CVEs published in April 2009

567 vulnerabilities, 92 critical, 1 exploited.

• mozilla firefox The nsTextFrame::ClearTextRun function in layout/generic/nsTextFrameThebes.cpp in Mozilla Firefox... CVE-2009-1313 Public exploitFix available 9.3 HighApril 30, 2009
• memcachedb memcached The process_stat function in Memcached 1.2.8 discloses memory-allocation statistics in response... CVE-2009-1494 Fix available 5.0 MediumApril 30, 2009
• adobe reader The customDictionaryOpen spell method in the JavaScript API in Adobe Reader 9.1, 8.1.4, 7.1.1,... CVE-2009-1493 Public exploit EPSS 21.8% 6.8 MediumApril 30, 2009
• adobe acrobat, acrobat reader +1 more The getAnnots Doc method in the JavaScript API in Adobe Reader and Acrobat 9.1, 8.1.4, 7.1.1, and... CVE-2009-1492 Public exploit EPSS 25.5% 9.3 HighApril 30, 2009
• foswiki Cross-site request forgery (CSRF) vulnerability in Foswiki before 1.0.5 allows remote attackers... CVE-2009-1434 6.8 MediumApril 30, 2009
• symantec antivirus, client security, endpoint protection +2 more Symantec Reporting Server, as used in Symantec AntiVirus (SAV) Corporate Edition 10.1 before 10.1... CVE-2009-1432 5.0 MediumApril 30, 2009
• gnu gnutls gnutls-cli in GnuTLS before 2.6.6 does not verify the activation and expiration times of X.509... CVE-2009-1417 5.0 MediumApril 30, 2009
• gnu gnutls lib/gnutls_pk.c in libgnutls in GnuTLS 2.5.0 through 2.6.5 generates RSA keys stored in DSA... CVE-2009-1416 Public exploit 7.5 HighApril 30, 2009
• gnu gnutls lib/pk-libgcrypt.c in libgnutls in GnuTLS before 2.6.6 does not properly handle invalid DSA... CVE-2009-1415 Public exploit 4.3 MediumApril 30, 2009
• mcafee active virus defense, email gateway, securityshield for microsoft isa server +10 more +12 more The AV engine before DAT 5600 in McAfee VirusScan, Total Protection, Internet Security,... CVE-2009-1348 7.6 HighApril 30, 2009
• twiki Cross-site request forgery (CSRF) vulnerability in TWiki before 4.3.1 allows remote authenticated... CVE-2009-1339 6.0 MediumApril 30, 2009
• apport, ubuntu +1 more Apport before 0.108.4 on Ubuntu 8.04 LTS, before 0.119.2 on Ubuntu 8.10, and before 1.0-0ubuntu5... CVE-2009-1295 1.9 LowApril 30, 2009
• tibco enterprise message service, rtworks, smartsockets +1 more +3 more Stack-based buffer overflow in TIBCO SmartSockets before 6.8.2, SmartSockets Product Family (aka... CVE-2009-1291 10.0 HighApril 30, 2009
• memcachedb memcached The process_stat function in (1) Memcached before 1.2.8 and (2) MemcacheDB 1.2.0 discloses (a)... CVE-2009-1255 Fix available 5.0 MediumApril 30, 2009
• rens rikkerink fungamez includes/user.php in Fungamez RC1 allows remote attackers to bypass authentication and gain... CVE-2009-1489 Public exploit 7.5 HighApril 29, 2009
• rens rikkerink fungamez Directory traversal vulnerability in admin/load.php in FunGamez RC1 allows remote attackers to... CVE-2009-1488 Public exploit 6.8 MediumApril 29, 2009
• rens rikkerink fungamez SQL injection vulnerability in pages/login.php in FunGamez RC1 allows remote attackers to execute... CVE-2009-1487 Public exploit 7.5 HighApril 29, 2009
• ninjadesigns flatchat Directory traversal vulnerability in pmscript.php in Flatchat 3.0 allows remote attackers to... CVE-2009-1486 Public exploit 7.5 HighApril 29, 2009
• aemuleplus emule plus The logging feature in eMule Plus before 1.2e allows remote attackers to cause a denial of... CVE-2009-1485 5.0 MediumApril 29, 2009
• gecad axigen mail server Cross-site scripting (XSS) vulnerability in the web mail interface feature in AXIGEN Mail Server... CVE-2009-1484 4.3 MediumApril 29, 2009
• studiolounge address book Unrestricted file upload vulnerability in upload-file.php in Adam Patterson Studio Lounge Address... CVE-2009-1483 Public exploit 6.8 MediumApril 29, 2009
• moinmo moinmoin MoinMoin Cross-site Scripting (XSS) vulnerability CVE-2009-1482 Fix available 4.3 MediumApril 29, 2009
• pjhome puterjams blog SQL injection vulnerability in action.asp in PuterJam's Blog (PJBlog3) 3.0.6.170 allows remote... CVE-2009-1481 7.5 HighApril 29, 2009
• pragyan cms project cms SQL injection vulnerability in index.php Pragyan CMS 2.6.4 allows remote attackers to execute... CVE-2009-1480 Public exploit 7.5 HighApril 29, 2009
• peterselie yourplace internettoolbar/edit.php in YourPlace 1.0.2 and earlier does not end execution when an invalid... CVE-2008-6774 5.0 MediumApril 29, 2009
• peterselie yourplace Static code injection vulnerability in user/internettoolbar/edit.php in YourPlace 1.0.2 and... CVE-2008-6773 Public exploit 6.5 MediumApril 29, 2009
• peterselie yourplace login/register_form.php in YourPlace 1.0.2 and earlier does not check that a username already... CVE-2008-6772 Public exploit 7.5 HighApril 29, 2009
• peterselie yourplace YourPlace 1.0.2 and earlier allows remote attackers to obtain sensitive system information via a... CVE-2008-6771 Public exploit 5.0 MediumApril 29, 2009
• peterselie yourplace YourPlace 1.0.2 and earlier stores sensitive information under the web root with insufficient... CVE-2008-6770 Public exploit 5.0 MediumApril 29, 2009
• peterselie yourplace Unrestricted file upload vulnerability in upload.php in YourPlace 1.0.2 and earlier allows remote... CVE-2008-6769 Public exploit 6.0 MediumApril 29, 2009
• shopsystem-forum k\&s shopsoftware Unrestricted file upload vulnerability in admin/editor/images.php in K&S Shopsoftware allows... CVE-2008-6768 Public exploit 6.8 MediumApril 29, 2009
• sun opensolaris, solaris +1 more Multiple unspecified vulnerabilities in the DTrace ioctl handlers in Sun Solaris 10, and... CVE-2009-1478 Public exploit 4.9 MediumApril 29, 2009
• symantec antivirus, antivirus central quarantine server, client security +2 more +4 more XFR.EXE in the Intel File Transfer service in the console in Symantec Alert Management System 2 ... CVE-2009-1431 9.3 HighApril 29, 2009
• symantec antivirus, antivirus central quarantine server, client security +2 more +4 more Multiple stack-based buffer overflows in IAO.EXE in the Intel Alert Originator Service in... CVE-2009-1430 Public exploit EPSS 55.1% 9.3 HighApril 29, 2009
• symantec antivirus, antivirus central quarantine server, client security +2 more +4 more The Intel LANDesk Common Base Agent (CBA) in Symantec Alert Management System 2 (AMS2), as used... CVE-2009-1429 Public exploit EPSS 87.7% 10.0 HighApril 29, 2009
• symantec antivirus, endpoint protection, norton 360 +1 more +3 more Multiple cross-site scripting (XSS) vulnerabilities in ccLgView.exe in the Symantec Log Viewer,... CVE-2009-1428 4.3 MediumApril 29, 2009
• hp hp-ux Unspecified vulnerability in useradd in HP HP-UX B.11.11, B.11.23, and B.11.31 allows local users... CVE-2009-0719 6.0 MediumApril 29, 2009
• razorcms Static code injection vulnerability in razorCMS before 0.4 allows remote attackers to inject... CVE-2009-1463 7.5 HighApril 28, 2009
• razorcms The Security Manager in razorCMS before 0.4 does not verify the permissions of every file owned... CVE-2009-1462 7.2 HighApril 28, 2009
• razorcms Cross-site scripting (XSS) vulnerability in the Create New Page form in razorCMS 0.3 RC2 and... CVE-2009-1461 3.5 LowApril 28, 2009
• razorcms razorCMS before 0.4 uses weak permissions for (1) admin/core/admin_config.php, which allows local... CVE-2009-1460 4.6 MediumApril 28, 2009
• razorcms Cross-site request forgery (CSRF) vulnerability in razorCMS before 0.4 allows remote attackers to... CVE-2009-1459 6.8 MediumApril 28, 2009
• razorcms Multiple cross-site scripting (XSS) vulnerabilities in admin/index.php in razorCMS before 0.4... CVE-2009-1458 Public exploit 4.3 MediumApril 28, 2009
• evolution-extreme nuke evolution xtreme Cross-site scripting (XSS) vulnerability in player.php in Nuke Evolution Xtreme 2.x allows remote... CVE-2009-1457 4.3 MediumApril 28, 2009
• stephane rajalu malleo Directory traversal vulnerability in admin.php in Malleo 1.2.3 allows remote authenticated... CVE-2009-1456 Public exploit 6.5 MediumApril 28, 2009
• andrew simpson webcollab Multiple cross-site request forgery (CSRF) vulnerabilities in WebCollab before 2.50 (aka Billy... CVE-2009-1455 6.8 MediumApril 28, 2009
• andrew simpson webcollab Cross-site scripting (XSS) vulnerability in tasks.php in WebCollab before 2.50 (aka Billy Goat)... CVE-2009-1454 4.3 MediumApril 28, 2009
• anoochit chalothorn tiny blogr SQL injection vulnerability in class.eport.php in Tiny Blogr 1.0.0 rc4, when magic_quotes_gpc is... CVE-2009-1453 Public exploit 6.8 MediumApril 28, 2009
• bluevirus-design sma-db Multiple PHP remote file inclusion vulnerabilities in theme/format.php in SMA-DB 0.3.13 allow... CVE-2009-1452 Public exploit 7.5 HighApril 28, 2009
• wordpress wp-admin/upgrade.php in WordPress, probably 2.6.x, allows remote attackers to upgrade the... CVE-2008-6767 Fix available 10.0 HighApril 28, 2009
• Show olderLoading…