CVEs published in April 2009
567 vulnerabilities, 92 critical, 1 exploited.
- stadtaus download center liteUnspecified vulnerability in Download Center Lite before 2.1 has unknown impact and attack...10.0 High
- eponaUnspecified vulnerability in Epona 1.5rc3 allows remote attackers to obtain the real IP address...5.0 Medium
- xmlportalCross-site scripting (XSS) vulnerability in the search feature in XMLPortal 3.0 allows remote...4.3 Medium
- jath pala cookiecheckcookiecheck.php in CookieCheck 1.0 stores tmp/cc_sessions under the web root with insufficient...5.0 Medium
- sangoma wanpipeMultiple race conditions in WANPIPE before 3.3.6 have unknown impact and attack vectors related...10.0 High
- phpcredo phcdownloadCross-site scripting (XSS) vulnerability in upload/install/index.php in PHCDownload 1.1 allows...4.3 Medium
- phpcredo phcdownloadSQL injection vulnerability in admin/index.php in PHCDownload 1.1 allows remote attackers to...7.5 High
- typo3 pmk rssnewsexport extensionSQL injection vulnerability in the pmk_rssnewsexport extension for TYPO3 allows remote attackers...7.5 High
- network-publishing rdf newsfeed exportSQL injection vulnerability in the cm_rdfexport extension for TYPO3 allows remote attackers to...7.5 High
- lightneasy, sqlite +1 moreSQL injection vulnerability in LightNEasy/lightneasy.php in LightNEasy SQLite 1.2.2 and earlier...7.5 High
- lightneasy, sqlite +1 morethumbsup.php in Thumbs-Up 1.12, as used in LightNEasy "no database" (aka flat) and SQLite 1.2.2...7.5 High
- lightneasyLightNEasy "no database" (aka flat) version 1.2.2, and possibly SQLite version 1.2.2, allows...5.0 Medium
- lightneasy, sqlite +1 moreMultiple directory traversal vulnerabilities in LightNEasy "no database" (aka flat) version 1.2.2...5.0 Medium
- lightneasy, sqlite +1 moreMultiple cross-site scripting (XSS) vulnerabilities in LightNEasy "no database" (aka flat)...4.3 Medium
- aztech adsl2\/2\+4-port routerAztech ADSL2/2+ 4-port router has a default "isp" account with a default "isp" password, which...10.0 High
- vuzeCross-site request forgery (CSRF) vulnerability in index.tmpl in Vuze (formerly Azureus HTML...6.8 Medium
- utorrent webuiCross-site request forgery (CSRF) vulnerability in gui/index.php in µTorrent (uTorrent) WebUI 0...6.8 Medium
- torrentfluxCross-site request forgery (CSRF) vulnerability in html/admin.php in TorrentFlux 2.3 allows...6.8 Medium
- torrentfluxhtml/index.php in TorrentFlux 2.3 allows remote authenticated users to execute arbitrary code via...6.0 Medium
- bsplayer bs.playerBuffer overflow in BS.player 2.27 build 959 allows remote attackers to cause a denial of service ...9.3 High
- apple mac os x, mac os x server +1 moreRace condition in the HFS vfs sysctl interface in XNU 1228.8.20 and earlier on Apple Mac OS X 10...7.2 High
- apple mac os x, mac os x server +1 moreMultiple memory leaks in XNU 1228.3.13 and earlier on Apple Mac OS X 10.5.6 and earlier allow...4.9 Medium
- apple mac os x, mac os x server +1 moreHeap-based buffer overflow in the AppleTalk networking stack in XNU 1228.3.13 and earlier on...10.0 High
- apple mac os x, mac os x server +1 moreXNU 1228.9.59 and earlier on Apple Mac OS X 10.5.6 and earlier does not properly restrict...7.2 High
- opera browserOpera 9.64 allows remote attackers to cause a denial of service (application crash) via an XML...4.3 Medium
- apple safariApple Safari 3.2.2 and 4 Beta on Windows allows remote attackers to cause a denial of service ...4.3 Medium
- mozilla firefoxMozilla Firefox 3.0.8 and earlier 3.0.x versions allows remote attackers to cause a denial of...4.3 Medium
- ibm db2 content managerUnspecified vulnerability in the eClient in IBM DB2 Content Manager 8.4.1 before 8.4.1.1 has...10.0 High
- podcast generator generatorStatic code injection vulnerability in index.php in Podcast Generator 1.1 and earlier allows...6.5 Medium
- arcadwy arcade scriptSQL injection vulnerability in Arcadwy Arcade Script allows remote attackers to execute arbitrary...7.5 High
- arcadwy arcade script cmsCross-site scripting (XSS) vulnerability in register.php in Arcadwy Arcade Script CMS allows...4.3 Medium
- checkpoint firewall-1 pki web service** DISPUTED ** NOTE: this issue has been disputed by the vendor. Buffer overflow in the PKI Web...10.0 High
- podcast generator generatorcore/admin/delete.php in Podcast Generator 1.1 and earlier does not properly restrict access to...7.5 High
- platinumprofitzone turnkey ebook storeCross-site scripting (XSS) vulnerability in index.php in Turnkey Ebook Store 1.1 allows remote...4.3 Medium
- scivox vsp stats processorSQL injection vulnerability in vsp-core/pub/themes/bismarck/gamestat.php in vsp stats processor 0...7.5 High
- fullrevolution aspwebcalendaraspWebCalendar Free Edition stores sensitive information under the web root with insufficient...5.0 Medium
- webeditionDirectory traversal vulnerability in index.php in webEdition 6.0.0.4 and earlier, when...5.1 Medium
- miniweb2 miniwebSQL injection vulnerability in index.php in Miniweb 2.0 allows remote attackers to execute...7.5 High
- phpaddeditlogin.php in PhpAddEdit 1.3 allows remote attackers to bypass authentication and gain...7.5 High
- funscripts red reservationsThe Red_Reservations script for ColdFusion stores sensitive information under the web root with...5.0 Medium
- webwizguide web wiz guestbookWeb Wiz Guestbook 6.0 stores sensitive information under the web root with insufficient access...5.0 Medium
- nortel cs1000Nortel Communication Server 1000 4.50.x allows remote attackers to obtain Web application...5.0 Medium
- nortel cs1000Multiple unspecified vulnerabilities in Nortel Communication Server 1000 4.50.x allow remote...10.0 High
- nortel cs1000Nortel MG1000S, Signaling Server, and Call Server on the Communications Server 1000 (CS1K) 4.50.x...10.0 High
- nortel cs1000Unspecified vulnerability in the "session limitation technique" in the FTP service on Nortel...7.8 High
- avaya communication managerUnspecified vulnerability in the SIP server in SIP Enablement Services (SES) in Avaya...6.8 Medium
- avaya communication managerUnspecified vulnerability in SIP Enablement Services (SES) in Avaya Communication Manager 3.1.x...7.5 High
- avaya communication managerMultiple SQL injection vulnerabilities in Avaya SIP Enablement Services (SES) in Avaya Avaya...6.8 Medium
- cisco adaptive security appliance, ios +1 moreCross-site scripting (XSS) vulnerability in +webvpn+/index.html in WebVPN on the Cisco Adaptive...4.3 Medium
- sun java system calendar server, one calendar server +1 moreSun Calendar Express Web Server in Sun ONE Calendar Server 6.0 and Sun Java System Calendar...5.0 Medium
- Show moreLoading…