Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2009
April

CVEs published in April 2009

567 vulnerabilities, 92 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

apache geronimoApache Geronimo Application Server multiple directory traversal vulnerabilitiesCVE-2008-5518Public exploitFix availableEPSS 35.9%9.4 HighApril 17, 2009
mini-stream easy rm to mp3 converterStack-based buffer overflow in Easy RM to MP3 Converter allows remote attackers to execute...CVE-2009-1330Public exploitEPSS 21.8%9.3 HighApril 17, 2009
mini-stream shadow stream recorderStack-based buffer overflow in Mini-stream Shadow Stream Recorder 3.0.1.7 allows remote attackers...CVE-2009-1329Public exploit9.3 HighApril 17, 2009
mini-stream rm-mp3 converterStack-based buffer overflow in Mini-stream RM-MP3 Converter 3.0.0.7 allows remote attackers to...CVE-2009-1328Public exploit9.3 HighApril 17, 2009
mini-stream wm downloaderStack-based buffer overflow in Mini-stream WM Downloader 3.0.0.9 allows remote attackers to...CVE-2009-1327Public exploit9.3 HighApril 17, 2009
mini-stream rm downloaderStack-based buffer overflow in Mini-stream RM Downloader 3.0.0.9 allows remote attackers to...CVE-2009-1326Public exploit9.3 HighApril 17, 2009
mini-stream ripperStack-based buffer overflow in Mini-stream Ripper 3.0.1.1 allows remote attackers to execute...CVE-2009-1325Public exploit9.3 HighApril 17, 2009
mini-stream asx to mp3 converterStack-based buffer overflow in Mini-stream ASX to MP3 Converter 3.0.0.7 allows remote attackers...CVE-2009-1324Public exploitEPSS 16.5%9.3 HighApril 17, 2009
webfileexplorer web file explorerSQL injection vulnerability in body.asp in Web File Explorer 3.1 allows remote attackers to...CVE-2009-1323Public exploit7.5 HighApril 17, 2009
humayun shabbir bhutta asp product catalogASP Product Catalog 1.0 stores sensitive information under the web root with insufficient access...CVE-2009-1322Public exploit5.0 MediumApril 17, 2009
humayun shabbir bhutta asp product catalogCross-site scripting (XSS) vulnerability in search.asp in ASP Product Catalog 1.0 allows remote...CVE-2009-1321Public exploit4.3 MediumApril 17, 2009
zazzle store builderMultiple cross-site scripting (XSS) vulnerabilities in include/zstore.php in Zazzle Store Builder...CVE-2009-13204.3 MediumApril 17, 2009
guestcal guest calDirectory traversal vulnerability in includes/ini.inc.php in GuestCal 2.1 allows remote attackers...CVE-2009-1319Public exploit7.5 HighApril 17, 2009
jamroomDirectory traversal vulnerability in index.php in Jamroom 3.1.2, 3.2.3 through 3.2.6, 4.0.2, and...CVE-2009-1318Public exploit6.5 MediumApril 17, 2009
aquacms aqua cmsMultiple SQL injection vulnerabilities in Aqua CMS 1.1, when magic_quotes_gpc is disabled, allow...CVE-2009-1317Public exploit6.8 MediumApril 17, 2009
abk-soft ablespaceMultiple SQL injection vulnerabilities in AbleSpace 1.0 allow remote attackers to execute...CVE-2009-1316Public exploit7.5 HighApril 17, 2009
abk-soft ablespaceMultiple cross-site scripting (XSS) vulnerabilities in AbleSpace 1.0 allow remote attackers to...CVE-2009-1315Public exploit4.3 MediumApril 17, 2009
cmscoutMultiple directory traversal vulnerabilities in CMScout 2.06, when register_globals is enabled,...CVE-2008-6726Public exploit6.0 MediumApril 17, 2009
cmscoutMultiple SQL injection vulnerabilities in CMScout 2.06 allow remote authenticated users to...CVE-2008-6725Public exploit6.0 MediumApril 17, 2009
patrick matthai pnopasteCross-site scripting (XSS) vulnerability in index.pl in Perl Nopaste 1.0 allows remote attackers...CVE-2008-67244.3 MediumApril 17, 2009
webfileexplorer web file explorerbody.asp in Web File Explorer 3.1 allows remote attackers to create arbitrary files and execute...CVE-2009-1314Public exploitEPSS 10.1%10.0 HighApril 17, 2009
freetype, apple iphone os, mac os x +6 more +8 moreMultiple integer overflows in FreeType 2.3.9 and earlier allow remote attackers to execute...CVE-2009-0946Fix available7.5 HighApril 17, 2009
apple cupsInteger overflow in the TIFF image decoding routines in CUPS 1.3.9 and earlier allows remote...CVE-2009-0163Fix available6.8 MediumApril 17, 2009
danskebank danskesikker.ocxMultiple stack-based buffer overflows in the Danske Bank e-Sec Control Module ActiveX control ...CVE-2008-11079.3 HighApril 17, 2009
mpg123Integer signedness error in the store_id3_text function in the ID3v2 code in mpg123 before 1.7.2...CVE-2009-1301Fix available10.0 HighApril 16, 2009
novell teaming, liferay enterprise portal +1 moreMultiple cross-site scripting (XSS) vulnerabilities in web/guest/home in the Liferay 4.3.0 portal...CVE-2009-1294Public exploit4.3 MediumApril 16, 2009
novell teamingThe web login functionality (c/portal/login) in Novell Teaming 1.0 through SP3 (1.0.3) generates...CVE-2009-12935.0 MediumApril 16, 2009
phpmyadminStatic code injection vulnerability in the getConfigFile function in setup/lib/ConfigFile.class...CVE-2009-1285Public exploitFix availableEPSS 10.9%7.5 HighApril 16, 2009
linux-pamLinux-PAM before 1.0.4 does not enforce the minimum password age (MINDAYS) as specified in /etc...CVE-2009-0579Fix available4.6 MediumApril 16, 2009
divx web playerInteger signedness error in DivX Web Player 1.4.2.7, and possibly earlier versions, allows remote...CVE-2008-52599.3 HighApril 16, 2009
sap guiInsecure method vulnerability in the KWEdit ActiveX control in SAP GUI 6.40 Patch 29 (KWEDIT.DLL...CVE-2008-4830Public exploitEPSS 27.6%9.3 HighApril 16, 2009
microsoft intelligent application gateway 2007Multiple stack-based buffer overflows in the Whale Client Components ActiveX control (WhlMgr.dll)...CVE-2007-2238Public exploitEPSS 45.5%9.3 HighApril 16, 2009
udev project udev, canonical ubuntu linux, debian linux +5 more +7 moreBuffer overflow in the util_path_encode function in udev/lib/libudev-util.c in udev before 1.4.1...CVE-2009-11862.1 LowApril 16, 2009
udev project udev, canonical ubuntu linux, debian linux +6 more +8 moreudev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which...CVE-2009-1185Public exploitFix availableEPSS 80.5%7.2 HighApril 16, 2009
emc replistorMultiple heap-based buffer overflows in EMC RepliStor 6.2 before SP5 and 6.3 before SP2 allow...CVE-2009-111910.0 HighApril 15, 2009
oracle application serverUnspecified vulnerability in the BI Publisher component in Oracle Application Server 5.6.2, 10.1...CVE-2009-10174.0 MediumApril 15, 2009
oracle bea product suiteUnspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9...CVE-2009-10168.5 HighApril 15, 2009
oracle jd edwards enterpriseone, peoplesoft enterprise +1 moreUnspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft...CVE-2009-10145.8 MediumApril 15, 2009
oracle jd edwards enterpriseone, peoplesoft enterprise +1 moreUnspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft...CVE-2009-10136.4 MediumApril 15, 2009
oracle bea product suiteUnspecified vulnerability in the plug-ins for Apache and IIS web servers in Oracle BEA WebLogic...CVE-2009-101210.0 HighApril 15, 2009
oracle application serverUnspecified vulnerability in the Outside In Technology component in Oracle Application Server 8.2...CVE-2009-10114.4 MediumApril 15, 2009
oracle application server, ibm websphere portal +1 moreUnspecified vulnerability in the Outside In Technology component in Oracle Application Server 8.2...CVE-2009-10104.4 MediumApril 15, 2009
oracle application server, ibm websphere portal +1 moreUnspecified vulnerability in the Outside In Technology component in Oracle Application Server 8.1...CVE-2009-10094.4 MediumApril 15, 2009
oracle application server, ibm websphere portal +1 moreUnspecified vulnerability in the Outside In Technology component in Oracle Application Server 8.2...CVE-2009-10084.4 MediumApril 15, 2009
oracle jrockitUnspecified vulnerability in the JRockit component in BEA Product Suite R27.6.2 and earlier, with...CVE-2009-100610.0 HighApril 15, 2009
oracle bea product suiteUnspecified vulnerability in the Oracle Data Service Integrator (AquaLogic Data Services Platform...CVE-2009-10054.1 MediumApril 15, 2009
oracle bea product suiteUnspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3 allows...CVE-2009-10044.0 MediumApril 15, 2009
oracle bea product suiteUnspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9...CVE-2009-10035.0 MediumApril 15, 2009
oracle bea product suiteUnspecified vulnerability in Oracle BEA WebLogic Server 10.3, 10.0 Gold through MP1, 9.2 Gold...CVE-2009-10025.8 MediumApril 15, 2009
oracle bea product suiteUnspecified vulnerability in Oracle BEA WebLogic Portal 8.1 Gold through SP6 allows remote...CVE-2009-10015.5 MediumApril 15, 2009
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open