CVEs published in March 2009
552 vulnerabilities, 91 critical, 2 exploited.
- sun opensolaris, solaris +1 moreThe NFSv4 Server module in the kernel in Sun Solaris 10, and OpenSolaris before snv_111, allow...4.7 Medium
- ibm tivoli storage manager hsmBuffer overflow in the client in IBM Tivoli Storage Manager (TSM) HSM 5.3.2.0 through 5.3.5.0, 5...10.0 High
- foxit reader3.0Stack-based buffer overflow in Foxit Reader 3.0 before Build 1506, including 1120 and 1301,...10.0 High
- foxitsoftware readerFoxit Reader 2.3 before Build 3902 and 3.0 before Build 1506, including 1120 and 1301, does not...10.0 High
- foxitsoftware foxit readerFoxit Reader 2.3 before Build 3902 and 3.0 before Build 1506, including 3.0.2009.1301, does not...9.3 High
- microsoft windows 2000, windows server 2003, windows server 2008 +2 more +4 moreThe Secure Channel (aka SChannel) authentication component in Microsoft Windows 2000 SP4, XP SP2...7.1 High
- microsoft windows 2000, windows server 2003, windows server 2008 +2 more +4 moreThe kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 does not properly...7.2 High
- microsoft windows 2000, windows server 2003, windows server 2008 +2 more +4 moreThe kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and...7.2 High
- microsoft windows 2000, windows server 2003, windows server 2008 +2 more +4 moreThe graphics device interface (GDI) implementation in the kernel in Microsoft Windows 2000 SP4,...9.3 High
- fujitsu jasmine2000CRLF injection vulnerability in the WebLink template in Fujitsu Jasmine2000 Enterprise Edition...6.8 Medium
- fujitsu enhanced support facilityThe HRM-S service in Fujitsu Enhanced Support Facility 3.0 and 3.0.1 allows remote attackers to...5.0 Medium
- phnewspHNews Alpha 1 stores sensitive information under the web root with insufficient access control,...5.0 Medium
- geovision livex activex controlDirectory traversal vulnerability in the SnapShotToFile method in the GeoVision LiveX (aka...8.8 High
- matteoiammarrone s-cmsS-Cms 1.1 Stable allows remote attackers to bypass authentication and obtain administrative...7.5 High
- matteoiammarrone s-cmsSQL injection vulnerability in admin/delete_page.php in S-Cms 1.1 Stable allows remote attackers...7.5 High
- tangocmsCross-site scripting (XSS) vulnerability in the hook_cntrlr_error_output function in modules/page...4.3 Medium
- denorastats phpdenoraCross-site scripting (XSS) vulnerability in phpDenora before 1.2.3 allows remote attackers to...4.3 Medium
- netcordia netmriCross-site scripting (XSS) vulnerability in the web user interface in the login application in...4.3 Medium
- maharaMultiple cross-site scripting (XSS) vulnerabilities in Mahara 1.0 before 1.0.10 and 1.1 before 1...4.3 Medium
- linux kernelThe shm_get_stat function in ipc/shm.c in the shm subsystem in the Linux kernel before 2.6.28.5,...4.7 Medium
- d.j.bernstein djbdnsThe response_addname function in response.c in Daniel J. Bernstein djbdns 1.05 and earlier does...5.8 Medium
- sun management centerCross-site scripting (XSS) vulnerability in /prm/reports in the Performance Reporting Module (PRM...4.3 Medium
- ibm websphere application serverMultiple cross-site scripting (XSS) vulnerabilities in sample applications in IBM WebSphere...4.3 Medium
- torben sorensen tinx\/cmsSQL injection vulnerability in system/rss.php in TinX/cms 3.x before 3.5.1 allows remote...7.5 High
- apache tomcatCross-site scripting in Apache Tomcat4.3 Medium
- microsoft interix, openbsd +1 moreInteger overflow in the fts_build function in fts.c in libc in (1) OpenBSD 4.4 and earlier and (2...4.9 Medium
- redhat jboss enterprise application platformThe request handler in JBossWS in JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP)...5.0 Medium
- stewart howe celerbblogin.php in CelerBB 0.0.2, when magic_quotes_gpc is disabled, allows remote attackers to bypass...6.8 Medium
- stewart howe celerbbshowme.php in CelerBB 0.0.2 allows remote attackers to obtain "reserved information" via the user...5.0 Medium
- stewart howe celerbbMultiple SQL injection vulnerabilities in CelerBB 0.0.2, when magic_quotes_gpc is disabled, allow...6.8 Medium
- bitdefender internet securityCross-site scripting (XSS) vulnerability in BitDefender Internet Security 2009 allows user...4.3 Medium
- novastor novanetStack-based buffer overflow in the DtbClsLogin function in NovaStor NovaNET 12 allows remote...7.5 High
- under construction baby pc2mCross-site scripting (XSS) vulnerability in Under Construction, Baby (UCB) PC2M 0.9.22.4 and...4.3 Medium
- centurysys xr-410, xr-440, xr-510 +6 more +8 moreCross-site request forgery (CSRF) vulnerability in multiple Century Systems routers including XR...4.0 Medium
- skyarc mtcms wysiwyg editorCross-site scripting (XSS) vulnerability in install.cgi in SKYARC System MTCMS WYSIWYG Editor...4.3 Medium
- quiksoft easymail mailstore objectBuffer overflow in emmailstore.dll 6.5.0.3 in the QuikSoft EasyMail MailStore ActiveX control...9.3 High
- geniuscyber maxsiteStatic code injection vulnerability in the Guestbook component in CMS MAXSITE allows remote...7.5 High
- yourplaceUnspecified vulnerability in YourPlace before 1.0.1 has unknown impact and attack vectors,...7.5 High
- baidu hiStack-based buffer overflow in CSTransfer.dll in Baidu Hi IM might allow remote attackers to...10.0 High
- phpkfSQL injection vulnerability in forum_duzen.php in phpKF allows remote attackers to execute...7.5 High
- sina dloaderInsecure method vulnerability in Sina Inc. DLoader Class ActiveX Control allows remote attackers...5.8 Medium
- epicgames unreal engineFormat string vulnerability in the Epic Games Unreal engine client, as used in multiple games,...9.3 High
- ibm websphere application serverCross-site scripting (XSS) vulnerability in the administrative console in IBM WebSphere...4.3 Medium
- sun opensolaris, sunos +1 moreThe crypto pseudo device driver in Sun Solaris 10, and OpenSolaris snv_88 through snv_102, does...4.9 Medium
- cerberus helpdesk, webgroupmedia cerberus helpdesk +1 moreCerberus Helpdesk before 4.0 (Build 600) allows remote attackers to obtain sensitive information...5.0 Medium
- abledatingCross-site scripting (XSS) vulnerability in search_results.php in ABK-Soft AbleDating 2.4 allows...4.3 Medium
- e107coders macguru blog engine pluginSQL injection vulnerability in macgurublog_menu/macgurublog.php in the MacGuru BLOG Engine plugin...7.5 High
- lukas waldauf phpfreeforumMultiple cross-site scripting (XSS) vulnerabilities in PHPFreeForum 1.0 RC2 and earlier allow...4.3 Medium
- xerox workcentreCross-site scripting (XSS) vulnerability in the Web Server in Xerox WorkCentre 7132, 7228, 7235,...4.3 Medium
- phpsqlitecmsMultiple cross-site scripting (XSS) vulnerabilities in phpSQLiteCMS 1 RC2 allow remote attackers...4.3 Medium
- Show moreLoading…