Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2009
March

CVEs published in March 2009

552 vulnerabilities, 91 critical, 2 exploited.

Known exploitedIn KEVPublic exploitFix available

virtuemart-solutions com googlebasePHP remote file inclusion vulnerability in admin.googlebase.php in the Ecom Solutions VirtueMart...CVE-2008-6483Public exploitEPSS 39.2%7.5 HighMarch 18, 2009
justjoomla com treegPHP remote file inclusion vulnerability in admin.treeg.php in the Flash Tree Gallery (com_treeg)...CVE-2008-6482Public exploitEPSS 34.2%6.8 MediumMarch 18, 2009
ibm lotus notes, symantec brightmail, mail security +7 more +9 moreStack-based buffer overflow in wp6sr.dll in the Autonomy KeyView SDK 10.4 and earlier, as used in...CVE-2008-45649.3 HighMarch 18, 2009
miranda-im miranda imStack-based buffer overflow in Miranda IM 0.6.8 and 0.7.0 allows remote attackers to execute...CVE-2007-55439.3 HighMarch 18, 2009
miranda-im miranda imStack-based buffer overflow in Miranda IM 0.6.8 allows remote attackers to execute arbitrary code...CVE-2007-55429.3 HighMarch 18, 2009
torTor before 0.2.0.34 treats incomplete IPv4 addresses as valid, which has unknown impact and...CVE-2009-0939Fix available10.0 HighMarch 18, 2009
torUnspecified vulnerability in Tor before 0.2.0.34 allows directory mirrors to cause a denial of...CVE-2009-0938Fix available5.0 MediumMarch 18, 2009
torUnspecified vulnerability in Tor before 0.2.0.34 allows directory mirrors to cause a denial of...CVE-2009-0937Fix available5.0 MediumMarch 18, 2009
torUnspecified vulnerability in Tor before 0.2.0.34 allows attackers to cause a denial of service ...CVE-2009-0936Fix available5.0 MediumMarch 18, 2009
linux kernelThe inotify_read function in the Linux kernel 2.6.27 to 2.6.27.13, 2.6.28 to 2.6.28.2, and 2.6.29...CVE-2009-09355.5 MediumMarch 18, 2009
process-one ejabberdCross-site scripting (XSS) vulnerability in ejabberd before 2.0.4 allows remote attackers to...CVE-2009-0934Fix available4.3 MediumMarch 18, 2009
flashtux weechatWee Enhanced Environment for Chat (WeeChat) 0.2.6 allows remote attackers to cause a denial of...CVE-2009-0661Fix available5.0 MediumMarch 18, 2009
dotclearCross-site scripting (XSS) vulnerability in the administrative interface in Dotclear before 2.1.5...CVE-2009-09334.3 MediumMarch 17, 2009
debian horde, horde groupware +1 moreDirectory traversal vulnerability in framework/Image/Image.php in Horde before 3.2.4 and 3.3.3...CVE-2009-0932Public exploitEPSS 47.9%6.4 MediumMarch 17, 2009
debian horde, horde groupware +1 moreCross-site scripting (XSS) vulnerability in the tag cloud search script (horde/services/portal...CVE-2009-09314.3 MediumMarch 17, 2009
debian horde impMultiple cross-site scripting (XSS) vulnerabilities in Horde IMP before 4.2.2 and 4.3.3 allow...CVE-2009-09304.3 MediumMarch 17, 2009
nucleus group cmsDirectory traversal vulnerability in the media manager in Nucleus CMS before 3.40 allows remote...CVE-2009-09295.0 MediumMarch 17, 2009
sun opensolaris, solaris +1 moreUnspecified vulnerability in the UFS filesystem functionality in Sun OpenSolaris snv_86 through...CVE-2009-09264.9 MediumMarch 17, 2009
sun opensolaris, solaris +1 moreUnspecified vulnerability in Sun Solaris 10 on SPARC sun4v systems, and OpenSolaris snv_47...CVE-2009-09254.7 MediumMarch 17, 2009
sun opensolaris, solaris +1 moreUnspecified vulnerability in Sun OpenSolaris snv_39 through snv_45, when running in 64-bit mode...CVE-2009-09244.7 MediumMarch 17, 2009
sun opensolaris, solaris +1 moreUnspecified vulnerability in Kerberos Incremental Propagation in Solaris 10 and OpenSolaris...CVE-2009-09237.8 HighMarch 17, 2009
joomprod com versioningSQL injection vulnerability in the Versioning component (com_versioning) 1.0.2 in Joomla! and...CVE-2008-6481Public exploit7.5 HighMarch 17, 2009
postgresqlPostgreSQL before 8.3.7, 8.2.13, 8.1.17, 8.0.21, and 7.4.25 allows remote authenticated users to...CVE-2009-0922Public exploitEPSS 10.2%4.0 MediumMarch 17, 2009
apachefriends xamppXAMPP installs multiple packages with insecure default passwords, which makes it easier for...CVE-2009-0919EPSS 11.0%7.5 HighMarch 16, 2009
dflabs ptkMultiple unspecified vulnerabilities in DFLabs PTK 1.0.0 through 1.0.4 allow remote attackers to...CVE-2009-09187.5 HighMarch 16, 2009
dflabs ptkCross-site scripting (XSS) vulnerability in DFLabs PTK 1.0.0 through 1.0.4 allows remote...CVE-2009-09174.3 MediumMarch 16, 2009
opera browserUnspecified vulnerability in Opera before 9.64 has unknown impact and attack vectors, related to...CVE-2009-091610.0 HighMarch 16, 2009
opera browserOpera before 9.64 allows remote attackers to conduct cross-domain scripting attacks via...CVE-2009-09156.8 MediumMarch 16, 2009
opera browserOpera before 9.64 allows remote attackers to execute arbitrary code via a crafted JPEG image that...CVE-2009-09149.3 HighMarch 16, 2009
ibm websphere application serverThe Servlet Engine/Web Container and JSP components in IBM WebSphere Application Server (WAS) 5.1...CVE-2009-05087.5 HighMarch 16, 2009
softnews media group datalife engineCross-site request forgery (CSRF) vulnerability in engine/modules/imagepreview.php in Datalife...CVE-2008-64806.8 MediumMarch 16, 2009
parallels virtuozzoCross-site request forgery (CSRF) vulnerability in the "change password" feature in the VZPP web...CVE-2008-6479Public exploit6.8 MediumMarch 16, 2009
parallels virtuozzo containersCross-site request forgery (CSRF) vulnerability in the file manager in the VZPP web interface for...CVE-2008-6478Public exploit6.8 MediumMarch 16, 2009
sun opensolaris, solaris +1 moreUnspecified vulnerability in the keysock kernel module in Solaris 10 and OpenSolaris builds...CVE-2009-09134.7 MediumMarch 16, 2009
mandriva linux, linux corporate server, multi network firewall +2 moreperl-MDK-Common 1.1.11 and 1.1.24, 1.2.9 through 1.2.14, and possibly other versions, in Mandriva...CVE-2009-09127.2 HighMarch 16, 2009
mumbojumbo op4SQL injection vulnerability in Mumbo Jumbo Media OP4 allows remote attackers to execute arbitrary...CVE-2008-6477Public exploit7.5 HighMarch 16, 2009
dotnetblogengine blogengine.netCross-site scripting (XSS) vulnerability in blog/search.aspx in BlogEngine.NET allows remote...CVE-2008-6476Public exploit4.3 MediumMarch 16, 2009
drake team cmsSQL injection vulnerability in the guestbook component (components/guestbook/guestbook.php) in...CVE-2008-6475Public exploit7.5 HighMarch 16, 2009
f5 tmosThe management interface in F5 BIG-IP 9.4.3 allows remote authenticated users with Resource...CVE-2008-64749.0 HighMarch 16, 2009
blogator-script_blogadata/include/init_pass2.php in Blogator-script 0.95 allows remote attackers to change the...CVE-2008-6473Public exploit6.4 MediumMarch 16, 2009
slysoft anydvd, clonecd, clonedvd +1 more +3 moreElaborate Bytes ElbyCDIO.sys 6.0.2.0 and earlier, as distributed in SlySoft AnyDVD before 6.5.2.6...CVE-2009-0824Public exploit4.9 MediumMarch 14, 2009
go-evolution evolution-data-serverMultiple integer overflows in Evolution Data Server (aka evolution-data-server) before 2.24.5...CVE-2009-0587Fix available7.5 HighMarch 14, 2009
gstreamer, canonical ubuntu linux +1 moreInteger overflow in the gst_vorbis_tag_add_coverart function (gst-libs/gst/tag/gstvorbistag.c) in...CVE-2009-0586Fix available7.5 HighMarch 14, 2009
joe shaw libsoupInteger overflow in the soup_base64_encode function in soup-misc.c in libsoup 2.x.x before 2.2.x,...CVE-2009-0585Fix available7.5 HighMarch 14, 2009
gnome evolution-data-serverThe ntlm_challenge function in the NTLM SASL authentication mechanism in camel/camel-sasl-ntlm.c...CVE-2009-0582Fix available5.8 MediumMarch 14, 2009
apple itunesApple iTunes before 8.1 does not properly inform the user about the origin of an authentication...CVE-2009-01434.3 MediumMarch 14, 2009
apple itunesApple iTunes before 8.1 on Windows allows remote attackers to cause a denial of service (infinite...CVE-2009-00165.0 MediumMarch 14, 2009
wiresharkThe WLCCP dissector in Wireshark 0.99.7 through 1.0.4 allows remote attackers to cause a denial...CVE-2008-6472Fix available4.3 MediumMarch 14, 2009
gnome glibMultiple integer overflows in glib/gbase64.c in GLib before 2.20 allow context-dependent...CVE-2008-4316Fix available4.6 MediumMarch 14, 2009
mountaingrafix easylinkSQL injection vulnerability in detail.php in MountainGrafix easyLink 1.1.0 allows remote...CVE-2008-6471Public exploit7.5 HighMarch 13, 2009
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open