CVEs published in March 2009
552 vulnerabilities, 91 critical, 2 exploited.
- imera teamlinksInsecure method vulnerability in the ImeraIEPlugin ActiveX control (ImeraIEPlugin.dll 1.0.2.54)...9.3 High
- mozilla firefox, seamonkey, thunderbird +2 moreMozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 decode...5.8 Medium
- mozilla firefox, seamonkey, thunderbird +2 morensIRDFService in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before...7.1 High
- mozilla firefox, seamonkey, thunderbird +2 moreDouble free vulnerability in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and...10.0 High
- mozilla firefox, seamonkey, thunderbird +2 moreThe layout engine in Mozilla Firefox 2 and 3 before 3.0.7, Thunderbird before 2.0.0.21, and...9.3 High
- mozilla firefox, seamonkey, thunderbird +2 moreThe JavaScript engine in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey...10.0 High
- mozilla firefox, seamonkey, thunderbird +2 moreThe layout engine in Mozilla Firefox 2 and 3 before 3.0.7, Thunderbird before 2.0.0.21, and...9.3 High
- mozilla firefox, seamonkey, thunderbird +2 moreThe layout engine in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1...10.0 High
- cisco session border controllerUnspecified vulnerability in the Session Border Controller (SBC) before 3.0(2) for Cisco 7600...7.8 High
- ubuntu linuxGNOME NetworkManager before 0.7.0.99 does not properly verify privileges for dbus (1) modify and ...6.2 Medium
- wesnothThe Python AI module in Wesnoth 1.4.x and 1.5 before 1.5.11 allows remote attackers to escape the...9.3 High
- ubuntu linuxnm-applet.conf in GNOME NetworkManager before 0.7.0.99 contains an incorrect deny setting, which...4.6 Medium
- mega-nerd libsndfile, nullsoft winamp +1 moreInteger overflow in libsndfile 1.0.18, as used in Winamp and other products, allows context...9.3 High
- bpsoft hex workshopStack-based buffer overflow in BreakPoint Software Hex Workshop 4.23, 6.0.1.4603, and other 6.x...9.3 High
- sopcast sopcore activex controlInsecure method vulnerability in the SopCast SopCore ActiveX control in sopocx.ocx 3.0.3.501...9.3 High
- xatrix xguestbookSQL injection vulnerability in login.php in xGuestbook 2.0 allows remote attackers to execute...7.5 High
- 3ds enovia smarteam, ibm catia +1 moreThe Web Editor in Dassault Systemes ENOVIA SmarTeam V5 before Release 18 Service Pack 8, and...3.5 Low
- simple cmms simplecmmsMultiple SQL injection vulnerabilities in SimpleCMMS before 0.1.0 allow remote attackers to...7.5 High
- zfeederzFeeder 1.6 allows remote attackers to gain administrative access via a direct request to admin.php.7.5 High
- opengooUnspecified vulnerability in OpenGoo before 1.2.1 allows remote authenticated users to modify...6.5 Medium
- mihai bazon picalCross-site scripting (XSS) vulnerability in piCal 0.91h and earlier, a module for XOOPS, allows...4.3 Medium
- eric raymond sngsng_regress in SNG 1.0.2 allows local users to overwrite arbitrary files via a symlink attack on...6.9 Medium
- alcovebook sgml2xrlatex in AlcoveBook sgml2x 1.0.0 allows local users to overwrite arbitrary files via a symlink...4.4 Medium
- celerondude uploaderCross-site scripting (XSS) vulnerability in account.php in Celerondude Uploader 6.1 allows remote...4.3 Medium
- 3com wireless 8760 dual-radioThe web management interface in 3Com Wireless 8760 Dual Radio 11a/b/g PoE Access Point allows...7.8 High
- cs-cartSQL injection vulnerability in core/user.php in CS-Cart 1.3.5 and earlier allows remote attackers...7.5 High
- ziproxyZiproxy 2.6.0, when transparent interception mode is enabled, uses the HTTP Host header to...5.4 Medium
- smoothwall networkguardian, schoolguardian, smoothguardian +2 moreSmoothWall SmoothGuardian, as used in SmoothWall Firewall, NetworkGuardian, and SchoolGuardian...5.4 Medium
- qbik wingateQbik WinGate, when transparent interception mode is enabled, uses the HTTP Host header to...5.4 Medium
- squid web proxy cacheSquid, when transparent interception mode is enabled, uses the HTTP Host header to determine the...5.4 Medium
- openbsdThe aspath_prepend function in rde_attr.c in bgpd in OpenBSD 4.3 and 4.4 allows remote attackers...5.0 Medium
- ibm aixBuffer overflow in pppdial in IBM AIX 5.3 and 6.1 allows local users to gain privileges via a...7.2 High
- qipQIP 2005 build 8082 allows remote attackers to cause a denial of service (CPU consumption and...4.3 Medium
- yapbbSQL injection vulnerability in forumhop.php in YapBB 1.2 and earlier allows remote attackers to...7.5 High
- bookelves kipperKipper 2.01 stores sensitive information under the web root with insufficient access control,...5.0 Medium
- bookelves kipperDirectory traversal vulnerability in default.php in Kipper 2.01 allows remote attackers to...7.5 High
- bookelves kipperDirectory traversal vulnerability in index.php in Kipper 2.01 allows remote attackers to include...7.5 High
- bookelves kipperMultiple cross-site scripting (XSS) vulnerabilities in Kipper 2.01 allow remote attackers to...4.3 Medium
- bookelves kipperCross-site scripting (XSS) vulnerability in default.php in Kipper 2.01 allows remote attackers to...4.3 Medium
- scriptsez ez php commentCross-site scripting (XSS) vulnerability in ScriptsEz Ez PHP Comment allows remote attackers to...4.3 Medium
- team5.team board 1.0, 1.0.1, 1.0.2 +3 more +5 moreCross-site scripting (XSS) vulnerability in online.asp in Team Board 1.x allows remote attackers...4.3 Medium
- team5 team boardTeam Board 1.x and 2.x stores sensitive information under the web root with insufficient access...5.0 Medium
- zncMultiple CRLF injection vulnerabilities in webadmin in ZNC before 0.066 allow remote...6.5 Medium
- avahi avahi-daemonThe originates_from_local_legacy_unicast_socket function in avahi-core/server.c in avahi-daemon 0...7.8 High
- mpfr gnu mpfrMultiple buffer overflows in GNU MPFR 2.4.0 allow context-dependent attackers to cause a denial...7.5 High
- popplerThe JBIG2Stream::readSymbolDictSeg function in Poppler before 0.10.4 allows remote attackers to...5.0 Medium
- popplerThe FormWidgetChoice::loadDefaults function in Poppler before 0.10.4 allows remote attackers to...5.0 Medium
- phpPHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify...2.1 Low
- mldonkeyAbsolute path traversal vulnerability in MLDonkey 2.8.4 through 2.9.7 allows remote attackers to...5.0 Medium
- psi-im psiPSI Jabber client before 0.12.1 allows remote attackers to cause a denial of service (crash) and...10.0 High
- Show moreLoading…