CVEs published in May 2009
364 vulnerabilities, 82 critical, 1 exploited.
- pablosoftwaresolutions quick\'n easy mail serverPablo Software Solutions Quick 'n Easy Mail Server 3.3 allows remote attackers to cause a denial...5.0 Medium
- ubuntu linuxThe Ubuntu clamav-milter.init script in clamav-milter before 0.95.1+dfsg-1ubuntu1.2 in Ubuntu 9...6.8 Medium
- apple safariApple Safari executes DOM calls in response to a javascript: URI in the target attribute of a...9.3 High
- opera browserOpera executes DOM calls in response to a javascript: URI in the target attribute of a submit...9.3 High
- google chromeGoogle Chrome executes DOM calls in response to a javascript: URI in the target attribute of a...9.3 High
- mozilla firefoxMozilla Firefox executes DOM calls in response to a javascript: URI in the target attribute of a...9.3 High
- garmin communicator pluginThe domain-locking implementation in the GARMINAXCONTROL.GarminAxControl_t.1 ActiveX control in...9.3 High
- igniterealtime openfireIgnite Realtime Openfire before 3.6.5 does not properly implement the register.password (aka...6.5 Medium
- igniterealtime openfireIgnite Realtime Openfire Allows Users to Change Passwords of Arbitrary Accounts4.0 Medium
- pangoInteger overflow in the pango_glyph_string_set_size function in pango/glyphstring.c in Pango...6.8 Medium
- electrasoft 32bit ftpStack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to...10.0 High
- cgi rescue web mailerCRLF injection vulnerability in CGI RESCUE Web Mailer before 1.04 allows remote attackers to...4.3 Medium
- cgi rescue form2mailUnspecified vulnerability in CGI RESCUE FORM2MAIL before 1.42 allows remote attackers to send...5.0 Medium
- cgi rescue minibbs22Unspecified vulnerability in CGI RESCUE MiniBBS22 before 1.01 allows remote attackers to send...5.0 Medium
- cgi rescue minibbsCross-site scripting (XSS) vulnerability in CGI RESCUE MiniBBS 8t before 8.95t, 8 before 8.95, 9...4.3 Medium
- kalptarudemos php site lockindex.php in PHP Site Lock 2.0 allows remote attackers to bypass authentication and obtain...7.5 High
- shemes grabitStack-based buffer overflow in the NZB importer feature in GrabIt 1.7.2 Beta 3 and earlier allows...9.3 High
- r020 tematresMultiple SQL injection vulnerabilities in TemaTres 1.031, when magic_quotes_gpc is disabled,...4.4 Medium
- r020 tematresMultiple SQL injection vulnerabilities in TemaTres 1.0.3 and 1.031, when magic_quotes_gpc is...6.0 Medium
- r020 tematresMultiple cross-site scripting (XSS) vulnerabilities in TemaTres 1.0.3 and 1.031 allow remote...4.3 Medium
- kalptarudemos million dollar text linksMillion Dollar Text Links 1.0 does not properly restrict administrator access to admin.home.php,...7.5 High
- phpexplorer phphotogalleryMultiple SQL injection vulnerabilities in index.php in phPhotoGallery 0.92 allow remote attackers...7.5 High
- vivvoCross-site request forgery (CSRF) vulnerability in Vivvo CMS before 4.0.4 allows remote attackers...4.4 Medium
- tufat flashchatconnection.php in FlashChat 5.0.8 allows remote attackers to bypass the role filter mechanism and...7.5 High
- preprojects pre real estate listingsMultiple SQL injection vulnerabilities in login.php in Pre Projects Pre Real Estate Listings...7.5 High
- mitel nupoint messengerThe server in Mitel NuPoint Messenger R11 and R3 sends usernames and passwords in cleartext to...7.8 High
- cscopeMultiple stack-based buffer overflows in the putstring function in find.c in Cscope before 15.6...9.3 High
- google chromeMultiple integer overflows in Skia, as used in Google Chrome 1.x before 1.0.154.64 and 2.x, and...6.8 Medium
- google chromeHeap-based buffer overflow in the ParamTraits<SkBitmap>::Read function in Google Chrome before 1...9.3 High
- preprojects pre real estate listingsSQL injection vulnerability in manager/login.php in Pre Projects Pre Real Estate Listings allows...7.5 High
- niclor vibro-school-cmsSQL injection vulnerability in view_news.php in nicLOR Vibro-School-CMS allows remote attackers...7.5 High
- sfs ez pub fsf ex pubSQL injection vulnerability in directory.php in Scripts For Sites (SFS) EZ Pub Site allows remote...7.5 High
- dflabs ptkThe get_file_type function in lib/file_content.php in DFLabs PTK 0.1, 0.2, and 1.0 allows remote...6.8 Medium
- ubuntu linuxsystem-tools-backends before 2.6.0-1ubuntu1.1 in Ubuntu 8.10, as used by "Users and Groups" in...5.0 Medium
- ipsec-toolsracoon/isakmp_frag.c in ipsec-tools before 0.7.2 allows remote attackers to cause a denial of...5.0 Medium
- branden robinson xvfb-run, debian linux, redhat fedora +2 morexvfb-run 1.6.1 in Debian GNU/Linux, Ubuntu, Fedora 10, and possibly other operating systems place...4.6 Medium
- cisco wrt54gcCross-site request forgery (CSRF) vulnerability in administration.cgi on the Cisco Linksys...6.8 Medium
- cisco wvc54gcThe Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 stores...7.8 High
- cisco wvc54gcaAbsolute path traversal vulnerability in adm/file.cgi on the Cisco Linksys WVC54GCA wireless...7.8 High
- cisco wvc54gcaDirectory traversal vulnerability in adm/file.cgi on the Cisco Linksys WVC54GCA wireless video...7.8 High
- cisco wvc54gcaMultiple cross-site scripting (XSS) vulnerabilities on the Cisco Linksys WVC54GCA wireless video...4.3 Medium
- cisco wvc54gcaimg/main.cgi on the Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1...3.5 Low
- cisco wvc54gcaThe Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 sends...5.0 Medium
- sun woodstockCross-site scripting (XSS) vulnerability in ThemeServlet.java in Sun Woodstock 4.2, as used in...4.3 Medium
- oracle glassfish serverMultiple cross-site scripting (XSS) vulnerabilities in the Admin Console in Sun GlassFish...4.3 Medium
- sco unixwareUnspecified vulnerability in the IGMP driver in SCO Unixware Release 7.1.4 Maintenance Pack 4...7.8 High
- qt-cute quickteamMultiple PHP remote file inclusion vulnerabilities in Qt quickteam 2 allow remote attackers to...7.5 High
- zakkis abc advertiseZakkis Technology ABC Advertise 1.0 does not properly restrict access to admin.inc.php, which...5.0 Medium
- agtc myshopAGTC MyShop 3.2b allows remote attackers to bypass authentication and obtain administrative...7.5 High
- qsix blusky cmsSQL injection vulnerability in index.php in BluSky CMS allows remote attackers to execute...7.5 High
- Show moreLoading…