CVEs published in April 2009
567 vulnerabilities, 92 critical, 1 exploited.
- pastel pastelcmsSQL injection vulnerability in admin.php in PastelCMS 0.8.0, when magic_quotes_gpc is disabled,...6.8 Medium
- creloaded cre loadedSQL injection vulnerability in product_info.php in CRE Loaded 6.2 allows remote attackers to...7.5 High
- revouadminlogin/password.php in the Twitter Clone (TClone) plugin for ReVou Micro Blogging does not...7.5 High
- revou tcloneUnrestricted file upload vulnerability in index.php in the Twitter Clone (TClone) plugin for...6.8 Medium
- china-on-site flexphpdirectoryUnrestricted file upload vulnerability in add.php in FlexPHPDirectory 0.0.1 allows remote...6.8 Medium
- china-on-site flexphpdirectoryMultiple SQL injection vulnerabilities in admin/usercheck.php in FlexPHPDirectory 0.0.1, when...6.8 Medium
- megacuboEval injection vulnerability in Megacubo 5.0.7 allows remote attackers to inject and execute...9.3 High
- popplerInteger overflow in the JBIG2 decoding feature in the SplashBitmap::SplashBitmap function in...5.0 Medium
- popplerInteger overflow in the JBIG2 decoding feature in Poppler before 0.10.6 allows remote attackers...5.0 Medium
- foolabs xpdf, glyphandcog xpdfreader +1 moreInteger overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, as used in Poppler and other...10.0 High
- sun java system delegated administratorCRLF injection vulnerability in da/DA/Login in Sun Java System Delegated Administrator 6.2...6.8 Medium
- apache http server, canonical ubuntu linux +1 moremod_proxy_ajp.c in the mod_proxy_ajp module in the Apache HTTP Server 2.2.11 allows remote...5.0 Medium
- apple cups, foolabs xpdf, poppler +1 more +3 moreThe JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6,...4.3 Medium
- apple cups, foolabs xpdf, poppler +1 more +3 moreMultiple buffer overflows in the JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and...7.5 High
- apple cups, foolabs xpdf, poppler +1 more +3 moreThe JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and...4.3 Medium
- apple cups, foolabs xpdf, poppler +1 more +3 moreThe JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and...6.8 Medium
- apple cups, foolabs xpdf, poppler +1 more +3 moreInteger overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier,...6.8 Medium
- apple cups, foolabs xpdf, poppler +1 more +3 moreMultiple "input validation flaws" in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9...6.8 Medium
- apple cups, foolabs xpdf, poppler +1 more +3 moreThe JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and...4.3 Medium
- plone plonepasModerate severity vulnerability that affects Products.PlonePAS6.0 Medium
- apple cups, foolabs xpdf, glyphandcog xpdfreader +2 moreHeap-based buffer overflow in Xpdf 3.02pl2 and earlier, CUPS 1.3.9, and probably other products,...6.8 Medium
- apple cups, foolabs xpdf, glyphandcog xpdfreader +1 more +3 moreThe JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allows...4.3 Medium
- apple cups, foolabs xpdf, glyphandcog xpdfreader +2 moreMultiple integer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and...4.3 Medium
- apple cups, foolabs xpdf, glyphandcog xpdfreader +2 moreMultiple buffer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and...4.3 Medium
- dotprojectdotProject before 2.1.2 does not properly restrict access to administrative pages, which allows...6.8 Medium
- horde turba h3Cross-site scripting (XSS) vulnerability in the contact display view in Turba Contact Manager H3...4.3 Medium
- blogphpindex.php in BlogPHP 2.0 allows remote attackers to gain administrator privileges via a crafted...7.5 High
- cybozu dezie, garoon, office +2 moreCross-site request forgery (CSRF) vulnerability in Cybozu Office 6, Cybozu Dezie before 6.0(1.0),...6.8 Medium
- clamavStack-based buffer overflow in the cli_url_canon function in libclamav/phishcheck.c in ClamAV...10.0 High
- xilisoft video converterStack-based buffer overflow in ape_plugin.plg in Xilisoft Video Converter 3.1.53.0704n and 5.1.23...9.3 High
- mozilo mozilocmsmoziloCMS 1.11 allows remote attackers to obtain sensitive information via the (1) gal[]...5.0 Medium
- mozilo mozilocmsDirectory traversal vulnerability in index.php in moziloCMS 1.11 allows remote attackers to read...7.5 High
- mozilo mozilocmsCross-site scripting (XSS) vulnerability in index.php in moziloCMS 1.11 allows remote attackers...4.3 Medium
- dnnsoftware dotnetnukeCross-site scripting (XSS) vulnerability in Website\admin\Sales\paypalipn.aspx in DotNetNuke (DNN...4.3 Medium
- shock-therapy rsmscriptRSMScript 1.21 allows remote attackers to bypass authentication and gain administrative...7.5 High
- chcounterSQL injection vulnerability in administration/index.php in chCounter 3.1.3 allows remote...6.8 Medium
- gscripts dns toolsdig.php in GScripts.net DNS Tools allows remote attackers to execute arbitrary commands via shell...10.0 High
- mozilla firefox, seamonkey +1 moreMozilla Firefox before 3.0.9 and SeaMonkey 1.1.17 do not block javascript: URIs in Refresh...4.3 Medium
- mozilla firefox, seamonkey +1 moreMozilla Firefox before 3.0.9 and SeaMonkey before 1.1.17 allow user-assisted remote attackers to...4.3 Medium
- mozilla firefoxCross-site scripting (XSS) vulnerability in the MozSearch plugin implementation in Mozilla...4.3 Medium
- mozilla firefox, seamonkey, thunderbird +2 moreMozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey do not properly implement the Same...4.3 Medium
- mozilla firefox, seamonkey, thunderbird +2 moreCross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.0.9, Thunderbird, and...4.3 Medium
- mozilla firefox, seamonkey, thunderbird +2 moreThe view-source: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey...6.8 Medium
- mozilla firefox, seamonkey, thunderbird +2 moreThe jar: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey does not...4.3 Medium
- mozilla firefox, seamonkey, thunderbird +2 moreThe JavaScript engine in Mozilla Firefox before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey...5.0 Medium
- mozilla firefox, seamonkey, thunderbird +2 moreThe JavaScript engine in Mozilla Firefox 3.x before 3.0.9, Thunderbird before 2.0.0.22, and...5.0 Medium
- mozilla firefox, seamonkey, thunderbird +2 moreThe browser engine in Mozilla Firefox before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey...5.0 Medium
- mozilla firefox, seamonkey, thunderbird +2 moreThe browser engine in Mozilla Firefox 3.x before 3.0.9, Thunderbird before 2.0.0.22, and...5.0 Medium
- rim blackberry enterprise serverCross-site scripting (XSS) vulnerability in the "Customize Statistics Page" (admin/statistics...4.3 Medium
- linux kernelThe __inet6_check_established function in net/ipv6/inet6_hashtables.c in the Linux kernel before...7.1 High
- Show moreLoading…