CVEs published in March 2009
552 vulnerabilities, 91 critical, 2 exploited.
- alecwh phpnsUnspecified vulnerability in phpns before 2.1.3 has unknown impact and attack vectors related to ...10.0 High
- comscripts web server creator web portalPHP remote file inclusion vulnerability in news/include/createdb.php in Web Server Creator Web...7.5 High
- simple machines forum** DISPUTED ** Multiple PHP remote file inclusion vulnerabilities in Simple Machines Forum (SMF)...7.5 High
- comscripts quick classifiedsMultiple PHP remote file inclusion vulnerabilities in ComScripts TEAM Quick Classifieds 1.0 via...7.5 High
- dnnsoftware dotnetnukeUnspecified vulnerability in the Skin Manager in DotNetNuke before 4.8.2 allows remote...4.6 Medium
- dnnsoftware dotnetnukeUnrestricted file upload vulnerability in the file manager module in DotNetNuke before 4.8.2...6.8 Medium
- dnnsoftware dotnetnukeDotNetNuke Default Machine Key Exposure5.1 Medium
- holger schurig destarStatic code injection vulnerability in user/settings/ in DeStar 0.2.2-5 allows remote...6.5 Medium
- holger schurig destarDeStar 0.2.2-5 allows remote attackers to add arbitrary users via a direct request to config/add...5.0 Medium
- lightneasyLightNEasy/lightneasy.php in LightNEasy No database version 1.2 allows remote attackers to obtain...5.0 Medium
- 7-zipUnspecified vulnerability in 7-zip before 4.5.7 has unknown impact and remote attack vectors, as...10.0 High
- bouncycastle bc-java, bouncy-castle-crypto-package +1 moreLegion of the Bouncy Castle Java Cryptography API Bleichenbacher Oracle Vulnerability10.0 High
- auth2db, auth2dbauth2db 0.1.1 +1 moreSQL injection vulnerability in auth2db 0.2.5, and possibly other versions before 0.2.7, uses the...7.5 High
- debian nss-ldap, linux +1 morenss-ldapd before 0.6.8 uses world-readable permissions for the /etc/nss-ldapd.conf file, which...5.5 Medium
- strongswan, xelerance openswan +1 moreThe pluto IKE daemon in Openswan and Strongswan IPsec 2.6 before 2.6.21 and 2.4 before 2.4.14,...5.0 Medium
- mit kerberos, kerberos 5 +1 moreThe spnego_gss_accept_sec_context function in lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 ...5.0 Medium
- opensslOpenSSL before 0.9.8k on WIN64 and certain other platforms does not properly handle a malformed...5.0 Medium
- cisco ios, ios xr +1 moreThe SCP server in Cisco IOS 12.2 through 12.4, when Role-Based CLI Access is enabled, does not...7.1 High
- cisco iosUnspecified vulnerability in Cisco IOS 12.0 through 12.4, when SIP voice services are enabled,...7.8 High
- cisco iosMemory leak in the Cisco Tunneling Control Protocol (cTCP) encapsulation feature in Cisco IOS 12...7.1 High
- cisco iosMultiple unspecified vulnerabilities in the home agent (HA) implementation in the (1) Mobile IP...7.1 High
- cisco iosMultiple unspecified vulnerabilities in the (1) Mobile IP NAT Traversal feature and (2) Mobile...7.1 High
- cisco iosThe (1) Cisco Unified Communications Manager Express; (2) SIP Gateway Signaling Support Over...7.1 High
- cisco ios, ios xr +1 moreThe (1) Airline Product Set (aka ALPS), (2) Serial Tunnel Code (aka STUN), (3) Block Serial...5.4 Medium
- cisco iosMemory leak in the SSLVPN feature in Cisco IOS 12.3 through 12.4 allows remote attackers to cause...9.0 High
- cisco iosThe SSLVPN feature in Cisco IOS 12.3 through 12.4 allows remote attackers to cause a denial of...7.8 High
- opensslThe CMS_verify function in OpenSSL 0.9.8h through 0.9.8j, when CMS is enabled, does not properly...2.6 Low
- openssl, debian linux +1 moreThe ASN1_STRING_print_ex function in OpenSSL before 0.9.8k allows remote attackers to cause a...5.0 Medium
- cisco iosUnspecified vulnerability in Cisco IOS 12.0 through 12.4, when configured with (1) IP Service...7.8 High
- mozilla firefoxThe txMozillaXSLTProcessor::TransformToDoc function in Mozilla Firefox before 3.0.8 and SeaMonkey...9.3 High
- paypalestores paypal estoresadmin/settings.php in PayPal eStores allows remote attackers to bypass intended access...7.5 High
- vwsolutions null ftpIncomplete blacklist vulnerability in NULL FTP Server Free and Pro 1.1.0.7 allows remote...7.1 High
- drupalDrupal 5.x before 5.13 and 6.x before 6.7 does not delete all related content when an input...4.3 Medium
- drupalMultiple cross-site request forgery (CSRF) vulnerabilities in the update feature in Drupal 5.x...6.8 Medium
- atlassian jiraThe WebWork 1 web application framework in Atlassian JIRA before 3.13.2 allows remote attackers...6.8 Medium
- ezonescripts living localUnrestricted file upload vulnerability in editimage.php in eZoneScripts Living Local 1.1 allows...6.5 Medium
- ezonescripts living localCross-site scripting (XSS) vulnerability in listtest.php in eZoneScripts Living Local 1.1 allows...4.3 Medium
- siemens gigaset se461 wimax routerSiemens Gigaset SE461 WiMAX router 1.5-BL024.9.6401, and possibly other versions, allows remote...7.3 High
- phpmyadmin, debian linux +1 moreStatic code injection vulnerability in setup.php in phpMyAdmin 2.11.x before 2.11.9.5 and 3.x...9.8 Critical
- phpmyadminMultiple cross-site scripting (XSS) vulnerabilities in the export page (display_export.lib.php)...4.3 Medium
- phpmyadminphpMyAdmin HTTP Response Splitting Vulnerability7.5 High
- phpmyadminDirectory traversal vulnerability in bs_disp_as_mime_type.php in the BLOB streaming feature in...5.0 Medium
- tmaxsoft jeusNTFS TmaxSoft JEUS 5 before Fix 26 allows remote attackers to read the source code for scripts by...5.0 Medium
- sun javaThe Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12...4.3 Medium
- sun jdk, jre +1 moreThe Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12,...6.4 Medium
- sun javaThe Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12,...7.5 High
- sun javaThe Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update...5.8 Medium
- sun javaUnspecified vulnerability in the Java Plug-in in Java SE Development Kit (JDK) and Java Runtime...6.4 Medium
- sun javaUnspecified vulnerability in the Virtual Machine in Java SE Development Kit (JDK) and Java...6.4 Medium
- sun jdk, jre +1 moreUnspecified vulnerability in the lightweight HTTP server implementation in Java SE Development...5.0 Medium
- Show moreLoading…