CVEs published in March 2009
552 vulnerabilities, 91 critical, 2 exploited.
- systemtap, debian linux +1 moreRace condition in the SystemTap stap tool 0.0.20080705 and 0.0.20090314 allows local users in the...6.3 Medium
- randomsoftware icarusStack-based buffer overflow in Icarus 2.0 allows remote attackers to cause a denial of service ...9.3 High
- expressionengineCross-site scripting (XSS) vulnerability in system/index.php in ExpressionEngine 1.6.4 through 1...4.3 Medium
- drupal content construction kitMultiple cross-site scripting (XSS) vulnerabilities in the node edit form feature in Drupal...4.3 Medium
- bsplayer bs.playerStack-based buffer overflow in BS.Player (bsplayer) 2.32 Build 975 Free and 2.34 Build 980 PRO...9.3 High
- getpixie pixie cmsCross-site scripting (XSS) vulnerability in index.php in Pixie CMS 1.01a allows remote attackers...4.3 Medium
- getpixie pixie cmsSQL injection vulnerability in the referral function in admin/lib/lib_logs.php in Pixie CMS 1.01a...7.5 High
- getpixie pixie cmsSQL injection vulnerability in index.php in Pixie CMS 1.01a allows remote attackers to execute...7.5 High
- orbit downloader downloader, orbitdownloader orbit downloader +1 moreArgument injection vulnerability in orbitmxt.dll 2.1.0.2 in the Orbit Downloader 2.8.7 and...5.8 Medium
- brother soft exescopeBuffer overflow in eXeScope 6.50 allows user-assisted remote attackers to execute arbitrary code...6.8 Medium
- freebsdThe ktimer feature (sys/kern/kern_time.c) in FreeBSD 7.0, 7.1, and 7.2 allows local users to...7.2 High
- apple safariUnspecified vulnerability in Apple Safari on Mac OS X 10.5.6 allows remote attackers to execute...9.3 High
- powerzipStack-based buffer overflow in Trident PowerZip 7.2 might allow remote attackers to execute...9.3 High
- zipgeniusStack-based buffer overflow in ZipGenius might allow remote attackers to execute arbitrary code...10.0 High
- microsmarts zipitfast\!MicroSmarts Enterprise ZipItFast! 3.0 allows remote attackers to execute arbitrary code via a...10.0 High
- ibm rational appscanIBM Rational AppScan Enterprise before 5.5 FP1 allows remote attackers to read arbitrary exported...5.0 Medium
- sitecore cmsUnspecified vulnerability in the web service in Sitecore CMS 5.3.1 rev. 071114 allows remote...4.0 Medium
- ichitaro, ichitaro viewer +1 moreUnspecified vulnerability in JustSystems Ichitaro 13, 2004 through 2008, Lite2, and Ichitaro...9.3 High
- chaozz chaozzdbchaozzDB 1.2 and earlier stores sensitive information under the web root with insufficient access...5.0 Medium
- chaozz fireantFireAnt 1.3 and earlier stores sensitive information under the web root with insufficient access...5.0 Medium
- chaozz fubarforumFubarForum 1.6 and earlier stores sensitive information under the web root with insufficient...5.0 Medium
- kamads bloginatorBloginator 1A allows remote attackers to bypass authentication and gain administrative access by...7.5 High
- kamads bloginatorSQL injection vulnerability in articleCall.php in Bloginator 1A allows remote attackers to...7.5 High
- vclcomponents yappa-ngCross-site scripting (XSS) vulnerability in Fritz Berger yet another php photo album - next...4.3 Medium
- compiz fusionThe Expo plugin in Compiz Fusion 0.7.8 allows local users with physical access to drag the screen...6.2 Medium
- aphpkbUnrestricted file upload vulnerability in saa.php in Andy's PHP Knowledgebase (aphpkb) 0.92.9...6.8 Medium
- google gearsCross-domain vulnerability in the WorkerPool API in Google Gears before 0.5.4.2 allows remote...6.8 Medium
- drupal, drupal print +1 moreCross-site scripting (XSS) vulnerability in the Send by e-mail module in the "Printer, e-mail and...4.3 Medium
- igniterealtime openfireOpen redirect vulnerability in login.jsp in Openfire 3.6.0a and earlier allows remote attackers...5.8 Medium
- igniterealtime openfireCross-site scripting (XSS) vulnerability in login.jsp in the Admin Console in Openfire 3.6.0a and...4.3 Medium
- igniterealtime openfireSQL injection vulnerability in CallLogDAO in SIP Plugin in Openfire 3.6.0a and earlier allows...7.5 High
- igniterealtime openfireDirectory traversal vulnerability in the AuthCheck filter in the Admin Console in Openfire 3.6.0a...7.5 High
- linux kernelThe console selection feature in the Linux kernel 2.6.28 before 2.6.28.4, 2.6.25, and possibly...4.7 Medium
- videolan vlc media playerrequests/status.xml in VLC 0.9.8a allows remote attackers to cause a denial of service (stack...5.0 Medium
- phpbbphpBB vulnerable to sensitive information disclosure5.0 Medium
- phpbbUnspecified vulnerability in phpBB before 3.0.4 allows attackers to bypass intended access...5.0 Medium
- mozilla firefoxMozilla Firefox 3.0.7 on Windows 7 allows remote attackers to execute arbitrary code via unknown...9.3 High
- microsoft internet explorerUnspecified vulnerability in Microsoft Internet Explorer 8 on Windows 7 allows remote attackers...10.0 High
- apple safariUnspecified vulnerability in Apple Safari on Mac OS X 10.5.6 allows remote attackers to execute...9.3 High
- apache strutsApache Struts directory traversal vulnerability5.0 Medium
- apache struts, opensymphony xwork +1 moreImproper Input Validation in OpenSymphony XWork5.0 Medium
- citadel webcitFormat string vulnerability in the mini_calendar component in Citadel.org WebCit 7.22, and other...7.5 High
- winasm studioBuffer overflow in WinAsm Studio 5.1.5.0 allows user-assisted remote attackers to execute...9.3 High
- cdexos cdexBuffer overflow in CDex 1.70b2 allows remote attackers to execute arbitrary code via a crafted...7.5 High
- yap blogMultiple SQL injection vulnerabilities in YAP Blog 1.1.1 allow remote attackers to execute...6.5 Medium
- drupal printUnspecified vulnerability in the Send by e-mail module in the "Printer, e-mail and PDF versions"...5.0 Medium
- drupal plus1Cross-site request forgery (CSRF) vulnerability in the Plus 1 module before 6.x-2.6, a module for...6.8 Medium
- jake gordon tasksCross-site scripting (XSS) vulnerability in the Tasklist module 5.x-1.x before 5.x-1.3 and 5.x-2...4.3 Medium
- drupal tasklistSQL injection vulnerability in the Tasklist module 5.x-1.x before 5.x-1.3 and 5.x-2.x before 5.x...10.0 High
- deluxebbSQL injection vulnerability in misc.php in DeluxeBB 1.3 and earlier allows remote attackers to...7.5 High
- Show moreLoading…