Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2009
April

CVEs published in April 2009

567 vulnerabilities, 92 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

viart shopcart_save.php in ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to cause a denial of...CVE-2008-67665.0 MediumApril 28, 2009
viart shopViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to access the contents of an arbitrary...CVE-2008-6765Public exploit5.0 MediumApril 28, 2009
hypersilence silentum loginsysCross-site scripting (XSS) vulnerability in login.php in Silentum LoginSys 1.0.0 allows remote...CVE-2008-6764Public exploit4.3 MediumApril 28, 2009
hypersilence silentum loginsyslogin2.php in Silentum LoginSys 1.0.0 allows remote attackers to bypass authentication and obtain...CVE-2008-6763Public exploit7.5 HighApril 28, 2009
wordpressOpen redirect vulnerability in wp-admin/upgrade.php in WordPress, probably 2.6.x, allows remote...CVE-2008-6762Fix available4.3 MediumApril 28, 2009
china-on-site flexcustomer0.0.6Static code injection vulnerability in admin/install.php in Flexcustomer 0.0.6 might allow remote...CVE-2008-6761Public exploit10.0 HighApril 28, 2009
viart shopViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to obtain sensitive information via an...CVE-2008-67604.3 MediumApril 28, 2009
viart shopViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to obtain sensitive information via a...CVE-2008-67594.3 MediumApril 28, 2009
viart shopCross-site request forgery (CSRF) vulnerability in cart_save.php in ViArt Shop (aka Shopping Cart...CVE-2008-6758Public exploit6.8 MediumApril 28, 2009
viart shopCross-site scripting (XSS) vulnerability in manuals_search.php in ViArt Shop (aka Shopping Cart)...CVE-2008-6757Public exploit4.3 MediumApril 28, 2009
hp openview network node managerInteger overflow in ovalarmsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7...CVE-2008-2438EPSS 11.4%10.0 HighApril 28, 2009
bluevirus-design sma-dbCross-site scripting (XSS) vulnerability in startpage.php in SMA-DB 0.3.12 allows remote...CVE-2009-1451Public exploit4.3 MediumApril 28, 2009
bluevirus-design sma-dbPHP remote file inclusion vulnerability in format.php in SMA-DB 0.3.12 allows remote attackers to...CVE-2009-1450Public exploit7.5 HighApril 28, 2009
debian libdbd-pg-perlMemory leak in the dequote_bytea function in quote.c in the DBD::Pg (aka DBD-Pg or libdbd-pg-perl...CVE-2009-1341Fix available5.0 MediumApril 28, 2009
cmu dbd\Heap-based buffer overflow in the DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module 1.49 for Perl...CVE-2009-0663Fix available7.5 HighApril 28, 2009
coolplayerStack-based buffer overflow in PortableApps CoolPlayer Portable (aka CoolPlayer+ Portable) 2.19.1...CVE-2009-1449Public exploit9.3 HighApril 27, 2009
lovpop apricotCross-site scripting (XSS) vulnerability in apricot.php in LovPop.net APRICOT, probably 1.20,...CVE-2009-14484.3 MediumApril 27, 2009
sun jdkSpring Framework Inefficient Regular Expression ComplexityCVE-2009-1190Fix available5.0 MediumApril 27, 2009
zoneminderZoneMinder 1.23.3 on Gentoo Linux uses 0644 permissions for /etc/zm.conf, which allows local...CVE-2008-6756Fix available2.1 LowApril 27, 2009
zoneminderZoneMinder 1.23.3 on Fedora 10 sets the ownership of /etc/zm.conf to the apache user account, and...CVE-2008-6755Fix available5.0 MediumApril 27, 2009
e-cart free shopping cartUnrestricted file upload vulnerability in admin/editor/image.php in e-cart.biz Free Shopping Cart...CVE-2009-1447Public exploit6.8 MediumApril 27, 2009
elkagroup image galleryUnrestricted file upload vulnerability in upload.php in Elkagroup Image Gallery 1.0 allows remote...CVE-2009-1446Public exploit6.5 MediumApril 27, 2009
ivano culmine webportal cmsMultiple directory traversal vulnerabilities in WebPortal CMS 0.8-beta allow remote attackers to ...CVE-2009-1445Public exploit7.5 HighApril 27, 2009
webportal cmsPHP remote file inclusion vulnerability in indexk.php in WebPortal CMS 0.8-beta allows remote...CVE-2009-1444Public exploit7.5 HighApril 27, 2009
ocsinventory-ng ocs inventory ngMultiple unspecified vulnerabilities in the Server component in OCS Inventory NG before 1.02 have...CVE-2009-1443Public exploitFix available10.0 HighApril 27, 2009
mephisteus the personal sticky threadsThe Personal Sticky Threads addon 1.0.3c for vBulletin allows remote authenticated users to read...CVE-2008-67544.0 MediumApril 27, 2009
amuleIncomplete blacklist vulnerability in DownloadListCtrl.cpp in amule 2.2.4 allows remote attackers...CVE-2009-1440Fix available6.8 MediumApril 27, 2009
linux kernelBuffer overflow in fs/cifs/connect.c in CIFS in the Linux kernel 2.6.29 and earlier allows remote...CVE-2009-14397.8 HighApril 27, 2009
konstanty bialkowski libmodplugInteger overflow in the CSoundFile::ReadMed function (src/load_med.cpp) in libmodplug before 0.8...CVE-2009-1438Fix available7.5 HighApril 27, 2009
coolplayerStack-based buffer overflow in PortableApps CoolPlayer Portable (aka CoolPlayer+ Portable) 2.19.6...CVE-2009-1437Public exploitEPSS 14.0%9.3 HighApril 27, 2009
freebsdThe db interface in libc in FreeBSD 6.3, 6.4, 7.0, 7.1, and 7.2-PRERELEASE does not properly...CVE-2009-1436Public exploit4.9 MediumApril 27, 2009
trendmicro officescanNTRtScan.exe in Trend Micro OfficeScan Client 8.0 SP1 and 8.0 SP1 Patch 1 allows local users to...CVE-2009-1435Public exploit2.1 LowApril 27, 2009
freedesktop dbusThe _dbus_validate_signature_with_reason function (dbus-marshal-validate.c) in D-Bus (aka DBus)...CVE-2009-1189Fix available3.6 LowApril 27, 2009
silverstripeSQL injection vulnerability in SilverStripe before 2.2.2 allows remote attackers to execute...CVE-2008-67537.5 HighApril 27, 2009
silverstripeSQL injection vulnerability in File::find (filesystem/File.php) in SilverStripe before 2.3.1...CVE-2009-14337.5 HighApril 24, 2009
google chromeGoogle Chrome 2.0.x lets modifications to the global object persist across a page transition,...CVE-2009-14144.3 MediumApril 24, 2009
google chromeGoogle Chrome 1.0.x does not cancel timeouts upon a page transition, which makes it easier for...CVE-2009-14134.3 MediumApril 24, 2009
google chromeArgument injection vulnerability in the chromehtml: protocol handler in Google Chrome before 1.0...CVE-2009-14127.8 HighApril 24, 2009
linux kernelThe (1) agp_generic_alloc_page and (2) agp_generic_alloc_pages functions in drivers/char/agp...CVE-2009-11924.9 MediumApril 24, 2009
tim hockin acpidACPI Event Daemon (acpid) before 1.0.10 allows remote attackers to cause a denial of service (CPU...CVE-2009-0798Fix available5.0 MediumApril 24, 2009
apple cupsThe web interface for CUPS before 1.3.10 does not validate the HTTP Host header in a client...CVE-2009-0164Fix available6.4 MediumApril 24, 2009
symantec brightmail gateway applianceMultiple unspecified vulnerabilities in the Control Center in Symantec Brightmail Gateway...CVE-2009-00649.0 HighApril 24, 2009
symantec brightmail gateway applianceCross-site scripting (XSS) vulnerability in the Control Center in Symantec Brightmail Gateway...CVE-2009-00634.3 MediumApril 24, 2009
neocrome seditioSQL injection vulnerability in events/inc/events.inc.php in the Events plugin for Seditio CMS 1.0...CVE-2009-1411Public exploit7.5 HighApril 24, 2009
opensolution quick.cms.liteSQL injection vulnerability in index.php in Quick.Cms.Lite 0.5 allows remote attackers to execute...CVE-2009-1410Public exploit7.5 HighApril 24, 2009
e107SQL injection vulnerability in usersettings.php in e107 0.7.15 and earlier, when "Extended User...CVE-2009-1409Public exploit5.1 MediumApril 24, 2009
webspellCross-site scripting (XSS) vulnerability in webSPELL 4.2.0c allows remote attackers to inject...CVE-2009-1408Public exploit4.3 MediumApril 24, 2009
wonko notftpDirectory traversal vulnerability in config.php in NotFTP 1.3.1 allows remote attackers to read...CVE-2009-1407Public exploit6.8 MediumApril 24, 2009
sweetphp totalcalendarDirectory traversal vulnerability in cms_detect.php in TotalCalendar 2.4 allows remote attackers...CVE-2009-1406Public exploit6.8 MediumApril 24, 2009
pastel pastelcmsDirectory traversal vulnerability in index.php in PastelCMS 0.8.0, when magic_quotes_gpc is...CVE-2009-1405Public exploit6.8 MediumApril 24, 2009
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open