CVEs published in April 2009
567 vulnerabilities, 92 critical, 1 exploited.
- sun java system calendar server, one calendar server +1 moreMultiple cross-site scripting (XSS) vulnerabilities in Sun Calendar Express Web Server in Sun ONE...4.3 Medium
- sap sapguiStack-based buffer overflow in EAI WebViewer3D ActiveX control (webviewer3d.dll) in SAP AG SAPgui...9.3 High
- microsoft gdi\+Off-by-one error in the GpFont::SetData function in gdiplus.dll in Microsoft GDI+ on Windows XP...4.3 Medium
- microsoft subsystem for unix-based applications, windows server 2008, windows services for unix +1 more +3 moreMultiple unspecified vulnerabilities in (1) unlzh.c and (2) unpack.c in the gzip libraries in...10.0 High
- ezbsystems ultraisoMultiple buffer overflows in UltraISO 9.3.1.2633, and possibly other versions before 9.3.3.2685,...9.3 High
- ezbsystems ultraisoMultiple format string vulnerabilities in UltraISO 9.3.1.2633, and possibly other versions before...9.3 High
- gnu screenRace condition in GNU screen 4.0.3 allows local users to create or overwrite arbitrary files via...1.9 Low
- gnu screenGNU screen 4.0.3 creates the /tmp/screen-exchange temporary file with world-readable permissions,...4.9 Medium
- mozilla bugzillaCross-site request forgery (CSRF) vulnerability in attachment.cgi in Bugzilla 3.2 before 3.2.3, 3...6.8 Medium
- precisionid data matrix barcode activex controlMultiple insecure method vulnerabilities in PRECIS~2.DLL in the PrecisionID Datamatrix ActiveX...7.8 High
- bluecoat proxysg, proxysg sg210-10, proxysg sg210-25 +16 more +18 moreBlue Coat ProxySG, when transparent interception mode is enabled, uses the HTTP Host header to...5.8 Medium
- wiresharkFormat string vulnerability in the PROFINET/DCP (PN-DCP) dissector in Wireshark 1.0.6 and earlier...10.0 High
- w3 amayaStack-based buffer overflow in W3C Amaya Web Browser 11.1 allows remote attackers to execute...9.3 High
- sun opensolaris, solaris +1 moreRace condition in the dircmp script in Sun Solaris 8 through 10, and OpenSolaris snv_01 through...4.4 Medium
- futomi cgi cafe access analyzer cgiUnspecified vulnerability in futomi's CGI Cafe Access Analyzer CGI Professional Version 4.11.5...7.5 High
- trendmicro internet securityThe TrendMicro Activity Monitor Module (tmactmon.sys) 2.52.0.1002 in Trend Micro Internet Pro...7.2 High
- tiki tikiwiki cms\/groupwareCross-site scripting (XSS) vulnerability in TikiWiki (Tiki) CMS/Groupware 2.2 allows remote...4.3 Medium