CVEs published in April 2009
567 vulnerabilities, 92 critical, 1 exploited.
- thomas waggershauser air filemanagerUnspecified vulnerability in Frontend Filemanager (air_filemanager) 0.6.1 and earlier extension...7.5 High
- yourfreeworld apartment search scriptUnrestricted file upload vulnerability in editimage.php in Apartment Search Script allows remote...6.8 Medium
- yourfreeworld apartment search scriptCross-site scripting (XSS) vulnerability in listtest.php in Apartment Search Script allows remote...4.3 Medium
- bibtexBuffer overflow in BibTeX 0.99 allows context-dependent attackers to cause a denial of service ...5.0 Medium
- glfusionglFusion before 1.1.3 performs authentication with a user-provided password hash instead of a...6.8 Medium
- glfusionSQL injection vulnerability in private/system/lib-session.php in glFusion 1.1.2 and earlier...7.5 High
- glfusionCross-site scripting (XSS) vulnerability in glFusion before 1.1.3 allows remote attackers to...4.3 Medium
- joomlaMultiple cross-site request forgery (CSRF) vulnerabilities in the com_media component for Joomla!...6.8 Medium
- joomlaMultiple cross-site scripting (XSS) vulnerabilities in Joomla! 1.5 through 1.5.9 allow remote...2.6 Low
- gravityboardx gravity board xStatic code injection vulnerability in forms/ajax/configure.php in Gravity Board X (GBX) 2.0 BETA...7.5 High
- gravityboardx gravity board xSQL injection vulnerability in index.php in Gravity Board X (GBX) 2.0 BETA allows remote...7.5 High
- sun opensolaris, solaris +1 moreXScreenSaver in Sun Solaris 10 and OpenSolaris before snv_109, and Solaris 8 and 9 with GNOME 2.0...2.1 Low
- apache tilesApache Tiles Vulnerable to XSS via EL Expression Injection6.8 Medium
- cisco pix, adaptive security appliance 5500 +1 moreCisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.0 before 7.0(8...4.3 Medium
- cisco pix, adaptive security appliance 5500 +1 moreUnspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX...7.8 High
- cisco adaptive security appliance 5500, pix +1 moreUnspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 Series devices 7.0...7.8 High
- cisco pix, adaptive security appliance 5500 +1 moreMemory leak on Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7...7.8 High
- cisco adaptive security appliance 5500, pix +1 moreUnspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 Series devices 8.0...5.7 Medium
- cisco pix, adaptive security appliance 5500 +1 moreCisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.1(1) through 7...7.8 High
- foolabs xpdf, glyphandcog xpdfreader +1 moreUntrusted search path vulnerability in the Gentoo package of Xpdf before 3.02-r2 allows local...6.9 Medium
- littlecms lcms, sun openjdk +1 morecmsxform.c in LittleCMS (aka lcms or liblcms) 1.18, as used in OpenJDK and other products, allows...4.3 Medium
- irfanview formatsInteger overflow in the FORMATS Plugin before 4.23 for IrfanView allows remote attackers to...9.3 High
- apache strutsApache Struts is vulnerable to Cross-site Scripting4.3 Medium
- dojotoolkit dojoCross-Site Scripting in dojo4.3 Medium
- apache tomcat, mod jk +1 moreThe JK Connector (aka mod_jk) 1.2.0 through 1.2.26 in Apache Tomcat allows remote attackers to...2.6 Low
- apache strutsApache Struts Cross-site Scripting vulnerability4.3 Medium
- apache struts, dojotoolkit dojo +1 moreApache Struts Dojo Plugin XSS Vulnerability4.3 Medium
- toni mueller roundupRoundup Improper Access Control5.5 Medium
- openafs, unix +1 moreHeap-based buffer overflow in the cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1...10.0 High
- ibm afs, openafs +1 moreThe cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58, and IBM...7.8 High
- mit kerberosThe asn1buf_imbed function in the ASN.1 decoder in MIT Kerberos 5 (aka krb5) 1.6.3, when PK-INIT...4.3 Medium
- mit kerberos 5, apple mac os x, canonical ubuntu linux +6 more +8 moreThe asn1_decode_generaltime function in lib/krb5/asn.1/asn1_decode.c in the ASN.1 GeneralizedTime...10.0 High
- mit kerberos, kerberos 5 +1 moreThe get_input_token function in the SPNEGO implementation in MIT Kerberos 5 (aka krb5) 1.5...5.8 Medium
- xine xine-libInteger overflow in the qt_error parse_trak_atom function in demuxers/demux_qt.c in xine-lib 1.1...5.0 Medium
- andrew j.korty pam sshpam_ssh 1.92 and possibly other versions, as used when PAM is compiled with USE=ssh, generates...5.0 Medium
- phpThe JSON_parser function (ext/json/JSON_parser.c) in PHP 5.2.x before 5.2.9 allows remote...5.0 Medium
- clamav, canonical ubuntu linux, debian linux +2 morelibclamav/untar.c in ClamAV before 0.95 allows remote attackers to cause a denial of service ...7.8 High
- clamavlibclamav/pe.c in ClamAV before 0.95 allows remote attackers to cause a denial of service (crash)...5.0 Medium
- ghostscriptBuffer overflow in the BaseFont writer module in Ghostscript 8.62, and possibly other versions,...5.0 Medium
- ghostscriptThe CCITTFax decoding filter in Ghostscript 8.60, 8.61, and possibly other versions, allows...7.5 High
- quickersiteSQL injection vulnerability in asp/includes/contact.asp in QuickerSite 1.8.5 allows remote...7.5 High
- quickersiteUnrestricted file upload vulnerability in fckeditor251/editor/filemanager/connectors/asp/upload...7.5 High
- quickersiteQuickerSite 1.8.5 allows remote attackers to obtain sensitive information via a request to...5.0 Medium
- quickersiteMultiple cross-site scripting (XSS) vulnerabilities in QuickerSite 1.8.5 allow remote attackers...4.3 Medium
- quickersitemailPage.asp in QuickerSite 1.8.5 allows remote attackers to flood e-mail accounts with messages...5.0 Medium
- quickersiteasp/bs_login.asp in QuickerSite 1.8.5 does not properly restrict access to administrative...7.5 High
- vertex4 sunageVertex4 SunAge 1.08.1 and earlier allows remote attackers to cause a denial of service ("runtime...5.0 Medium
- vertex4 sunageVertex4 SunAge 1.08.1 and earlier allows remote attackers to cause a denial of service (infinite...5.0 Medium
- vertex4 sunageInteger overflow in Vertex4 SunAge 1.08.1 and earlier allows remote attackers to cause a denial...5.0 Medium
- dirk bartley nweb2faxviewrq.php in nweb2fax 0.2.7 and earlier allows remote attackers to execute arbitrary code via...7.5 High
- Show moreLoading…