.1) on Windows allows remote attackers to cause a denial...CVE-2009-0321Public exploit4.3 MediumJanuary 28, 2009
microsoft windows xp, windows server 2003, windows server 2008 +1 more +3 moreMicrosoft Windows XP, Server 2003 and 2008, and Vista exposes I/O activity measurements of all...CVE-2009-03204.0 MediumJanuary 28, 2009
sun opensolaris, solaris +1 moreUnspecified vulnerability in the autofs module in the kernel in Sun Solaris 8 through 10, and...CVE-2009-03196.9 MediumJanuary 28, 2009
sap netweaverCross-site scripting (XSS) vulnerability in Web Dynpro (WD) in the SAP NetWeaver portal, when...CVE-2008-33584.3 MediumJanuary 28, 2009
aj square auctionCross-site scripting (XSS) vulnerability in search.php in AJ Auction Pro Platinum 2 allows remote...CVE-2008-6004Public exploit4.3 MediumJanuary 28, 2009
aj square auctionSQL injection vulnerability in sellers_othersitem.php in AJ Auction Pro Platinum 2 allows remote...CVE-2008-6003Public exploit7.5 HighJanuary 28, 2009
web-cpAbsolute path traversal vulnerability in sendfile.php in web-cp 0.5.7, when register_globals is...CVE-2008-6002Public exploit7.1 HighJanuary 28, 2009
adnforumindex.php in ADN Forum 1.0b and earlier allows remote attackers to bypass authentication and gain...CVE-2008-6001Public exploit7.5 HighJanuary 28, 2009
gdata antivirus 2008, internetsecurity 2008, totalcare 2008 +2 moreThe GDTdiIcpt.sys driver in G DATA AntiVirus 2008, InternetSecurity 2008, and TotalCare 2008...CVE-2008-60007.2 HighJanuary 28, 2009
drupal ajax checklistCross-site scripting (XSS) vulnerability in the Ajax Checklist module 5.x before 5.x-1.1 for...CVE-2008-59993.5 LowJanuary 28, 2009
drupal ajax checklistMultiple SQL injection vulnerabilities in the ajax_checklist_save function in the Ajax Checklist...CVE-2008-5998Public exploit6.0 MediumJanuary 28, 2009
ocp2 omnicom content platformAbsolute path traversal vulnerability in admin/fileKontrola/browser.asp in Omnicom Content...CVE-2008-5997Public exploit7.8 HighJanuary 28, 2009
link3 simplenewsCross-site scripting (XSS) vulnerability in the Simplenews module 5.x before 5.x-1.5 and 6.x...CVE-2008-59963.5 LowJanuary 28, 2009
typo3 freecap captcha extensionCross-site scripting (XSS) vulnerability in the freeCap CAPTCHA (sr_freecap) extension before 1.0...CVE-2008-59954.3 MediumJanuary 28, 2009
checkpoint connectra ngxCross-site scripting (XSS) vulnerability in index.php in Check Point Connectra NGX R62 HFA_01...CVE-2008-59944.3 MediumJanuary 28, 2009
barcodephp barcodegen 1dDirectory traversal vulnerability in image.php in Barcode Generator 1D (barcodegen) 2.0.0 and...CVE-2008-5993Public exploit7.5 HighJanuary 28, 2009
jetik emlak sistem aMultiple SQL injection vulnerabilities in Jetik Emlak Sistem A (ESA) 2.0 allow remote attackers...CVE-2008-5992Public exploit7.5 HighJanuary 28, 2009
mailwatchDirectory traversal vulnerability in docs.php in MailWatch for MailScanner 1.0.4 and earlier...CVE-2008-5991Public exploit7.5 HighJanuary 28, 2009
eduforge emergecolabDirectory traversal vulnerability in connect/init.inc in emergecolab 1.0 allows remote attackers...CVE-2008-5990Public exploit6.8 MediumJanuary 28, 2009
phpcounterDirectory traversal vulnerability in defs.php in PHPcounter 1.3.2 and earlier, when...CVE-2008-5989Public exploit6.8 MediumJanuary 28, 2009
jadu cms for governmentSQL injection vulnerability in scripts/recruit_details.php in Jadu CMS for Government allows...CVE-2008-5988Public exploit7.5 HighJanuary 28, 2009
gnome gnumericUntrusted search path vulnerability in the GObject Python interpreter wrapper in Gnumeric allows...CVE-2009-0318Fix available6.9 MediumJanuary 28, 2009
gnome nautilus-pythonUntrusted search path vulnerability in the Python language bindings for Nautilus (nautilus-python...CVE-2009-0317Fix available6.9 MediumJanuary 28, 2009
vimUntrusted search path vulnerability in src/if_python.c in the Python interface in Vim before 7.2...CVE-2009-0316Fix available6.9 MediumJanuary 28, 2009
xchatUntrusted search path vulnerability in the Python module in xchat allows local users to execute...CVE-2009-03156.9 MediumJanuary 28, 2009
fedoraproject fedora, gnome libpeas +1 moreUntrusted search path vulnerability in the Python module in gedit allows local users to execute...CVE-2009-0314Fix available6.9 MediumJanuary 28, 2009
gnome eogUntrusted search path vulnerability in the Python interface in Eye of GNOME (eog) 2.22.3, and...CVE-2008-5987Fix available6.9 MediumJanuary 28, 2009
csoundUntrusted search path vulnerability in the (1) "VST plugin with Python scripting" and (2) "VST...CVE-2008-5986Fix available6.9 MediumJanuary 28, 2009
gnome epiphanyUntrusted search path vulnerability in the Python interface in Epiphany 2.22.3, and possibly...CVE-2008-5985Fix available6.9 MediumJanuary 28, 2009
diaUntrusted search path vulnerability in the Python plugin in Dia 0.96.1, and possibly other...CVE-2008-5984Fix available6.9 MediumJanuary 28, 2009
kegel winetrickswinetricks before 20081223 allows local users to overwrite arbitrary files via a symlink attack...CVE-2009-03136.9 MediumJanuary 28, 2009
python, canonical ubuntu linux, fedoraproject fedora +2 moreUntrusted search path vulnerability in the PySys_SetArgv API function in Python 2.6 and earlier,...CVE-2008-59836.9 MediumJanuary 28, 2009
broadcom anti-virus, anti-virus for the enterprise, ca internet security suite 2007 +15 more +17 moreMultiple unspecified vulnerabilities in the Arclib library (arclib.dll) before 7.3.0.15 in the CA...CVE-2009-004210.0 HighJanuary 28, 2009
phpThe php_zip_make_relative_path function in php_zip.c in PHP 5.2.x before 5.2.9 allows context...CVE-2009-12725.0 MediumJanuary 28, 2009
moinmoinMoinMoin Cross-site scripting (XSS) vulnerability in the antispam featureCVE-2009-0312Fix available4.3 MediumJanuary 28, 2009
phpThe dba_replace function in PHP 5.2.6 and 4.x allows context-dependent attackers to cause a...CVE-2008-70686.4 MediumJanuary 28, 2009
ipswitch imailMultiple buffer overflows in Ipswitch IMail before 2006.21 allow remote attackers or...CVE-2007-2795Public exploitEPSS 24.5%9.0 HighJanuary 27, 2009
emc autostartThe Backbone service (ftbackbone.exe) in EMC AutoStart before 5.3 SP2 allows remote attackers to...CVE-2009-031110.0 HighJanuary 27, 2009
bmc patrol agentFormat string vulnerability in BMC PATROL Agent before 3.7.30 allows remote attackers to execute...CVE-2008-598210.0 HighJanuary 27, 2009
sun opensolaris, solaris +1 moreThe kernel in Sun Solaris 10 and 11 snv_101b, and OpenSolaris before snv_108, allows remote...CVE-2009-0304Public exploit7.8 HighJanuary 27, 2009
webhelpdesk web help deskCross-site scripting (XSS) vulnerability in Web Help Desk before 9.1.18 allows remote attackers...CVE-2009-03034.3 MediumJanuary 27, 2009
php-nuke downloads moduleSQL injection vulnerability in the Downloads module for PHP-Nuke 8.0 8.1.0.3.5b and earlier...CVE-2009-0302Public exploit4.6 MediumJanuary 27, 2009
grid2000 flexcell grid controlMultiple insecure method vulnerabilities in the FlexCell.Grid ActiveX control (FlexCell.ocx) in...CVE-2009-0301Public exploit6.8 MediumJanuary 27, 2009
groonesworld glinksSQL injection vulnerability in index.php in Groone GLinks 2.1 allows remote attackers to execute...CVE-2009-0299Public exploit7.5 HighJanuary 27, 2009
mw6 technologies barcode activexHeap-based buffer overflow in MW6 Technologies Barcode ActiveX control (Barcode.MW6Barcode.1,...CVE-2009-0298Public exploit9.3 HighJanuary 27, 2009
clicktech clickauctionSQL injection vulnerability in login_check.asp in ClickAuction allows remote attackers to execute...CVE-2009-0297Public exploit7.5 HighJanuary 27, 2009
gempar script toko onlineSQL injection vulnerability in shop_display_products.php in Script Toko Online 5.01 allows remote...CVE-2009-0296Public exploit7.5 HighJanuary 27, 2009
itlpoll itpollSQL injection vulnerability in index.php in Information Technology Light Poll Information ...CVE-2009-0295Public exploit6.8 MediumJanuary 27, 2009
webmobo wbnewsMultiple PHP remote file inclusion vulnerabilities in WB News 2.0.1, when register_globals is...CVE-2009-0294Public exploit6.8 MediumJanuary 27, 2009
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open