CVEs published in February 2009
686 vulnerabilities, 76 critical, 1 exploited.
- xt-commerceSQL injection vulnerability in xt:Commerce before 3.0.4 Sp2.1, when magic_quotes_gpc is enabled...6.8 Medium
- toursmanager tours managerSQL injection vulnerability in tourview.php in ToursManager allows remote attackers to execute...7.5 High
- turnkeyforms local classifiedsTurnkeyForms Local Classifieds allows remote attackers to bypass authentication and gain...7.5 High
- apache tomcatApache Tomcat information disclosure vulnerability2.6 Low
- cisco ace 4710, application control engine module +1 moreThe username command in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches...7.8 High
- cisco ace 4710, application control engine module +1 moreUnspecified vulnerability in Cisco ACE Application Control Engine Module for Catalyst 6500...7.8 High
- cisco ace 4710, application control engine module +1 moreUnspecified vulnerability in the SNMPv2c implementation in Cisco ACE Application Control Engine...6.8 Medium
- cisco ace 4710, application control engine module +1 moreUnspecified vulnerability in Cisco ACE Application Control Engine Module for Catalyst 6500...7.8 High
- cisco ace 4710, application control engine module +1 moreUnspecified vulnerability in Cisco ACE Application Control Engine Module for Catalyst 6500...9.0 High
- cisco ace 4710Cisco ACE 4710 Application Control Engine Appliance before A1(8a) uses default (1) usernames and ...10.0 High
- cisco application control engine moduleCisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers before A2...10.0 High
- cisco application networking managerUnspecified vulnerability in the Java agent in Cisco Application Networking Manager (ANM) before...8.5 High
- cisco application networking managerCisco Application Networking Manager (ANM) before 2.0 uses a default MySQL root password, which...10.0 High
- cisco application networking managerCisco Application Networking Manager (ANM) before 2.0 uses default usernames and passwords, which...10.0 High
- cisco application networking manager, application control engine device manager +1 moreDirectory traversal vulnerability in Cisco Application Networking Manager (ANM) before 2.0 and...9.0 High
- cisco unified meetingplace web conferencingUnspecified vulnerability in the Web Server in Cisco Unified MeetingPlace Web Conferencing 6.0...9.0 High
- adobe robohelp, robohelp server +1 moreCross-site scripting (XSS) vulnerability in Adobe RoboHelp 6 and 7, and RoboHelp Server 6 and 7,...4.3 Medium
- adobe robohelp, robohelp server +1 moreCross-site scripting (XSS) vulnerability in Adobe RoboHelp Server 6 and 7 allows remote attackers...4.3 Medium
- adobe flash player, air, flash player for linux +1 more +3 moreAdobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 on Windows allows remote...4.3 Medium
- adobe flash player for linuxUntrusted search path vulnerability in Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10...4.6 Medium
- adobe flash player, air, flash player for linux +1 more +3 moreAdobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 does not properly remove...9.3 High
- adobe flash player, air, flash player for linux +1 more +3 moreUnspecified vulnerability in Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87...9.3 High
- ibm websphere process serverIBM WebSphere Process Server (WPS) 6.1.2 before 6.1.2.3 and 6.2 before 6.2.0.1 does not properly...4.0 Medium
- orbitdownloader orbit downloaderStack-based buffer overflow in Orbit Downloader 2.8.2 and 2.8.3, and possibly other versions...9.3 High
- adobe flash player, air, flash player for linux +1 more +3 moreUnspecified vulnerability in the Settings Manager in Adobe Flash Player 9.x before 9.0.159.0 and...5.8 Medium
- prezmo small shoutboxSQL injection vulnerability in shoutbox_view.php in the Small ShoutBox module 1.4 for phpBB...7.5 High
- gwm galatolo webmanagerGalatolo WebManager 1.3a allows remote attackers to bypass authentication and gain administrative...7.5 High
- joomlaMultiple cross-site scripting (XSS) vulnerabilities in Joomla! 1.5.7 and earlier allow remote...3.5 Low
- rocketeer.dip sisapilocationUnspecified vulnerability in sISAPILocation before 1.0.2.2 allows remote attackers to bypass...5.0 Medium
- dhcartCross-site scripting (XSS) vulnerability in order.php in DHCart allows remote attackers to inject...4.3 Medium
- maran php shopadmin.php in Maran PHP Shop allows remote attackers to bypass authentication and gain...7.5 High
- camera life lifeMultiple cross-site scripting (XSS) vulnerabilities in Camera Life 2.6.2b8 allow remote attackers...4.3 Medium
- accscripts acc statisticsadmin/Index.php in Acc Statistics 1.1 allows remote attackers to bypass authentication and gain...7.5 High
- accscripts acc real estateadmin/Index.php in Acc Real Estate 4.0 allows remote attackers to bypass authentication and gain...7.5 High
- accscripts acc autosAcc Autos 4.0 allows remote attackers to bypass authentication and gain administrative access by...7.5 High
- accscripts acc php emailAcc PHP eMail 1.1 allows remote attackers to bypass authentication and gain administrative access...7.5 High
- niclor include sitoDirectory traversal vulnerability in includefile.php in nicLOR Sito, when register_globals is...6.8 Medium
- toursmanager tours managerSQL injection vulnerability in cityview.php in Tours Manager 1.0 allows remote attackers to...7.5 High
- dmitry baryshev ksquirrel-libsMultiple stack-based buffer overflows in the mt_codec::getHdrHead function in kernel/kls_hdr...6.8 Medium
- interface-medien ibaseDirectory traversal vulnerability in download.php in Interface Medien ibase 2.03 and earlier...7.8 High
- getmiro broadcast machineMultiple PHP remote file inclusion vulnerabilities in Broadcast Machine 0.1 allow remote...7.5 High
- activewebsoftwares active newsletterMultiple SQL injection vulnerabilities in SubscriberStart.asp in Active Newsletter 4.3 allow...7.5 High
- businessvein php tv portalSQL injection vulnerability in index.php in PHP TV Portal 2.0 and earlier allows remote attackers...7.5 High
- 1scripts z1exchangeSQL injection vulnerability in edit.php in Z1Exchange 1.0 allows remote attackers to execute...7.5 High
- subtextproject subtextCross-site scripting (XSS) vulnerability in Subtext 2.0 allows remote attackers to inject...4.3 Medium
- ortus.nirn cms ortusSQL injection vulnerability in engine/users/users_edit_pub.inc in CMS Ortus 1.13 and earlier...6.5 Medium
- bluocms bluo cmsSQL injection vulnerability in index.php in Bluo CMS 1.2 allows remote attackers to execute...7.5 High
- cisco wrt160nCross-site scripting (XSS) vulnerability in apply.cgi on the Linksys WRT160N allows remote...4.3 Medium
- rakhisoftware shopping cartRakhiSoftware Price Comparison Script (aka Shopping Cart) allows remote attackers to obtain...7.8 High
- rakhisoftware shopping cartMultiple cross-site scripting (XSS) vulnerabilities in product.php in RakhiSoftware Price...4.3 Medium
- Show moreLoading…