Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2009
February

CVEs published in February 2009

686 vulnerabilities, 76 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

cafeengine easycafeengineSQL injection vulnerability in index.php in Easy CafeEngine allows remote attackers to execute...CVE-2009-0574Public exploit7.5 HighFebruary 13, 2009
fotoware fotowebMultiple cross-site scripting (XSS) vulnerabilities in FotoWeb 6.0 (Build 273) allow remote...CVE-2009-0573Public exploit4.3 MediumFebruary 13, 2009
flatnuxPHP remote file inclusion vulnerability in include/flatnux.php in FlatnuX CMS (aka Flatnuke3)...CVE-2009-0572Public exploit5.1 MediumFebruary 13, 2009
ninjadesigns mailistadmin.php in Ninja Designs Mailist 3.0 stores backup copies of maillist.php under the web root...CVE-2009-0571Public exploit5.0 MediumFebruary 13, 2009
ninjadesigns mailistDirectory traversal vulnerability in send.php in Ninja Designs Mailist 3.0, when register_globals...CVE-2009-0570Public exploit5.1 MediumFebruary 13, 2009
ibm websphere message brokerIBM WebSphere Message Broker 6.1.x before 6.1.0.2 writes a database connection password to the...CVE-2009-05032.1 LowFebruary 13, 2009
ge fanuc ifixGE Fanuc iFIX 5.0 and earlier relies on client-side authentication involving a weakly encrypted...CVE-2009-021610.0 HighFebruary 13, 2009
rimarts becky\! internet mailBuffer overflow in Becky! Internet Mail 2.48.02 and earlier allows remote attackers to execute...CVE-2009-05699.3 HighFebruary 13, 2009
fail2banfilter.d/wuftpd.conf in Fail2ban 0.8.3 uses an incorrect regular expression that allows remote...CVE-2009-0362Fix available4.0 MediumFebruary 13, 2009
barnowl, ktools owl +1 moreMultiple buffer overflows in (a) BarnOwl before 1.0.5 and (b) owl 2.1.11 allow remote attackers...CVE-2009-0363Fix available7.5 HighFebruary 13, 2009
apple mac os x, mac os x server +1 moreXTerm in Apple Mac OS X 10.4.11 and 10.5.6, when used with luit, creates tty devices with...CVE-2009-01415.5 MediumFebruary 13, 2009
apple mac os x, mac os x server +1 moreUnspecified vulnerability in the SMB component in Apple Mac OS X 10.4.11 and 10.5.6 allows remote...CVE-2009-01409.3 HighFebruary 13, 2009
apple mac os x, mac os x server +1 moreInteger overflow in the SMB component in Apple Mac OS X 10.5.6 allows remote SMB servers to cause...CVE-2009-01399.3 HighFebruary 13, 2009
apple mac os x, mac os x server +1 moreservermgrd (Server Manager) in Apple Mac OS X 10.5.6 does not properly validate authentication...CVE-2009-013810.0 HighFebruary 13, 2009
apple safariMultiple unspecified vulnerabilities in Safari RSS in Apple Mac OS X 10.4.11 and 10.5.6, and...CVE-2009-013710.0 HighFebruary 13, 2009
apple mac os x, mac os x server +1 moreUnspecified vulnerability in CarbonCore in Apple Mac OS X 10.4.11 and 10.5.6 allows remote...CVE-2009-00207.8 HighFebruary 13, 2009
apple mac os x, mac os x server +1 moreRemote Apple Events in Apple Mac OS X 10.4.11 and 10.5.6 allows remote attackers to cause a...CVE-2009-00197.5 HighFebruary 13, 2009
apple mac os x, mac os x server +1 moreThe Remote Apple Events server in Apple Mac OS X 10.4.11 and 10.5.6 does not properly initialize...CVE-2009-00187.8 HighFebruary 13, 2009
apple mac os x, mac os x server +1 morecsregprinter in the Printing component in Apple Mac OS X 10.4.11 and 10.5.6 does not properly...CVE-2009-00177.2 HighFebruary 13, 2009
apple mac os x, mac os x server +1 moreUnspecified vulnerability in fseventsd in the FSEvents framework in Apple Mac OS X 10.5.6 allows...CVE-2009-00154.9 MediumFebruary 13, 2009
apple mac os x, mac os x server +1 moreFolder Manager in Apple Mac OS X 10.5.6 uses insecure default permissions when recreating a...CVE-2009-00142.1 LowFebruary 13, 2009
apple mac os x, mac os x server +1 moredscl in DS Tools in Apple Mac OS X 10.4.11 and 10.5.6 requires that passwords must be provided as...CVE-2009-00132.1 LowFebruary 13, 2009
apple mac os x, mac os x server +1 moreHeap-based buffer overflow in CoreText in Apple Mac OS X 10.5.6 allows remote attackers to...CVE-2009-001210.0 HighFebruary 13, 2009
apple mac os x, mac os x server +1 moreCertificate Assistant in Apple Mac OS X 10.5.6 allows local users to overwrite arbitrary files...CVE-2009-00117.2 HighFebruary 13, 2009
apple mac os x, mac os x server +1 moreUnspecified vulnerability in the Pixlet codec in Apple Mac OS X 10.4.11 and 10.5.6 allows remote...CVE-2009-00096.8 MediumFebruary 13, 2009
moodle, debian linux +1 moreUnspecified vulnerability in the user editing interface in Moodle 1.5.x, 1.6 before 1.6.6, and 1...CVE-2008-61256.5 MediumFebruary 13, 2009
eset remote administratorCross-site scripting (XSS) vulnerability in the Additional Report Settings interface in ESET...CVE-2009-05484.3 MediumFebruary 12, 2009
evolutionEvolution 2.22.3.1 checks S/MIME signatures against a copy of the e-mail text within a signed...CVE-2009-0547Fix available5.0 MediumFebruary 12, 2009
newsgator feeddemonStack-based buffer overflow in NewsGator FeedDemon 2.7 and earlier allows user-assisted remote...CVE-2009-0546Public exploitEPSS 36.5%9.3 HighFebruary 12, 2009
zeroshellcgi-bin/kerbynet in ZeroShell 1.0beta11 and earlier allows remote attackers to execute arbitrary...CVE-2009-0545Public exploitEPSS 90.4%10.0 HighFebruary 12, 2009
apple mac os x, mac os x server +1 moreRace condition in AFP Server in Apple Mac OS X 10.5.6 allows local users to cause a denial of...CVE-2009-01421.9 LowFebruary 12, 2009
pycrypto arc2Buffer overflow in the PyCrypto ARC2 module 2.0.1 allows remote attackers to cause a denial of...CVE-2009-0544Public exploitFix availableEPSS 11.5%10.0 HighFebruary 12, 2009
proftpdProFTPD Server 1.3.1, with NLS support enabled, allows remote attackers to bypass SQL injection...CVE-2009-0543Public exploitFix availableEPSS 15.8%6.8 MediumFebruary 12, 2009
proftpd project proftpdSQL injection vulnerability in ProFTPD Server 1.3.1 through 1.3.2rc2 allows remote attackers to...CVE-2009-0542Public exploitFix availableEPSS 73.8%7.5 HighFebruary 12, 2009
net-snmp, opensuse, redhat enterprise linux +1 more +3 moreThe netsnmp_udp_fmtaddr function (snmplib/snmpUDPDomain.c) in net-snmp 5.0.9 through 5.4.2.1,...CVE-2008-6123Fix available5.0 MediumFebruary 12, 2009
mediawiki Debianmediawiki - cross-site scriptingDTSA-196-1Fix availableNo scoreFebruary 12, 2009
ibm aixat in bos.rte.cron on IBM AIX 5.2.0, 5.3.0 through 5.3.9, and 6.1.0 through 6.1.2 allows local...CVE-2009-05364.9 MediumFebruary 11, 2009
extrosoft thymeDirectory traversal vulnerability in export.php in Thyme 1.3 and earlier, when register_globals...CVE-2009-0535Public exploit7.5 HighFebruary 11, 2009
flexcmsSQL injection vulnerability in FlexCMS allows remote attackers to execute arbitrary SQL commands...CVE-2009-0534Public exploit7.5 HighFebruary 11, 2009
scripts-for-sites ez reminderCross-site scripting (XSS) vulnerability in password.php in Scripts for Sites EZ Reminder allows...CVE-2009-05334.3 MediumFebruary 11, 2009
scripts-for-sites ez babyCross-site scripting (XSS) vulnerability in password.php in Scripts For Sites (SFS) EZ Baby...CVE-2009-05324.3 MediumFebruary 11, 2009
ontarioabandonedplaces a better member-based asp photo gallerySQL injection vulnerability in gallery/view.asp in A Better Member-Based ASP Photo Gallery before...CVE-2009-0531Public exploit7.5 HighFebruary 11, 2009
electrictoad snippetmaster webpage editorMultiple PHP remote file inclusion vulnerabilities in SnippetMaster 2.2.2, when register_globals...CVE-2009-0530Public exploit6.8 MediumFebruary 11, 2009
electrictoad snippetmaster webpage editorCross-site scripting (XSS) vulnerability in index.php in SnippetMaster Webpage Editor 2.2.2...CVE-2009-0529Public exploit4.3 MediumFebruary 11, 2009
rhadrix if-cmsSQL injection vulnerability in frame.php in Rhadrix If-CMS 2.07 and earlier allows remote...CVE-2009-0528Public exploit7.5 HighFebruary 11, 2009
adaptcmsPHP remote file inclusion vulnerability in plugins/rss_importer_functions.php in AdaptCMS Lite 1...CVE-2009-0527Public exploit6.8 MediumFebruary 11, 2009
adaptcmsMultiple cross-site scripting (XSS) vulnerabilities in index.php in AdaptCMS Lite 1.4 allow...CVE-2009-0526Public exploit4.3 MediumFebruary 11, 2009
modernmethod sajaxCross-site scripting (XSS) vulnerability in the sajax_get_common_js function in php/Sajax.php in...CVE-2009-05254.3 MediumFebruary 11, 2009
libvirtBuffer overflow in the proxyReadClientSocket function in proxy/libvirt_proxy.c in libvirt_proxy 0...CVE-2009-0036Public exploitFix available4.4 MediumFebruary 11, 2009
netgear wgr614The web management interface in Netgear WGR614v9 allows remote attackers to cause a denial of...CVE-2008-6122Public exploit7.8 HighFebruary 11, 2009
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open