CVEs published in March 2009
552 vulnerabilities, 91 critical, 2 exploited.
- clansphereMultiple unspecified vulnerabilities in ClanSphere before 2008.2.1 allow remote attackers to...5.0 Medium
- plaincartSQL injection vulnerability in index.php in PlainCart 1.1.2 allows remote attackers to execute...7.5 High
- dieselscripts diesel paySQL injection vulnerability in index.php in Diesel Pay allows remote attackers to execute...7.5 High
- dieselscripts diesel job siteSQL injection vulnerability in jobs/jobseekers/job-info.php in Diesel Job Site allows remote...7.5 High
- akirapowered image gallerySQL injection vulnerability in image_gallery.php in the Akira Powered Image Gallery ...7.5 High
- parallels h-sphereMultiple cross-site scripting (XSS) vulnerabilities in login.php in webshell4 in Parallels H...4.3 Medium
- mevin basic-php-events-listerSQL injection vulnerability in event.php in Mevin Productions Basic PHP Events Lister 1.0 allows...7.5 High
- fr.simon rundell pd churchsearchSQL injection vulnerability in the Diocese of Portsmouth Church Search (pd_churchsearch)...7.5 High
- kurt gusbeth myquizpollSQL injection vulnerability in the My quiz and poll (myquizpoll) extension before 0.1.4 for TYPO3...7.5 High
- fr.simon rundell ste prayer2SQL injection vulnerability in the Random Prayer 2 (ste_prayer2) extension before 0.0.3 for TYPO3...7.5 High
- mirko werner mw random objectsSQL injection vulnerability in the Simple Random Objects (mw_random_objects) extension 1.0.3 and...7.5 High
- typo3 autobeuserSQL injection vulnerability in the auto BE User Registration (autobeuser) extension 0.0.2 and...7.5 High
- dieter mayer fe address editSQL injection vulnerability in the FE address edit for tt_address & direct mail (dmaddredit)...7.5 High
- walnutstreet cgswigmoreSQL injection vulnerability in the Swigmore institute (cgswigmore) extension before 0.1.2 for...7.5 High
- martin helmich hbookSQL injection vulnerability in the HBook (h_book) extension 2.3.0 and earlier for TYPO3 allows...7.5 High
- edikon phpshopSession fixation vulnerability in Edikon phpShop 0.8.1 allows remote attackers to hijack web...6.8 Medium
- 6rbscriptSQL injection vulnerability in section.php in 6rbScript 3.3 allows remote attackers to execute...7.5 High
- 6rbscriptDirectory traversal vulnerability in section.php in 6rbScript 3.3, when magic_quotes_gpc is...4.3 Medium
- oceandirSQL injection vulnerability in show_vote.php in Oceandir 2.9 and earlier allows remote attackers...7.5 High
- jportalSQL injection vulnerability in humor.php in jPORTAL 2 allows remote attackers to execute...7.5 High
- linux-pamInteger signedness error in the _pam_StrTok function in libpam/pam_misc.c in Linux-PAM (aka pam)...6.6 Medium
- oneorzero helpdeskDirectory traversal vulnerability in login.php in OneOrZero Helpdesk 1.6.5.7 and earlier allows...5.0 Medium
- mediacommands media commandsMultiple heap-based buffer overflows in Media Commands 1.0 allow remote attackers to execute...9.3 High
- filezilla-project filezilla serverBuffer overflow in FileZilla Server before 0.9.31 allows remote attackers to cause a denial of...4.3 Medium
- amunak blue eye cmsSQL injection vulnerability in Blue Eye CMS 1.0.0 and earlier, when magic_quotes_gpc is disabled,...6.8 Medium
- roman bogorodskiy nforumMultiple SQL injection vulnerabilities in nForum 1.5 allow remote attackers to execute arbitrary...7.5 High
- josema enzo isiajaxSQL injection vulnerability in ejemplo/paises.php in isiAJAX 1 allows remote attackers to execute...7.5 High
- ibm directorDirectory traversal vulnerability in the CIM server in IBM Director before 5.20.3 Service Update...6.8 Medium
- ibm directorThe CIM server in IBM Director before 5.20.3 Service Update 2 on Windows allows remote attackers...5.0 Medium
- sun java system communications expressMultiple cross-site scripting (XSS) vulnerabilities in Sun Java System Communications Express...4.3 Medium
- sun xvm virtualboxSun xVM VirtualBox 2.0.0, 2.0.2, 2.0.4, 2.0.6r39760, 2.1.0, 2.1.2, and 2.1.4r42893 on Linux...6.9 Medium
- sun opensolaris, solaris +1 moreRace condition in the Doors subsystem in the kernel in Sun Solaris 8 through 10, and OpenSolaris...6.9 Medium
- sun opensolaris, solaris +1 moreMultiple unspecified vulnerabilities in the Doors subsystem in the kernel in Sun Solaris 8...4.9 Medium
- linux kernel, vmware esx, server +3 more +5 moreThe icmp_send function in net/ipv4/icmp.c in the Linux kernel before 2.6.25, when configured as a...7.1 High
- cisco unified communications managerThe IP Phone Personal Address Book (PAB) Synchronizer feature in Cisco Unified Communications...9.0 High
- sun opensolaris, solaris, sunos +2 moreThe NFS daemon (aka nfsd) in Sun Solaris 10 and OpenSolaris before snv_106, when NFSv3 is used,...6.8 Medium
- sun opensolaris, solaris +1 moreThe NFS server in Sun Solaris 10, and OpenSolaris before snv_111, does not properly implement the...6.8 Medium
- digium asteriskThe SIP channel driver in Asterisk Open Source 1.4.22, 1.4.23, and 1.4.23.1; 1.6.0 before 1.6.0.6...3.5 Low
- dashUntrusted search path vulnerability in dash 0.5.4, when used as a login shell, allows local users...6.9 Medium
- opensuseUntrusted search path vulnerability in GTK2 in OpenSUSE 11.0 and 11.1 allows local users to...4.4 Medium
- hp systems insight managerUnspecified vulnerability in WMI Mapper for HP Systems Insight Manager before 2.5.2.0 allows...5.0 Medium
- hp wmi mapperUnspecified vulnerability in WMI Mapper for HP Systems Insight Manager before 2.5.2.0 allows...7.2 High
- microsoft windows 2000, windows server 2003, windows server 2008 +2 moreThe DNS Resolver Cache Service (aka DNSCache) in Windows DNS Server in Microsoft Windows 2000 SP4...6.4 Medium
- microsoft windows 2000, windows server 2003, windows server 2008 +2 moreThe DNS Resolver Cache Service (aka DNSCache) in Windows DNS Server in Microsoft Windows 2000 SP4...5.8 Medium
- microsoft windows 2000, windows server 2003, windows server 2008 +2 moreThe WINS server in Microsoft Windows 2000 SP4 and Server 2003 SP1 and SP2 does not restrict...5.5 Medium
- microsoft windows 2000, windows server 2003, windows server 2008 +2 moreWindows DNS Server in Microsoft Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008, when...3.5 Low
- ibm tivoli storage manager, tivoli storage manager express +1 moreHeap-based buffer overflow in adsmdll.dll 5.3.7.7296, as used by the daemon (dsmsvc.exe) in the...10.0 High
- wesnothThe read_game_map function in src/terrain_translation.cpp in Wesnoth before r32987 allows remote...5.0 Medium
- wesnothThe uncompress_buffer function in src/server/simple_wml.cpp in Wesnoth before r33069 allows...4.3 Medium
- openttdBuffer overflow in the server in OpenTTD 0.6.1 and earlier allows remote authenticated users to...9.0 High
- Show moreLoading…