CVEs published in February 2009
686 vulnerabilities, 76 critical, 1 exploited.
- preproject pre multi-vendor shopping mallsPre Multi-Vendor Shopping Malls allows remote attackers to bypass authentication and gain...7.5 High
- preproject pre multi-vendor shopping mallsSQL injection vulnerability in buyer_detail.php in Pre Multi-Vendor Shopping Malls allows remote...7.5 High
- preproject php auto listings scriptSQL injection vulnerability in moreinfo.php in Pre Projects PHP Auto Listings Script, when...6.8 Medium
- mole-group airline ticket sale script** DISPUTED ** SQL injection vulnerability in info.php in Mole Group Airline Ticket Sale Script...7.5 High
- samelinux way of the warriorDirectory traversal vulnerability in visualizza.php in Way Of The Warrior (WOTW) 5.0 and earlier...7.5 High
- wotw way of the warriorPHP remote file inclusion vulnerability in visualizza.php in Way Of The Warrior (WOTW) 5.0 and...7.5 High
- joomlashowroom pro desk support centerDirectory traversal vulnerability in the Pro Desk Support Center (com_pro_desk) component 1.0 and...5.0 Medium
- dadamailproject dada mail managerPHP remote file inclusion vulnerability in config.dadamail.php in the Dada Mail Manager ...7.5 High
- cafuego simple document management systemSQL injection vulnerability in login.php in Simple Document Management System (SDMS) 1.1.5 and 1...7.5 High
- tptestStack-based buffer overflow in the GetStatsFromLine function in TPTEST 3.1.7 allows remote...5.0 Medium
- adobe acrobat, acrobat reader +1 moreBuffer overflow in Adobe Reader 9.0 and earlier, and Acrobat 9.0 and earlier, allows remote...7.8 High
- toshiba face recognitionToshiba Face Recognition 2.0.2.32 allows physically proximate attackers to obtain notebook access...6.9 Medium
- asus smartlogonAsus SmartLogon 1.0.0005 allows physically proximate attackers to bypass "security functions" by...6.9 Medium
- lenovo verifaceLenovo Veriface III allows physically proximate attackers to login to a Windows account by...6.9 Medium
- torTor 0.2.0.28, and probably 0.2.0.34 and earlier, allows remote attackers, with control of an...5.1 Medium
- opensslOpenSSL, probably 0.9.6, does not verify the Basic Constraints for an intermediate CA-signed...7.5 High
- mozilla firefox, seamonkey, thunderbird +2 moreThe Internationalized Domain Names (IDN) blacklist in Mozilla Firefox 3.0.6 and other versions...5.8 Medium
- apple cupsInteger overflow in the WriteProlog function in texttops in CUPS 1.1.17 on Red Hat Enterprise...6.8 Medium
- symantec veritas netbackup server \/enterprise serverUnspecified vulnerability in the Veritas network daemon (aka vnetd) in Symantec Veritas NetBackup...6.5 Medium
- tptestStack-based buffer overflow in the GetStatsFromLine function in TPTEST 3.1.7 and earlier, and...10.0 High
- nokia n95, symbian s60 browser +1 moreThe web browser in Symbian OS on the Nokia N95 cell phone allows remote attackers to cause a...7.8 High
- emc networker server, networker client, networker module +2 more +4 morensrexecd.exe in multiple EMC Networker products including EMC NetWorker Server, Storage Node, and...7.8 High
- libpngMemory leak in the png_handle_tEXt function in pngrutil.c in libpng before 1.2.33 rc02 and 1.4.0...7.1 High
- extrakt frameworkCross-site scripting (XSS) vulnerability in index.php in Extrakt Framework 0.7 allows remote...4.3 Medium
- bookingcentre booking system for hotels groupSQL injection vulnerability in cadena_ofertas_ext.php in Venalsur Booking Centre Booking System...7.5 High
- bookingcentre booking system for hotels groupCross-site scripting (XSS) vulnerability in cadena_ofertas_ext.php in Venalsur Booking Centre...4.3 Medium
- harlandscripts pro traffic oneSQL injection vulnerability in poll_results.php in Harlandscripts Pro Traffic One allows remote...7.5 High
- harlandscripts pro traffic oneSQL injection vulnerability in mypage.php in Harlandscripts Pro Traffic One allows remote...7.5 High
- php-statsCross-site scripting (XSS) vulnerability in admin.php in Php-Stats 0.1.9.1 allows remote...4.3 Medium
- mcgallerypro mcgalleryMultiple cross-site scripting (XSS) vulnerabilities in PhpForums.net mcGallery 1.1 allow remote...4.3 Medium
- dream4 koobiSQL injection vulnerability in index.php in dream4 Koobi 4.4 and 5.4 allows remote attackers to...7.5 High
- vastal software zoneSQL injection vulnerability in view_product.php in Vastal I-Tech Software Zone allows remote...7.5 High
- e107Cross-site scripting (XSS) vulnerability in submitnews.php in e107 CMS 0.7.11 allows remote...4.3 Medium
- phpg upload uploadUnrestricted file upload vulnerability in form_upload.php in PHPG Upload 1.0 allows remote...8.5 High
- robotstatsMultiple PHP remote file inclusion vulnerabilities in RobotStats 0.1 allow remote attackers to...7.5 High
- xaaaaav38 urlstreetCross-site scripting (XSS) vulnerability in seeurl.php in Xavier Flahaut URLStreet 1.0 allows...4.3 Medium
- supernet shopMultiple SQL injection vulnerabilities in SuperNET Shop 1.0 and earlier allow remote attackers to...7.5 High
- jakob-persson cobaltSQL injection vulnerability in adminler.asp in CoBaLT 2.0 allows remote attackers to execute...7.5 High
- jakob-persson cobaltSQL injection vulnerability in CoBaLT 1.0 allows remote attackers to execute arbitrary SQL...7.5 High
- kwsphpDirectory traversal vulnerability in help.php in the eskuel module in KwsPHP 1.3.456, as...6.8 Medium
- wiki swikiMultiple cross-site scripting (XSS) vulnerabilities in Swiki 1.5 allow remote attackers to inject...4.3 Medium
- 2532gigs2532designs 2532|Gigs 1.2.2 and earlier allows remote attackers to trigger a backup and obtain...4.0 Medium
- mybboard custom pages pluginSQL injection vulnerability in pages.php in Custom Pages 1.0 plugin for MyBulletinBoard (MyBB)...7.5 High
- kwsphp galerie moduleSQL injection vulnerability in index.php in the galerie module for KwsPHP 1.3.456 allows remote...7.5 High
- philippe crochat easysiteMultiple PHP remote file inclusion vulnerabilities in Philippe CROCHAT EasySite 2.0 allow remote...7.5 High
- landesk management suiteDirectory traversal vulnerability in the PXE TFTP Service (PXEMTFTP.exe) in LANDesk Management...7.8 High
- microsoft windowsMemory leak in the DNS server in Microsoft Windows allows remote attackers to cause a denial of...7.8 High
- myblogSam Crew MyBlog stores passwords in cleartext in a MySQL database, which allows context-dependent...5.0 Medium
- sun java system portal serverMultiple cross-site scripting (XSS) vulnerabilities in unspecified Portlets in Sun Java System...4.3 Medium
- intrinsic swimage encoreConductor.exe in Intrinsic Swimage Encore before 5.0.1.21 contains a hardcoded password, which...2.1 Low
- Show moreLoading…