CVEs published in February 2009
686 vulnerabilities, 76 critical, 1 exploited.
- onlinegrades online gradesOnline Grades 3.2.4 allows remote attackers to obtain configuration information via a direct...5.0 Medium
- onlinegrades online gradesMultiple SQL injection vulnerabilities in parents/login.php in Online Grades 3.2.4, when...6.8 Medium
- skalinksSQL injection vulnerability in Skalfa SkaLinks 1.5 allows remote attackers to execute arbitrary...7.5 High
- blazevideo hdtv playerStack-based buffer overflow in BlazeVideo HDTV Player 3.5 and earlier allows remote attackers to...9.3 High
- kaspersky lab anti-virusBuffer overflow in klim5.sys in Kaspersky Anti-Virus for Workstations 6.0 and Anti-Virus 2008...7.2 High
- syntax desktop desktopDirectory traversal vulnerability in admin/modules/aa/preview.php in Syntax Desktop 2.7 allows...7.5 High
- aspindir mydesign sayacMultiple SQL injection vulnerabilities in default.asp in MyDesign Sayac 2.0 allow remote...7.5 High
- web-album webalbumSQL injection vulnerability in photo.php in WEBalbum 2.4b allows remote attackers to execute...7.5 High
- dreampics gallery builderSQL injection vulnerability in index.php in Dreampics Gallery Builder allows remote attackers to...7.5 High
- sirini grboardMultiple PHP remote file inclusion vulnerabilities in GRBoard 1.8, when register_globals is...7.5 High
- elecard avc hd playerStack-based buffer overflow in Elecard AVC HD PLAYER 5.5.90116 allows remote attackers to execute...9.3 High
- phpbbbookDirectory traversal vulnerability in bbcode.php in PHPbbBook 1.3 and 1.3h allows remote attackers...6.8 Medium
- technotePHP remote file inclusion vulnerability in skin_shop/standard/2_view_body/body_default.php in...6.8 Medium
- meet\#webMultiple PHP remote file inclusion vulnerabilities in Meet#Web 0.8 allow remote attackers to...7.5 High
- oracle database serverOracle Database Server 10.1, 10.2, and 11g grants directory WRITE permissions for arbitrary...5.1 Medium
- domphpMultiple SQL injection vulnerabilities in DomPHP 0.81 allow remote attackers to execute arbitrary...7.5 High
- microsoft wordMicrosoft Word 2007, when the "Save as PDF" add-on is enabled, places an absolute pathname in the...4.3 Medium
- adobe dreamweaverCross-site scripting (XSS) vulnerability in ActionScript in arbitrary Shockwave Flash (SWF) files...4.3 Medium
- techsmith camtasia studioCross-site scripting (XSS) vulnerability in ActionScript in arbitrary Shockwave Flash (SWF)...4.3 Medium
- infosoftglobal fusion chartsCross-site scripting (XSS) vulnerability in ActionScript in arbitrary Shockwave Flash (SWF) files...4.3 Medium
- codefixer linksproSQL injection vulnerability in Default.asp in LinksPro Standard Edition allows remote attackers...7.5 High
- activewebsoftwares active bidsMultiple cross-site scripting (XSS) vulnerabilities in Active Bids allow remote attackers to...4.3 Medium
- activewebsoftwares active bidsMultiple SQL injection vulnerabilities in Active Bids allow remote attackers to execute arbitrary...7.5 High
- dmxready secure document librarySQL injection vulnerability in CategoryManager/upload_image_category.asp in DMXReady Secure...7.5 High
- dmxready member directory managerSQL injection vulnerability in CategoryManager/upload_image_category.asp in DMXReady Member...7.5 High
- dmxready classified listings managerSQL injection vulnerability in CategoryManager/upload_image_category.asp in DMXReady Classified...7.5 High
- blue eye cms eye cmsSQL injection vulnerability in index.php in Blue Eye CMS 1.0.0 and earlier allows remote...7.5 High
- an guestbook guestbookCross-site scripting (XSS) vulnerability in sign1.php in AN Guestbook (ANG) before 0.7.7 allows...4.3 Medium
- kevin walker php photo albumDirectory traversal vulnerability in index.php in Php Photo Album (PHPPA) 0.8 BETA allows remote...7.5 High
- tincan phplistDynamic variable evaluation vulnerability in lists/admin.php in phpList 2.10.8 and earlier, when...7.5 High
- joomla com eventingSQL injection vulnerability in the Eventing (com_eventing) 1.6.x component for Joomla! allows...7.5 High
- rd-media rd-autosSQL injection vulnerability in the RD-Autos (com_rdautos) 1.5.5 Stable component for Joomla!...7.5 High
- cisco catalyst 3750 series integrated wireless lan controller, catalyst 6500 wireless services modules, wireless lan controller software +2 moreUnspecified vulnerability in the Cisco Wireless LAN Controller (WLC), Cisco Catalyst 6500...9.0 High
- cisco 4400 wireless lan controller, catalyst 3750 series integrated wireless lan controller, catalyst 6500 series integrated wireless lan controller +2 more +4 moreUnspecified vulnerability in the Wireless LAN Controller (WLC) TSEC driver in the Cisco 4400 WLC,...7.8 High
- cisco 4400 wireless lan controller, catalyst 3750 series integrated wireless lan controller, catalyst 6500 series integrated wireless lan controller +2 more +4 moreThe Cisco Wireless LAN Controller (WLC), Cisco Catalyst 6500 Wireless Services Module (WiSM), and...7.8 High
- cisco 4400 wireless lan controller, catalyst 3750 series integrated wireless lan controller, catalyst 6500 series integrated wireless lan controller +2 more +4 moreThe Cisco Wireless LAN Controller (WLC), Cisco Catalyst 6500 Wireless Services Module (WiSM), and...6.1 Medium
- webkitxml/XMLHttpRequest.cpp in WebCore in WebKit before r38566 does not properly restrict access from...5.0 Medium
- syslserveSyslserve 1.058 and earlier, and probably 1.059, allows remote attackers to cause a denial of...5.0 Medium
- hp 9200c digital sender, color laserjet 9500mfp, laserjet 2410 +10 more +12 moreDirectory traversal vulnerability in the HP JetDirect web administration interface in the HP...7.8 High
- microsoft xml core servicesMicrosoft XML Core Services, as used in Microsoft Expression Web, Office, Internet Explorer 6 and...5.0 Medium
- hp hp-uxThe IPv6 Neighbor Discovery Protocol (NDP) implementation in HP HP-UX B.11.11, B.11.23, and B.11...9.3 High
- tightvnc, ultravnc +1 moreMultiple integer signedness errors in (1) UltraVNC 1.0.2 and 1.0.5 and (2) TightVnc 1.3.9 allow...10.0 High
- mozilla firefoxMozilla Firefox 3.x before 3.0.6 does not properly implement the (1) no-store and (2) no-cache...3.3 Low
- mozilla firefox, seamonkey +1 moreMozilla Firefox before 3.0.6 and SeaMonkey before 1.1.15 do not properly restrict access from web...5.0 Medium
- mozilla firefoxMozilla Firefox before 3.0.6 and SeaMonkey do not block links to the (1) about:plugins and (2)...5.1 Medium
- mozilla firefoxcomponents/sessionstore/src/nsSessionStore.js in Mozilla Firefox before 3.0.6 does not block...5.4 Medium
- mozilla firefoxCross-domain vulnerability in js/src/jsobj.cpp in Mozilla Firefox 3.x before 3.0.6 allows remote...2.6 Low
- mozilla firefox, seamonkey, thunderbird +2 moreUnspecified vulnerability in Mozilla Firefox 3.x before 3.0.6, Thunderbird before 2.0.0.21, and...10.0 High
- mozilla firefox, seamonkey, thunderbird +2 moreMultiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.6, Thunderbird before 2.0...10.0 High
- liberum help deskDoug Luxem Liberum Help Desk 0.97.3 stores db/helpdesk2000.mdb under the web root with...5.0 Medium
- Show moreLoading…