Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2009
February

CVEs published in February 2009

686 vulnerabilities, 76 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

ibm websphere application serverWSPolicy in the Web Services component in IBM WebSphere Application Server (WAS) 7.0.x before 7.0...CVE-2009-05042.1 LowFebruary 17, 2009
w3bcms w3b\>cmsMultiple unspecified vulnerabilities in the admin backend in w3b>cms (aka w3blabor CMS) before 3...CVE-2008-6158Public exploit10.0 HighFebruary 17, 2009
sepcity classified adsSepCity Classified Ads stores the admin password in cleartext in data/classifieds.mdb, which...CVE-2008-6157Public exploit7.5 HighFebruary 17, 2009
ibm websphere application serverUnspecified vulnerability in the Performance Monitoring Infrastructure (PMI) feature in the...CVE-2008-42855.0 MediumFebruary 17, 2009
php director directorSQL injection vulnerability in index.php in PHP Director 0.21 and earlier allows remote attackers...CVE-2009-0604Public exploit7.5 HighFebruary 16, 2009
drupal link moduleCross-site scripting (XSS) vulnerability in index.php in the Link module 5.x-2.5 for Drupal 5.10...CVE-2009-06033.5 LowFebruary 16, 2009
wikkitikkitaviUnrestricted file upload vulnerability in upload.php in WikkiTikkiTavi 1.11 allows remote...CVE-2009-0602Public exploit7.5 HighFebruary 16, 2009
wiresharkFormat string vulnerability in Wireshark 0.99.8 through 1.0.5 on non-Windows platforms allows...CVE-2009-0601Fix available2.1 LowFebruary 16, 2009
wiresharkWireshark 0.99.6 through 1.0.5 allows user-assisted remote attackers to cause a denial of service...CVE-2009-0600Fix available4.3 MediumFebruary 16, 2009
wiresharkBuffer overflow in wiretap/netscreen.c in Wireshark 0.99.7 through 1.0.5 allows user-assisted...CVE-2009-0599Fix available5.0 MediumFebruary 16, 2009
formfields admanSQL injection vulnerability in editCampaign.php in AdMan 1.1.20070907 allows remote authenticated...CVE-2008-6156Public exploit6.5 MediumFebruary 16, 2009
hispah text links adsSQL injection vulnerability in index.php in Hispah Text Links Ads 1.1 allows remote attackers to...CVE-2008-6155Public exploit7.5 HighFebruary 16, 2009
hispah text links adsSQL injection vulnerability in index.php in Hispah Text Links Ads 1.1 allows remote attackers to...CVE-2008-6154Public exploit7.5 HighFebruary 16, 2009
phpmesfilmsSQL injection vulnerability in index.php in PhpMesFilms 1.0 and 1.8 allows remote attackers to...CVE-2009-0598Public exploit7.5 HighFebruary 16, 2009
w3b cms aka w3blabor cmsSQL injection vulnerability in admin/index.php in w3b>cms (aka w3blabor CMS) before 3.4.0, when...CVE-2009-0597Public exploit6.8 MediumFebruary 16, 2009
phpskelsiteDirectory traversal vulnerability in skysilver/login.tpl.php in phpSkelSite 1.4, when...CVE-2009-0596Public exploit6.8 MediumFebruary 16, 2009
phpskelsitePHP remote file inclusion vulnerability in skysilver/login.tpl.php in phpSkelSite 1.4, when...CVE-2009-0595Public exploitEPSS 34.4%5.1 MediumFebruary 16, 2009
apmuthu phpskelsiteCross-site scripting (XSS) vulnerability in index.php in phpSkelSite 1.4 allows remote attackers...CVE-2009-0594Public exploit4.3 MediumFebruary 16, 2009
plxwebdev plx auto reminderSQL injection vulnerability in members.php in plx Auto Reminder 3.7 allows remote authenticated...CVE-2009-0593Public exploit6.5 MediumFebruary 16, 2009
pnphpbb pnphpbb2Multiple directory traversal vulnerabilities in PNphpBB2 1.2i and earlier allow remote attackers...CVE-2009-0592Public exploitEPSS 34.3%7.5 HighFebruary 16, 2009
jayeshp pixel8 web photo albumSQL injection vulnerability in Photo.asp in Jay Patel Pixel8 Web Photo Album 3.0 allows remote...CVE-2008-6153Public exploit7.5 HighFebruary 16, 2009
sepcity faculty portalSQL injection vulnerability in deptdisplay.asp in SepCity Faculty Portal allows remote attackers...CVE-2008-6152Public exploit7.5 HighFebruary 16, 2009
sepcity shopping mallSQL injection vulnerability in shpdetails.asp in SepCity Shopping Mall allows remote attackers to...CVE-2008-6151Public exploit7.5 HighFebruary 16, 2009
sepcity classified adsSQL injection vulnerability in classdis.asp in SepCity Classified Ads allows remote attackers to...CVE-2008-6150Public exploit7.5 HighFebruary 16, 2009
joomlaapps com mdiggSQL injection vulnerability in the mDigg (com_mdigg) component 2.2.8 for Joomla! allows remote...CVE-2008-6149Public exploit7.5 HighFebruary 16, 2009
raven-worx livetickerSQL injection vulnerability in the Live Ticker (com_liveticker) module 1.0 for Joomla! allows...CVE-2008-6148Public exploit7.5 HighFebruary 16, 2009
aspapp forumappForumApp 3.3 stores sensitive information under the web root with insufficient access control,...CVE-2008-6147Public exploit5.0 MediumFebruary 16, 2009
deluxebbSQL injection vulnerability in pm.php in DeluxeBB 1.2 and earlier, when magic_quotes_gpc is...CVE-2008-6146Public exploit6.8 MediumFebruary 16, 2009
typo3 wec discussion forumMultiple SQL injection vulnerabilities in the WEC Discussion Forum (wec_discussion) extension 1.7...CVE-2008-61457.5 HighFebruary 16, 2009
typo3 wec discussion forumMultiple cross-site scripting (XSS) vulnerabilities in the WEC Discussion Forum (wec_discussion)...CVE-2008-61444.3 MediumFebruary 16, 2009
owentechkenya owenpollOwenPoll 1.0 allows remote attackers to bypass authentication and obtain administrative access...CVE-2008-6143Public exploit7.5 HighFebruary 16, 2009
china-on-site flexphpicMultiple SQL injection vulnerabilities in admin/usercheck.php in FlexPHPic 0.0.4 and FlexPHPic...CVE-2008-6142Public exploit7.5 HighFebruary 16, 2009
avaya ip soft phoneUnspecified vulnerability in Avaya IP Softphone 6.0 SP4 and 6.01.85 allows remote attackers to...CVE-2008-61415.0 MediumFebruary 14, 2009
avaya one-xUnspecified vulnerability in the Session Initiation Protocol (SIP) implementation in Avaya one-X...CVE-2008-61405.0 MediumFebruary 14, 2009
webbiscuits modules controllerDirectory traversal vulnerability in faqsupport/wce.download.php in WebBiscuits Modules...CVE-2008-6139Public exploit5.0 MediumFebruary 14, 2009
webbiscuits modules controllerPHP remote file inclusion vulnerability in adminhead.php in WebBiscuits Modules Controller 1.1...CVE-2008-6138Public exploit7.5 HighFebruary 14, 2009
drupal everyblogEveryBlog 5.x and 6.x, a module for Drupal, allows remote attackers to bypass access restrictions...CVE-2008-61377.5 HighFebruary 14, 2009
drupal everyblogUnspecified vulnerability in EveryBlog 5.x and 6.x, a module for Drupal, allows remote attackers...CVE-2008-61367.5 HighFebruary 14, 2009
drupal everyblogCross-site scripting (XSS) vulnerability in EveryBlog 5.x and 6.x, a module for Drupal, allows...CVE-2008-61354.3 MediumFebruary 14, 2009
drupal everyblogSQL injection vulnerability in EveryBlog 5.x and 6.x, a module for Drupal, allows remote...CVE-2008-61347.5 HighFebruary 14, 2009
ozsari full php emlak scriptSQL injection vulnerability in arsaprint.php in Full PHP Emlak Script allows remote attackers to...CVE-2008-6133Public exploit7.5 HighFebruary 13, 2009
brickhost phpscheduleitEval injection vulnerability in reserve.php in phpScheduleIt 1.2.10 and earlier, when...CVE-2008-6132Public exploitEPSS 26.1%6.8 MediumFebruary 13, 2009
mozilo mozilowikiSession fixation vulnerability in moziloWiki 1.0.1 and earlier allows remote attackers to hijack...CVE-2008-61316.0 MediumFebruary 13, 2009
mozilo mozilowikiCross-site scripting (XSS) vulnerability in index.php in moziloWiki 1.0.1 and earlier allows...CVE-2008-61304.3 MediumFebruary 13, 2009
mozilo mozilowikiDirectory traversal vulnerability in print.php in moziloWiki 1.0.1 and earlier allows remote...CVE-2008-61294.3 MediumFebruary 13, 2009
mozilo mozilocmsSession fixation vulnerability in moziloCMS 1.10.2 and earlier allows remote attackers to hijack...CVE-2008-61286.8 MediumFebruary 13, 2009
mozilo mozilocmsMultiple cross-site scripting (XSS) vulnerabilities in moziloCMS 1.10.2 and earlier allow remote...CVE-2008-61274.3 MediumFebruary 13, 2009
mozilo mozilocmsMultiple directory traversal vulnerabilities in moziloCMS 1.10.2 and earlier allow remote...CVE-2008-6126Public exploit5.0 MediumFebruary 13, 2009
sun java system directory serverUnspecified vulnerability in Sun Java System Directory Server 5.2 p6 and earlier, and Enterprise...CVE-2009-05767.8 HighFebruary 13, 2009
drupal views bulk operationsCross-site scripting (XSS) vulnerability in the theme_views_bulk_operations_confirmation function...CVE-2009-05754.3 MediumFebruary 13, 2009
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open