CVEs published in March 2009
552 vulnerabilities, 91 critical, 2 exploited.
- abledating SQL injection vulnerability in search_results.php in ABK-Soft AbleDating 2.4 allows remote... 6.8 Medium
- ibm tivoli storage manager Unspecified vulnerability in the server in IBM Tivoli Storage Manager (TSM) 5.3.x before 5.3.2... 10.0 High
- osgeo mapserver Multiple stack-based buffer overflows in maptemplate.c in mapserv in MapServer 4.x before 4.10.4... 10.0 High
- osgeo mapserver mapserv.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 does not ensure that the... 10.0 High
- osgeo mapserver The msLoadQuery function in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 allows... 7.8 High
- osgeo mapserver mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 allows remote attackers to read... 4.3 Medium
- osgeo mapserver Directory traversal vulnerability in mapserv.c in mapserv in MapServer 4.x before 4.10.4 and 5.x... 10.0 High
- osgeo mapserver Heap-based buffer underflow in the readPostBody function in cgiutil.c in mapserv in MapServer 4.x... 10.0 High
- osgeo mapserver Stack-based buffer overflow in mapserv.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before... 10.0 High
- ibm tivoli storage manager The server in IBM Tivoli Storage Manager (TSM) 4.2.x on MVS, 5.1.9.x before 5.1.9.1, 5.1.x before... 4.3 Medium
- ibm tivoli storage manager The server in IBM Tivoli Storage Manager (TSM) 5.1.x, 5.2.x before 5.2.1.2, and 6.x before 6.1... 3.5 Low
- linpha Multiple cross-site scripting (XSS) vulnerabilities in LinPHA before 1.3.4 might allow remote... 4.3 Medium
- cybozu garoon Cross-site scripting (XSS) vulnerability in the RSS reader in Cybozu Garoon 2.0.0 through 2.1.3... 4.3 Medium
- cybozu garoon Session fixation vulnerability in Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to... 6.8 Medium
- yehe Unrestricted file upload vulnerability in Yehe 2.0 allows remote attackers to execute arbitrary... 6.8 Medium
- gallarific Multiple cross-site scripting (XSS) vulnerabilities in Gallarific Free Edition allow remote... 4.3 Medium
- octopussy Unspecified vulnerability in Octopussy before 0.9.5.8 has unknown impact and attack vectors... 10.0 High
- invision power services power board Cross-site scripting (XSS) vulnerability in Invision Power Board 2.3.1 and earlier allows remote... 4.3 Medium
- nortel communication server 1000, unistim protocol +1 more Nortel UNIStim protocol, as used in Communication Server 1000 and other products, uses... 7.6 High
- ceruleanstudios trillian Buffer overflow in the XML parser in Trillian 3.1.9.0, and possibly earlier, allows remote... 9.3 High
- jax scripts linklists Cross-site scripting (XSS) vulnerability in jax_linklists.php in Jack (tR) Jax LinkLists 1.00... 4.3 Medium
- citrix presentation server client Citrix Presentation Server Client for Windows before 10.200 does not clear "credential... 1.9 Low
- vidalia-project vidalia bundle Vidalia bundle before 0.1.2.18, when running on Windows, installs Privoxy with a configuration... 5.0 Medium
- anonymityanywhere tork TorK before 0.22, when running on Windows and Mac OS X, installs Privoxy with a configuration... 4.3 Medium
- vidalia-project vidalia bundle Vidalia bundle before 0.1.2.18, when running on Windows and Mac OS X, installs Privoxy with a... 5.0 Medium
- ixprim-cms ixprim PHP remote file inclusion vulnerability in mod/nc_phpmyadmin/core/libraries/Theme_Manager.class... 7.5 High
- jax scripts guestbook Jax Guestbook 3.1 and 3.31 stores sensitive information under the web root with insufficient... 5.0 Medium
- jax scripts guestbook Multiple cross-site scripting (XSS) vulnerabilities in jax_guestbook.php in Jax Guestbook 3.1 and... 4.3 Medium
- banshee-project banshee Cross-site scripting (XSS) vulnerability in apps/web/vs_diag.cgi in the DAAP extension in Banshee... 4.3 Medium
- ibm websphere application server The Web Services Security component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2... 10.0 High
- ibm websphere application server IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.3 uses weak permissions (777) for files... 2.1 Low
- ibm websphere application server The JAX-RPC WS-Security runtime in the Web Services Security component in IBM WebSphere... 10.0 High
- ibm websphere application server The administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.23 and 7.0... 5.5 Medium
- redhat cman Buffer overflow in CMAN - The Cluster Manager before 2.03.09-1 on Fedora 9 and Red Hat Enterprise... 7.8 High
- moodle The TeX filter in Moodle 1.6 before 1.6.9+, 1.7 before 1.7.7+, 1.8 before 1.8.9, and 1.9 before 1... 4.3 Medium
- sco reliantha, unixware +1 more Merge mcd in ReliantHA 1.1.4 in SCO UnixWare 7.1.4 allows local users to gain root privileges via... 7.2 High
- sco unixware, unixware reliantha +1 more Untrusted search path vulnerability in (1) hvdisp and (2) rcvm in ReliantHA 1.1.4 in SCO UnixWare... 7.2 High
- puppetmaster webutil cgi-bin/webutil.pl in The Puppet Master WebUtil 2.7 allows remote attackers to execute arbitrary... 10.0 High
- puppet master webutil cgi-bin/webutil.pl in The Puppet Master WebUtil 2.3 allows remote attackers to execute arbitrary... 10.0 High
- puppetmaster webutil cgi-bin/webutil.pl in The Puppet Master WebUtil allows remote attackers to execute arbitrary... 10.0 High
- aztech adsl2\/2\+4-port router cgi-bin/script in Aztech ADSL2/2+ 4-port router 3.7.0 build 070426 allows remote attackers to... 10.0 High
- sun opensolaris Unspecified vulnerability in Sun OpenSolaris snv_100 through snv_101 allows local users, with... 6.9 Medium
- christophe.varoqui multipath-tools, debian linux, fedoraproject fedora +8 more +10 more The Device Mapper multipathing driver (aka multipath-tools or device-mapper-multipath) 0.4.8, as... 7.8 High
- impliedbydesign micro-cms microcms-admin-home.php in Implied by Design Micro CMS (Micro-CMS) 3.5 (aka 0.3.5) does not... 7.5 High
- fedoraproject fedora, redhat cluster project, cman +2 more +4 more Red Hat Cluster Project 2.x allows local users to modify or overwrite arbitrary files via symlink... 6.9 Medium
- e-vision cms Multiple directory traversal vulnerabilities in e-Vision CMS 2.0.2 and earlier, when... 5.1 Medium
- davidbourrier glossaire Cross-site scripting (XSS) vulnerability in glossaire.php in Glossaire 2.0 allows remote... 4.3 Medium
- moinmo moinmoin MoinMoin Denial of Service vulnerability via password_checker function 5.0 Medium
- moinmo moinmoin MoinMoin improper access control on the included page for the rst parser 5.0 Medium
- formencode FormEncode Access Restrictions Bypass 7.5 High
- Show olderLoading…