Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2009
February

CVEs published in February 2009

686 vulnerabilities, 76 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

eeb-welt eebcmsCross-site scripting (XSS) vulnerability in index.php in EEBCMS 0.95 allows remote attackers to...CVE-2008-61904.3 MediumFebruary 19, 2009
raidenftpdStack-based buffer overflow in RaidenFTPD 2.4 build 3620 allows remote authenticated users to...CVE-2008-6186Public exploit9.0 HighFebruary 19, 2009
noticeware email server ngNoticeWare Email Server NG 5.1.2.2 allows remote attackers to cause a denial of service (crash)...CVE-2008-6185Public exploit5.0 MediumFebruary 19, 2009
medialab-karlsruhe ownbiblioSQL injection vulnerability in the OwnBiblio (com_ownbiblio) component 1.5.3 for Joomla! allows...CVE-2008-6184Public exploit7.5 HighFebruary 19, 2009
myphpindexer my php indexerMultiple directory traversal vulnerabilities in index.php in My PHP Indexer 1.0 allow remote...CVE-2008-6183Public exploit7.8 HighFebruary 19, 2009
joomla ignitegallerySQL injection vulnerability in the Ignite Gallery (com_ignitegallery) component 0.8.0 through 0.8...CVE-2008-6182Public exploit7.5 HighFebruary 19, 2009
mad4media com mad4joomlaSQL injection vulnerability in the Mad4Joomla Mailforms (com_mad4joomla) component before 1.1.8.2...CVE-2008-6181Public exploit7.5 HighFebruary 19, 2009
newlife blogger bloggerSQL injection vulnerability in system/nlb_user.class.php in NewLife Blogger 3.0 and earlier, and...CVE-2008-6180Public exploit7.5 HighFebruary 19, 2009
indexscriptSQL injection vulnerability in sug_cat.php in IndexScript 3.0 allows remote attackers to execute...CVE-2008-6179Public exploit7.5 HighFebruary 19, 2009
falt4 extremeMultiple cross-site request forgery (CSRF) vulnerabilities in the manage_users handler in admin...CVE-2009-06486.8 MediumFebruary 19, 2009
microsoft windows live messengermsnmsgr.exe in Windows Live Messenger (WLM) 2009 build 14.0.8064.206, and other 14.0.8064.x...CVE-2009-0647EPSS 17.4%5.0 MediumFebruary 19, 2009
fckeditor, phplist +1 moreUnrestricted file upload vulnerability in editor/filemanager/browser/default/connectors/php...CVE-2008-6178Public exploit7.5 HighFebruary 19, 2009
publicwarehouse lightblogMultiple directory traversal vulnerabilities in LightBlog 9.8, when magic_quotes_gpc is disabled,...CVE-2008-6177Public exploit6.8 MediumFebruary 19, 2009
k2sxs silvershieldSilverSHielD 1.0.2.34 allows remote attackers to cause a denial of service (application crash)...CVE-2008-6175Public exploit5.0 MediumFebruary 19, 2009
jetbox cmsCross-site scripting (XSS) vulnerability in admin/postlister/index.php in Jetbox CMS 2.1 allows...CVE-2008-6174Public exploit4.3 MediumFebruary 19, 2009
clip-share clipshareCross-site scripting (XSS) vulnerability in fullscreen.php in ClipShare Pro 4.0 allows remote...CVE-2008-6173Public exploit4.3 MediumFebruary 19, 2009
weberr rwcardsDirectory traversal vulnerability in captcha/captcha_image.php in the RWCards (com_rwcards) 3.0...CVE-2008-6172Public exploitEPSS 12.3%6.8 MediumFebruary 19, 2009
d.j.bernstein djbdnsdnscache in Daniel J. Bernstein djbdns 1.05 does not prevent simultaneous identical outbound DNS...CVE-2008-4392Fix available6.4 MediumFebruary 19, 2009
drupalincludes/bootstrap.inc in Drupal 5.x before 5.12 and 6.x before 6.6, when the server is...CVE-2008-61719.3 HighFebruary 19, 2009
drupalCross-site scripting (XSS) vulnerability in Drupal 5.x before 5.12 and 6.x before 6.6 allows...CVE-2008-61703.5 LowFebruary 19, 2009
drupal localization client, localization server +1 moreCross-site request forgery (CSRF) vulnerability in the Localization client 5.x before 5.x-1.1 and...CVE-2008-61696.8 MediumFebruary 19, 2009
miniportailCross-site scripting (XSS) vulnerability in search.php in miniPortail 2.2 and earlier allows...CVE-2008-6168Public exploit4.3 MediumFebruary 19, 2009
miniportailDirectory traversal vulnerability in search.php in miniPortail 2.2 and earlier allows remote...CVE-2008-6167Public exploit7.5 HighFebruary 19, 2009
jmds com kbaseSQL injection vulnerability in the KBase (com_kbase) 1.2 component for Joomla! allows remote...CVE-2008-6166Public exploit7.5 HighFebruary 19, 2009
easy-script cspartnerSQL injection vulnerability in gestion.php in CSPartner 0.1, when magic_quotes_gpc is disabled,...CVE-2008-6165Public exploit6.8 MediumFebruary 19, 2009
4site cmsMultiple SQL injection vulnerabilities in 4Site CMS 2.6 and earlier allow remote attackers to...CVE-2009-0646Public exploit7.5 HighFebruary 18, 2009
jawsDirectory traversal vulnerability in index.php in Jaws 0.8.8 allows remote authenticated users to...CVE-2009-0645Public exploit6.5 MediumFebruary 18, 2009
acid analysis console for intrusion databases, secureideas basic analysis and security engine +1 moreMultiple cross-site scripting (XSS) vulnerabilities in (1) acid_qry_main.php in Analysis Console...CVE-2005-48784.3 MediumFebruary 18, 2009
swannsecurity dvr4-securanetThe HTTP interface in Swann DVR4-SecuraNet has a certain default administrative username and...CVE-2009-06445.0 MediumFebruary 18, 2009
dminnich simple php newsStatic code injection vulnerability in post.php in Simple PHP News 1.0 final allows remote...CVE-2009-0643Public exploit5.1 MediumFebruary 18, 2009
ruby-lang rubyext/openssl/ossl_ocsp.c in Ruby 1.8 and 1.9 does not properly check the return value from the...CVE-2009-06426.8 MediumFebruary 18, 2009
freebsdsys_term.c in telnetd in FreeBSD 7.0-RELEASE and other 7.x versions deletes dangerous environment...CVE-2009-0641Public exploit9.3 HighFebruary 18, 2009
swannsecurity dvr4-securanetDirectory traversal vulnerability in the administrative web server in Swann DVR4-SecuraNet allows...CVE-2009-0640Public exploit5.0 MediumFebruary 18, 2009
dreamcost hostadminCross-site scripting (XSS) vulnerability in index.php in DreamCost HostAdmin 3.1.1 allows remote...CVE-2008-6164Public exploit4.3 MediumFebruary 18, 2009
openxSQL injection vulnerability in www/delivery/ac.php in OpenX 2.6.1 allows remote attackers to...CVE-2008-6163Public exploit7.5 HighFebruary 18, 2009
bux bux.to clone scriptBux.to Clone script allows remote attackers to bypass authentication and gain administrative...CVE-2008-6162Public exploit7.5 HighFebruary 18, 2009
phpyabsPHP remote file inclusion vulnerability in moduli/libri/index.php in phpyabs 0.1.2 allows remote...CVE-2009-0639Public exploit7.5 HighFebruary 18, 2009
opensuseBuffer overflow in SUSE blinux (aka sbl) in SUSE openSUSE 10.3 through 11.0 has unknown impact...CVE-2009-03107.2 HighFebruary 18, 2009
sourceforge wow raid managerCross-site scripting (XSS) vulnerability in WOW Raid Manager (WRM) before 3.5.1 allows remote...CVE-2008-61614.3 MediumFebruary 18, 2009
drupal semantically interconnected online communitiesSemantically-Interconnected Online Communities (SIOC) 5.x before 5.x-1.2 and 6.x before 6.x-1.1,...CVE-2008-61605.0 MediumFebruary 18, 2009
hans oesterholt cmmeContent Management Made Easy (CMME) 1.19 allows remote attackers to obtain system information via...CVE-2008-61595.0 MediumFebruary 18, 2009
trendmicro interscan web security suiteTrend Micro InterScan Web Security Suite (IWSS) 3.1 before build 1237 allows remote authenticated...CVE-2009-06136.0 MediumFebruary 17, 2009
trendmicro interscan web security suite, interscan web security virtual appliance +1 moreTrend Micro InterScan Web Security Virtual Appliance (IWSVA) 3.x and InterScan Web Security Suite...CVE-2009-06124.3 MediumFebruary 17, 2009
novell open enterprise serverMultiple cross-site scripting (XSS) vulnerabilities in qfsearch/AdminServlet in QuickFinder...CVE-2009-0611Public exploit4.3 MediumFebruary 17, 2009
dminnich simple php newsMultiple static code injection vulnerabilities in post.php in Simple PHP News 1.0 final allow...CVE-2009-0610Public exploit7.5 HighFebruary 17, 2009
sun java system directory serverSun Java System Directory Proxy Server in Sun Java System Directory Server Enterprise Edition 6.0...CVE-2009-06097.8 HighFebruary 17, 2009
android sdkInteger overflow in the showLog function in fake_log_device.c in liblog in Open Handset Alliance...CVE-2009-06087.2 HighFebruary 17, 2009
openhandsetalliance android sdkMultiple integer overflows in malloc_leak.c in Bionic in Open Handset Alliance Android 1.0 have...CVE-2009-06077.2 HighFebruary 17, 2009
openhandsetalliance android sdkThe link_image function in linker/linker.c in the dynamic linker in Bionic in Open Handset...CVE-2009-06067.2 HighFebruary 17, 2009
linux kernelStack consumption vulnerability in the do_page_fault function in arch/x86/mm/fault.c in the Linux...CVE-2009-06054.9 MediumFebruary 17, 2009
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open