CVEs published in April 2009
567 vulnerabilities, 92 critical, 1 exploited.
- james stone tunapieJames Stone Tunapie 2.1 allows remote attackers to execute arbitrary commands via shell...6.8 Medium
- james stone tunapieJames Stone Tunapie 2.1 allows local users to overwrite arbitrary files via a symlink attack on...4.4 Medium
- webbdomain webshop onlineCross-site scripting (XSS) vulnerability in detail.php in WEBBDOMAIN Multi Languages WebShop...4.3 Medium
- webbdomain webshopSQL injection vulnerability in getin.php in WEBBDOMAIN WebShop 1.2, 1.1, 1.02, and earlier allows...7.5 High
- webbdomain quizSQL injection vulnerability in getin.php in WEBBDOMAIN Quiz 1.02 and earlier allows remote...7.5 High
- webbdomain pollsSQL injection vulnerability in getin.php in WEBBDOMAIN Polls (aka Poll) 1.0 and 1.01 allows...7.5 High
- webbdomain petitionSQL injection vulnerability in getin.php in WEBBDOMAIN Petition 1.02, 2.0, and 3.0 allows remote...7.5 High
- webbdomain post cardSQL injection vulnerability in getin.php in WEBBDOMAIN Post Card (aka Web Postcards) 1.02 and...7.5 High
- webbdomian post cardSQL injection vulnerability in choosecard.php in WEBBDOMAIN Post Card (aka Web Postcards) 1.02, 1...7.5 High
- graphicsmagickUnspecified vulnerability in GraphicsMagick before 1.2.3 allows remote attackers to cause a...7.8 High
- grafxsoftware minicwbMultiple cross-site scripting (XSS) vulnerabilities in javascript/editor/editor/filemanager...4.3 Medium
- netlab classsystemUnrestricted file upload vulnerability in class/ApplyDB.php in ClassSystem 2.3 allows remote...6.8 Medium
- netlab classsystemMultiple SQL injection vulnerabilities in ClassSystem 2.3 allow remote attackers to execute...7.5 High
- sitexs cms cmsUnrestricted file upload vulnerability in adm/visual/upload.php in SiteXS CMS 0.1.1 allows remote...6.8 Medium
- zen-cart zen cartCross-site scripting (XSS) vulnerability in index.php in Zen Software Zen Cart 2008 allows remote...4.3 Medium
- zen-cart zen cartSQL injection vulnerability in index.php in Zen Software Zen Cart 2008 allows remote attackers to...7.5 High
- impliedbydesign ibd micro cmsMultiple SQL injection vulnerabilities in microcms-admin-login.php in Implied By Design (IBD)...7.5 High
- drupal feedapi mapperCross-site scripting (XSS) vulnerability in Feed element mapper 5.x before 5.x-1.1, a module for...4.3 Medium
- acutecp acute control panelMultiple PHP remote file inclusion vulnerabilities in Acute Control Panel 1.0.0 allow remote...7.5 High
- acutecp.rediscussed acutecpSQL injection vulnerability in login.php in Acute Control Panel 1.0.0 allows remote attackers to...7.5 High
- blogplusMultiple directory traversal vulnerabilities in Blogplus 1.0 allow remote attackers to include...7.5 High
- cccp-common-clan-portal-pasterbin cccp pastebinMultiple SQL injection vulnerabilities in the insert_to_pastebin function in php/cccp-admin/inc...7.5 High
- abweb minimal-abloguploader.php in minimal-ablog 0.4 does not properly restrict access, which allows remote...7.5 High
- abweb minimal-ablogUnrestricted file upload vulnerability in admin/uploader.php in Minimal ABlog 0.4 allows remote...6.8 Medium
- abweb minimal ablogSQL injection vulnerability in index.php in Minimal ABlog 0.4 allows remote attackers to execute...7.5 High
- ott phpcksecAbsolute path traversal vulnerability in phpcksec.php in Stefan Ott phpcksec 0.2.0 allows remote...6.4 Medium
- ott phpcksecCross-site scripting (XSS) vulnerability in phpcksec.php in Stefan Ott phpcksec 0.2 allows remote...4.3 Medium
- vmware ace, player, server +1 more +3 moreUnspecified vulnerability in vmci.sys in the Virtual Machine Communication Interface (VMCI) in...7.2 High
- vmware ace, player, server +1 more +3 moreUnspecified vulnerability in an ioctl in hcmon.sys in VMware Workstation 6.5.1 and earlier,...4.9 Medium
- vmware ace, player, server +1 more +3 moreHeap-based buffer overflow in the VNnc Codec in VMware Workstation 6.5.x before 6.5.2 build...6.8 Medium
- vmware ace, player, server +1 more +3 moreHeap-based buffer overflow in the VNnc Codec in VMware Workstation 6.5.x before 6.5.2 build...9.3 High
- vmware aceUnspecified vulnerability in the ACE shared folders implementation in the VMware Host Guest File...6.4 Medium
- vmware esx, esxi, virtualcenter +2 moreVI Client in VMware VirtualCenter before 2.5 Update 4, VMware ESXi 3.5 before Update 4, and...2.1 Low
- emc vmware player, vmware ace, esx +4 more +6 moreUnspecified vulnerability in a guest virtual device driver in VMware Workstation before 5.5.9...4.6 Medium
- linux kernelnet/ipv4/udp.c in the Linux kernel before 2.6.29.1 performs an unlocking step in certain...5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 more +4 moreThe vmx_set_msr function in arch/x86/kvm/vmx.c in the VMX implementation in the KVM subsystem in...4.9 Medium
- developiteasy events calendarMultiple SQL injection vulnerabilities in DevelopItEasy Events Calendar 1.2 allow remote...7.5 High
- matpo linkCross-site scripting (XSS) vulnerability in view.php in MatPo Link 1.2 Beta allows remote...4.3 Medium
- matpo linkSQL injection vulnerability in view.php in MatPo Link 1.2 Beta allows remote attackers to execute...7.5 High
- 2wire 1701hg, 1800hw, 2071hg +1 more +3 moreCross-site request forgery (CSRF) vulnerability in the xslt script in the web-based management...6.8 Medium
- debian apt, advanced package tool +1 moreapt-get in apt before 0.7.21 does not check for the correct error code from gpgv, which causes...10.0 High
- debian advanced package toolapt 0.7.20 does not check when the date command returns an "invalid date" error, which can...10.0 High
- picoflat cmsDirectory traversal vulnerability in index.php in PicoFlat CMS 0.5.9 allows remote attackers to...10.0 High
- ghostscript, argyllcms +1 moreMultiple integer overflows in icc.c in the International Color Consortium (ICC) Format library ...9.3 High
- ghostscriptHeap-based buffer overflow in the big2_decode_symbol_dict function (jbig2_symbol_dict.c) in the...9.3 High
- clamavUnspecified vulnerability in ClamAV before 0.95 allows remote attackers to bypass detection of...7.5 High
- ibm network multi-function security, proventia network mail security system, proventia desktop endpoint security +1 more +3 moreUnspecified vulnerability in the IBM Proventia engine 4.9.0.0.44 20081231, as used in IBM...10.0 High
- ibm db2IBM DB2 9.1 before FP7 returns incorrect query results in certain situations related to the order...5.0 Medium
- microsoft office, office powerpoint, powerpoint +2 moreMicrosoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3, and PowerPoint in Microsoft Office...9.3 High
- moinmo moinmoinMoinMoin Access Restrictions Bypassed due to improper ACL enforcement6.8 Medium
- Show moreLoading…