CVEs published in April 2009
567 vulnerabilities, 92 critical, 1 exploited.
- novell access managerNovell Access Manager 3 SP4 does not properly expire X.509 certificate sessions, which allows...1.9 Low
- ajsquare aj articleSQL injection vulnerability in index.php in AJ Square AJ Article allows remote attackers to...7.5 High
- ntpStack-based buffer overflow in the cookedprint function in ntpq/ntpq.c in ntpq in NTP before 4.2...6.8 Medium
- ibm advanced management moduleMultiple cross-site request forgery (CSRF) vulnerabilities in the web administration interface in...6.8 Medium
- ibm advanced management module, bladecenter +1 moreprivate/login.ssi in the Advanced Management Module (AMM) on the IBM BladeCenter, including the...4.0 Medium
- ibm advanced management module, bladecenter +1 moreMultiple cross-site scripting (XSS) vulnerabilities in the Advanced Management Module (AMM) on...4.3 Medium
- cisco subscriber edge services managerCross-site scripting (XSS) vulnerability in Cisco Subscriber Edge Services Manager (SESM) allows...4.3 Medium
- ibm lotus dominoThe IMAP task in the server in IBM Lotus Domino 8.0.2 before FP1 IF1 and 8.5 before IF3 allows...5.0 Medium
- wiresharkUnspecified vulnerability in Wireshark 0.99.6 through 1.0.6 allows remote attackers to cause a...5.0 Medium
- wiresharkThe Check Point High-Availability Protocol (CPHAP) dissector in Wireshark 0.9.6 through 1.0.6...4.3 Medium
- wiresharkUnspecified vulnerability in the LDAP dissector in Wireshark 0.99.2 through 1.0.6, when running...5.0 Medium
- vmware ace, esx, esxi +4 more +6 moreUnspecified vulnerability in the virtual machine display function in VMware Workstation 6.5.1 and...6.8 Medium
- sun openjdkInteger overflow in the PulseAudioTargetDataL class in src/java/org/classpath/icedtea/pulseaudio...5.0 Medium
- particlesoftware intralaunchInsecure method vulnerability in Particle Software IntraLaunch Application Launcher ActiveX...9.3 High
- filestream turbozip, hp openview performance agent, innermedia dynazip max +1 more +3 moreMultiple stack-based buffer overflows in DZIP32.DLL before 5.0.0.8 in DynaZip Max and DZIPS32.DLL...9.3 High
- deltascripts php linksSQL injection vulnerability in admin/adm_login.php in DeltaScripts PHP Links 1.3 and earlier...7.5 High
- uochm justlistitU&M Software Event Lister (aka JustListIt) 1.0 does not require administrative authentication for...7.5 High
- uochm justbookitU&M Software JustBookIt 1.0 does not require administrative authentication for all scripts in the...7.5 High
- uochm signupU&M Software Signup 1.0 and 1.1 does not require administrative authentication for all scripts in...7.5 High
- preprojects pre ads portalhomeadmin/adminhome.php in Pre ADS Portal 2.0 and earlier does not require administrative...7.5 High
- preprojects pre ads portalMultiple cross-site scripting (XSS) vulnerabilities in Pre ADS Portal 2.0 and earlier allow...4.3 Medium
- xecms project xecmsadmin.php in xeCMS 1.0.0 RC2 and earlier allows remote attackers to bypass authentication and...7.5 High
- massive entertainment wicWorld in Conflict (WIC) 1.008 and earlier allows remote attackers to cause a denial of service ...5.0 Medium
- ea crysisThe HTTP/XML-RPC service in Crysis 1.21 (game version 1.1.1.6156) and earlier allows remote...5.0 Medium
- avaya communication managerUnspecified vulnerability in the Web administration interface in Avaya Communication Manager 3.1...9.0 High
- avaya communication managerUnspecified vulnerability in the Web administration interface in Avaya Communication Manager 3.1...9.0 High
- avaya communication manager, sip enablement services +1 moreUnspecified vulnerability in the Web management interface in Avaya SIP Enablement Services (SES)...9.0 High
- avaya communication manager, sip enablement services +1 moreUnspecified vulnerability in the Web management interface in Avaya SIP Enablement Services (SES)...9.0 High
- avaya communication manager, sip enablement services +1 moreThe Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with...6.4 Medium
- avaya communication manager, sip enablement services +1 moreMultiple unspecified vulnerabilities in the Web management interface in Avaya SIP Enablement...7.8 High
- stalker-game s.t.a.l.k.e.r.\The MultipacketReciever::RecievePacket function in S.T.A.L.K.E.R.: Shadow of Chernobyl 1.0006 and...5.0 Medium
- stalker-game s.t.a.l.k.e.r.\Integer overflow in the NET_Compressor::Decompress function in S.T.A.L.K.E.R.: Shadow of...5.0 Medium
- stalker-game s.t.a.l.k.e.r.\Stack-based buffer overflow in the IPureServer::_Recieve function in S.T.A.L.K.E.R.: Shadow of...10.0 High
- stalker-game s.t.a.l.k.e.r.\S.T.A.L.K.E.R.: Shadow of Chernobyl 1.0006 and earlier allows remote attackers to cause a denial...5.0 Medium
- netscout visualizer, ngenius infinistream +1 moreNetScout (formerly Network General) Visualizer V2100 and InfiniStream i1730 do not restrict...7.5 High
- butterflymedia butterfly organizerMultiple cross-site scripting (XSS) vulnerabilities in Butterfly Organizer 2.0.0 allow remote...4.3 Medium
- typo3, typo3 tjs reslib +1 moreCross-site scripting (XSS) vulnerability in Resource Library (tjs_reslib) 0.1.0 and earlier...4.3 Medium
- michael fritz worldcupCross-site scripting (XSS) vulnerability in TARGET-E WorldCup Bets (worldcup) 2.0.0 and earlier...4.3 Medium
- michael fritz worldcupSQL injection vulnerability in TARGET-E WorldCup Bets (worldcup) 2.0.0 and earlier extension for...7.5 High
- manu oehler totoSQL injection vulnerability in Fussballtippspiel (toto) 0.1.1 and earlier extension for TYPO3...7.5 High
- frank naegler timtab sociableSQL injection vulnerability in TIMTAB social bookmark icons (timtab_sociable) 2.0.4 and earlier...7.5 High
- fr.simon rundell ste prayerSQL injection vulnerability in Random Prayer (ste_prayer) 0.0.1 for TYPO3 allows remote attackers...7.5 High
- sebastian baumann sb downloaderSQL injection vulnerability in Download system (sb_downloader) extension 0.1.4 and earlier for...7.5 High
- fr.simon rundell pd trainingcoursesSQL injection vulnerability in Diocese of Portsmouth Training Courses (pd_trainingcourses)...7.5 High
- diocese of portsmouth pd calendar todaySQL injection vulnerability in Diocese of Portsmouth Calendar Today (pd_calendar_today) extension...7.5 High
- typo3 nd antispamUnspecified vulnerability in nepa-design.de Spam Protection (nd_antispam) extension 1.0.3 for...7.5 High
- kevin renskers dmmjobcontrolSQL injection vulnerability in JobControl (dmmjobcontrol) 1.15.0 and earlier extension for TYPO3...7.5 High
- kevin renskers dmmjobcontrolCross-site scripting (XSS) vulnerability in JobControl (dmmjobcontrol) 1.15.0 and earlier...4.3 Medium
- david cadu dcdgooglemapCross-site scripting (XSS) vulnerability in DCD GoogleMap (dcdgooglemap) 1.1.0 and earlier...4.3 Medium
- jan bednarik cooluriSQL injection vulnerability in CoolURI (cooluri) 1.0.11 and earlier extension for TYPO3 allows...7.5 High
- Show moreLoading…