CVEs published in April 2009
567 vulnerabilities, 92 critical, 1 exploited.
- sun opensolarisUnspecified vulnerability in the SCTP sockets implementation in Sun OpenSolaris snv_106 through...4.9 Medium
- linux kernelThe kill_something_info function in kernel/signal.c in the Linux kernel before 2.6.28 does not...4.6 Medium
- linux kernelThe exit_notify function in kernel/exit.c in the Linux kernel before 2.6.30-rc1 does not restrict...4.4 Medium
- linux kernelfs/nfs/client.c in the Linux kernel before 2.6.23 does not properly initialize a certain...4.9 Medium
- maharaMultiple cross-site scripting (XSS) vulnerabilities in Mahara 1.0.x before 1.0.11 and 1.1.x...4.3 Medium
- gofoxy foxyFoxy P2P software allows remote attackers to cause a denial of service (memory consumption) via a...4.3 Medium
- simple machines forumSQL injection vulnerability in Load.php in Simple Machines Forum (SMF) 1.1.4 and earlier allows...7.5 High
- homapPHP remote file inclusion vulnerability in html/admin/modules/plugin_admin.php in HoMaP-CMS 0.1...6.8 Medium
- toddwoolums asp downloadTodd Woolums ASP Download management script 1.03 does not require authentication for...7.5 High
- mark girling myshoutproMyShoutPro 1.2 allows remote attackers to bypass authentication and gain administrative access by...7.5 High
- ea crysisCrysis 1.21 and earlier allows remote attackers to obtain sensitive player information such as...7.8 High
- circulargenius flat calendarFlat Calendar 1.1 does not properly restrict access to administrative functions, which allows...6.4 Medium
- thaiquickcartDirectory traversal vulnerability in qc/index.php in ThaiQuickCart 3 allows remote attackers to...5.8 Medium
- keller web admin kwaDirectory traversal vulnerability in Public/index.php in Keller Web Admin CMS 0.94 Pro allows...9.3 High
- dnnsoftware dotnetnukeCross-site scripting (XSS) vulnerability in the error handling page in DotNetNuke 4.6.2 through 4...4.3 Medium
- dnnsoftware dotnetnukeCross-site scripting (XSS) vulnerability in the Language skin object in DotNetNuke before 4.8.4...4.3 Medium
- mark girling myshoutproCross-site scripting (XSS) vulnerability in MyShoutPro before 1.2 allows remote attackers to...4.3 Medium
- elecard avc hd playerStack-based buffer overflow in Elecard AVC HD Player allows remote attackers to execute arbitrary...9.3 High
- ibm aixStack-based buffer overflow in muxatmd in IBM AIX 5.2, 5.3, and 6.1 allows local users to gain...7.2 High
- sergey lyubka mongooseDirectory traversal vulnerability in Mongoose 2.4 allows remote attackers to read arbitrary files...4.0 Medium
- sebastian fernandez zervitBuffer overflow in the http_parse_hex function in libz/misc.c in Zervit Webserver 0.02 allows...5.0 Medium
- dawningsoft powerchmStack-based buffer overflow in Dawningsoft PowerCHM 5.7 allows remote attackers to cause a denial...9.3 High
- heikki ylinen apolloHeap-based buffer overflow in Apollo 37zz allows remote attackers to cause a denial of service ...9.3 High
- novell netidentity client1.2.3Unspecified vulnerability in xtagent.exe in Novell NetIdentity Client before 1.2.4 allows remote...10.0 High
- redhat strongholdCross-site scripting (XSS) vulnerability in C2Net Stronghold 2.3 allows remote attackers to...4.3 Medium
- wiresharkUnspecified vulnerability in Wireshark before 1.0.7 has unknown impact and attack vectors.10.0 High
- hp storageworks storage mirroringUnspecified vulnerability in HP StorageWorks Storage Mirroring 5 before 5.1.1.1090.15 allows...10.0 High
- hp storageworks storage mirroringUnspecified vulnerability in HP StorageWorks Storage Mirroring 5 before 5.1.1.1090.15 allows...5.0 Medium
- hp storageworks storage mirroringUnspecified vulnerability in HP StorageWorks Storage Mirroring 5 before 5.1.1.1090.15 allows...7.5 High
- hp storage essentialsUnspecified vulnerability in Secure NaviCLI in HP Storage Essentials 6.0.2 through 6.0.4 allows...6.5 Medium
git-coreDebiangit-core - privilege escalationNo score- llnl slurmSimple Linux Utility for Resource Management (SLURM) 1.2 and 1.3 before 1.3.14 does not properly...7.2 High
- chcounterMultiple SQL injection vulnerabilities in stats/index.php in chCounter 3.1.3 allow remote...6.8 Medium
- interguias nethotelesSQL injection vulnerability in publico/ficha.php in NetHoteles 3.0 allows remote attackers to...7.5 High
- cpcommerceSQL injection vulnerability in document.php in cpCommerce 1.2.8 allows remote attackers to...7.5 High
- drupal localization clientCross-site scripting (XSS) vulnerability in the Localization client module 5.x before 5.x-1.2 and...4.3 Medium
- drupal printCross-site scripting (XSS) vulnerability in the Print (aka Printer, e-mail and PDF versions)...4.3 Medium
- drupal cck comment referenceCross-site scripting (XSS) vulnerability in the CCK comment reference module 6.x before 6.x-1.2,...4.3 Medium
- china-on-site flexphplinkUnrestricted file upload vulnerability in submitlink.php in FlexPHPLink Pro 0.0.7 allows remote...9.3 High
- china-on-site flexphplinkMultiple SQL injection vulnerabilities in admin/usercheck.php in FlexPHPLink Pro 0.0.6 and 0.0.7,...6.8 Medium
- phpmotionMultiple cross-site request forgery (CSRF) vulnerabilities in password.php in PHPmotion 2.1 and...6.8 Medium
- phpnuke php-nukeSQL injection vulnerability in the Sections module in PHP-Nuke, probably before 8.0, allows...7.5 High
- myupb upbCross-site scripting (XSS) vulnerability in Ultimate PHP Board (UPB) 2.2.2, 2.2.1, and earlier 2...4.3 Medium
- microsoft internet explorerMicrosoft Internet Explorer 7 and 8 on Windows XP and Vista allows remote attackers to cause a...4.3 Medium
- ibm tivoli continuous data protection for filesCross-site scripting (XSS) vulnerability in login/FilepathLogin.html in IBM Tivoli Continuous...4.3 Medium
- hp deskjet 6840Cross-site scripting (XSS) vulnerability in refresh_rate.htm in the web interface on the HP...4.3 Medium
- sun java system directory serverThe Online Help feature in Sun Java System Directory Server 5.2 and Enterprise Edition 5 allows...5.0 Medium
- microsoft windows media playerInteger overflow in Microsoft Windows Media Player (WMP) 11.0.5721.5260 allows remote attackers...9.3 High
- apache geronimoApache Geronimo Application Server CSRF vulnerabilities6.8 Medium
- apache geronimoApache Geronimo Application Server multiple cross-site scripting (XSS) vulnerabilities4.3 Medium
- Show moreLoading…