CVEs published in May 2009
364 vulnerabilities, 82 critical, 1 exploited.
- nullsoft winamp The Nullsoft Modern Skins Support module (gen_ff.dll) in Nullsoft Winamp before 5.552 allows... 9.3 High
- slsknet soulseek Stack-based buffer overflow in Soulseek 156 and 157 NS allows remote attackers to execute... 10.0 High
- wireshark Unspecified vulnerability in the PCNFSD dissector in Wireshark 0.8.20 through 1.0.7 allows remote... 5.0 Medium
- mozilla firefox Mozilla Firefox 3.0.10 allows remote attackers to cause a denial of service (infinite loop,... 5.0 Medium
- mozilla firefox The SVG component in Mozilla Firefox 3.0.4 allows remote attackers to cause a denial of service ... 5.0 Medium
- collector mygesuad modules/admuser.php in myGesuad 0.9.14 (aka 0.9) does not require administrative authentication,... 6.5 Medium
- collector mycolex modules/admuser.php in myColex 1.4.2 does not require administrative authentication, which allows... 4.0 Medium
- arcabit arcavir 2009 antivirus protection, arcavir 2009 internet security, arcavir 2009 system protection +1 more +3 more The ps_drv.sys kernel driver in ArcaBit ArcaVir 2009 Antivirus Protection 9.4.3201.9 and earlier,... 7.2 High
- stonetrip s3dplayer standalone, s3dplayer web +1 more The system.openURL function in StoneTrip Ston3D StandalonePlayer (aka S3DPlayer StandAlone) 1.6.2... 9.3 High
- microsoft directx, windows 2000, windows server 2003 +2 more +4 more Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in... 9.3 High
- drupal print Cross-site scripting (XSS) vulnerability in the Print (aka Printer, e-mail and PDF versions)... 2.6 Low
- gonzalo maser com artforms Multiple PHP remote file inclusion vulnerabilities in the InterJoomla ArtForms (com_artforms)... 7.5 High
- dmxready registration manager DMXReady Registration Manager 1.1 stores sensitive information under the web root with... 5.0 Medium
- 2daybiz custom t-shirt design script Cross-site scripting (XSS) vulnerability in product.php in 2daybiz Custom T-shirt Design Script... 4.3 Medium
- 2daybiz custom t-shirt design script SQL injection vulnerability in product.php in 2daybiz Custom T-shirt Design Script allows remote... 7.5 High
- maxcms SQL injection vulnerability in admin/admin_manager.asp in MaxCMS 2.0 allows remote attackers to... 7.5 High
- digimode10 maya Multiple buffer overflows in DigiMode Maya 1.0.2 allow remote attackers to execute arbitrary code... 9.3 High
- mygamescript my game script SQL injection vulnerability in admin.php in My Game Script 2.0 allows remote attackers to execute... 7.5 High
- sonicspot audioactive player Stack-based buffer overflow in Sonic Spot Audioactive Player 1.93b allows remote attackers to... 9.3 High
- jevontech phpenpals SQL injection vulnerability in mail.php in PHPenpals 1.1 and earlier allows remote attackers to... 7.5 High
- submitterscript Multiple SQL injection vulnerabilities in admin/index.php in Submitter Script 2 allow remote... 7.5 High
- collector mygesuad Multiple SQL injection vulnerabilities in myGesuad 0.9.14 (aka 0.9) allow remote attackers to... 6.0 Medium
- collector mygesuad Multiple cross-site scripting (XSS) vulnerabilities in myGesuad 0.9.14 (aka 0.9) allow remote... 4.3 Medium
- collector mycolex Multiple SQL injection vulnerabilities in myColex 1.4.2 allow remote attackers to execute... 6.0 Medium
- collector mycolex Multiple cross-site scripting (XSS) vulnerabilities in myColex 1.4.2 allow remote attackers to... 4.3 Medium
- microsoft windows xp Microsoft Windows XP SP3 allows local users to cause a denial of service (system crash) by making... 4.9 Medium
- baofeng storm Unspecified vulnerability in Config.dll in Baofeng products 3.09.04.17 and earlier allows remote... 9.3 High
- ibm hardware management console Unspecified vulnerability in IBM Hardware Management Console (HMC) 7 release 3.4.0 SP2, when... 9.3 High
- debian linux, linux kernel, canonical ubuntu linux +2 more Multiple buffer overflows in the cifs subsystem in the Linux kernel before 2.6.29.4 allow remote... 7.1 High
- eyrie pam-krb5 pam_krb5 2.2.14 through 2.3.4, as used in Red Hat Enterprise Linux (RHEL) 5, generates different... 5.0 Medium
- apache http server The Apache HTTP Server 2.2.11 and earlier 2.2 versions does not properly handle Options... 4.9 Medium
- videoscript youtube video script Multiple SQL injection vulnerabilities in admin/index.php in VideoScript.us YouTube Video Script... 7.5 High
- freepbx FreePBX 2.5.1, and other 2.4.x, 2.5.x, and pre-release 2.6.x versions, generates different error... 5.0 Medium
- freepbx Multiple cross-site request forgery (CSRF) vulnerabilities in FreePBX 2.5.1, and other 2.4.x, 2.5... 6.8 Medium
- freepbx Multiple cross-site scripting (XSS) vulnerabilities in FreePBX 2.5.1, and other 2.4.x, 2.5.x, and... 4.3 Medium
- chinagames igame Stack-based buffer overflow in the Chinagames CGAgent ActiveX control 1.x in CGAgent.dll, as... 7.5 High
- sebastian-thiele st-gallery Multiple SQL injection vulnerabilities in the getGalleryImage function in st_admin/gallery_output... 6.8 Medium
- eaton network shutdown module Eaton MGEOPS Network Shutdown Module before 3.10 Build 13 allows remote attackers to execute... 10.0 High
- myktools mykdownload.php in MyKtools 2.4 does not require administrative authentication, which allows... 5.0 Medium
- jan de graaff com simpleboard Unrestricted file upload vulnerability in image_upload.php in the SimpleBoard (com_simpleboard)... 6.8 Medium
- aten kh1516i ip kvm switch, kn9116 ip kvm switch, pn9108 power over the net +2 more The https web interfaces on the ATEN KH1516i IP KVM switch with firmware 1.0.063, the KN9116 IP... 10.0 High
- aten kh1516i ip kvm switch, kn9116 ip kvm switch +1 more The ATEN KH1516i IP KVM switch with firmware 1.0.063 and the KN9116 IP KVM switch with firmware 1... 7.6 High
- aten kh1516i ip kvm switch, kn9116 ip kvm switch +1 more The (1) Windows and (2) Java client programs for the ATEN KH1516i IP KVM switch with firmware 1.0... 10.0 High
- aten kh1516i ip kvm switch, kn9116 ip kvm switch +1 more The Java client program for the ATEN KH1516i IP KVM switch with firmware 1.0.063 and the KN9116... 10.0 High
- redhat certificate system, dogtag certificate system +1 more agent/request/op.cgi in the Registration Authority (RA) component in Red Hat Certificate System ... 6.5 Medium
- sun java system portal server Cross-site scripting (XSS) vulnerability in Sun Java System Portal Server 6.3.1, 7.1, and 7.2... 4.3 Medium
- sun solaris Integer overflow in sadmind in Sun Solaris 8 and 9 allows remote attackers to execute arbitrary... 10.0 High
- sun solaris Heap-based buffer overflow in sadmind in Sun Solaris 8 and 9 allows remote attackers to execute... 10.0 High
- mega-nerd libsndfile, nullsoft winamp +1 more Heap-based buffer overflow in aiff_read_header in libsndfile 1.0.15 through 1.0.19, as used in... 9.3 High
- cgi rescue rescue Cross-site scripting (XSS) vulnerability in CGI RESCUE Trees before 2.11 allows remote attackers... 4.3 Medium
- Show olderLoading…