CVEs published in May 2009
364 vulnerabilities, 82 critical, 1 exploited.
- eggheads eggdrop, philip moore windrop, eggheads eggdrop irc bot +2 moremod/server.mod/servmsg.c in Eggheads Eggdrop and Windrop 1.6.19 and earlier allows remote...4.3 Medium
- mega-nerd libsndfile, nullsoft winamp +1 moreHeap-based buffer overflow in voc_read_header in libsndfile 1.0.15 through 1.0.19, as used in...9.3 High
- phpdirsubmit php dir submitMultiple SQL injection vulnerabilities in PHP Dir Submit (aka WebsiteSubmitter and Submitter...7.5 High
- ibm aixThe malloc subsystem in libc in IBM AIX 5.3 and 6.1 allows local users to create or overwrite...6.9 Medium
- google androidThe PackageManagerService class in services/java/com/android/server/PackageManagerService.java in...4.3 Medium
- novell groupwiseMultiple buffer overflows in the Internet Agent (aka GWIA) component in Novell GroupWise 7.x...10.0 High
- novell groupwiseThe WebAccess component in Novell GroupWise 7.x before 7.03 HP3 and 8.x before 8.0 HP2 does not...7.5 High
- darren reed ipfilterBuffer overflow in lib/load_http.c in ippool in Darren Reed IPFilter (aka IP Filter) 4.1.31...7.2 High
- pidginBuffer overflow in the decrypt_out function in Pidgin (formerly Gaim) before 2.5.6 allows remote...5.0 Medium
- ulteo open virtual desktopCross-site scripting (XSS) vulnerability in Ulteo Open Virtual Desktop 1.0 allows remote...4.3 Medium
- avg anti-virusThe AVG parsing engine 8.5 323, as used in multiple AVG anti-virus products including Anti-Virus...10.0 High
- f-prot antivirus, aves, milter +2 moreMultiple FRISK Software F-Prot anti-virus products, including Antivirus for Exchange, Linux on...10.0 High
- f-secure anti-virus, client security, internet gatekeeper +3 more +5 moreMultiple F-Secure anti-virus products, including Anti-Virus for Microsoft Exchange 7.10 and...6.8 Medium
- frax php recommendStatic code injection vulnerability in admin.php in Frax.dk Php Recommend 1.3 and earlier allows...7.5 High
- frax php recommendadmin.php in Frax.dk Php Recommend 1.3 and earlier does not require authentication when the user...7.5 High
- frax php recommendPHP remote file inclusion vulnerability in admin.php in Frax.dk Php Recommend 1.3 and earlier...7.5 High
- bigace cmsSQL injection vulnerability in the new user registration feature in BigACE CMS 2.5, when...6.8 Medium
- matt wright formmailCRLF injection vulnerability in FormMail.pl in Matt Wright FormMail 1.92, and possibly earlier,...5.0 Medium
- matt wright formmailMultiple cross-site scripting (XSS) vulnerabilities in FormMail.pl in Matt Wright FormMail 1.92,...4.3 Medium
- ulteo open virtual desktopMultiple cross-site scripting (XSS) vulnerabilities in Ulteo Open Virtual Desktop 1.0 allow...4.3 Medium
- strawberryDirectory traversal vulnerability in plugins/ddb/foot.php in Strawberry 1.1.1 allows remote...9.3 High
- activecollabactiveCollab 2.1 Corporate allows remote attackers to obtain sensitive information via an invalid...5.0 Medium
- activecollabCross-site scripting (XSS) vulnerability in activeCollab 2.1 Corporate allows remote attackers to...4.3 Medium
- flyspeck cmsindex.php in Flyspeck CMS 6.8 does not require administrative authentication for the...7.5 High
- flyspeck cmsDirectory traversal vulnerability in includes/database/examples/addressbook.php in Flyspeck CMS 6...7.5 High
- ocsinventory-ng ocs inventory ngThe web interface in Open Computer and Software Inventory Next Generation (OCS Inventory NG) 1.01...5.0 Medium
- ramazeiten ramazaitencms0.9.7.5, ramazaitencms0.9.7.6, ramazaitencms0.9.7.8 +1 more +3 moreDirectory traversal vulnerability in download.php in Rama Zaiten CMS 0.9.8 and earlier allows...5.0 Medium
- 2daybiz template monster cloneadmin/edituser.php in 2daybiz Template Monster Clone does not require administrative...5.0 Medium
- teozkr lightopencmsSQL injection vulnerability in index.php in LightOpenCMS 0.1 allows remote attackers to execute...6.4 Medium
- pluck-cms pluckMultiple directory traversal vulnerabilities in pluck 4.6.2, when register_globals is enabled,...6.8 Medium
- bokecc maxcmsSQL injection vulnerability in inc/ajax.asp in MaxCMS 2.0 allows remote attackers to execute...7.5 High
- sun opensolarisUnspecified vulnerability in the Solaris Secure Digital slot driver (aka sdhost) in Sun...7.2 High
- novell groupwiseMultiple cross-site scripting (XSS) vulnerabilities in the WebAccess login page (aka gw/webacc)...4.3 Medium
- novell groupwiseMultiple cross-site scripting (XSS) vulnerabilities in the WebAccess component in Novell...4.3 Medium
- rahul ctorrent, dtorrent +1 moreStack-based buffer overflow in the btFiles::BuildFromMI function (trunk/btfiles.cpp) in Enhanced...9.3 High
- xenThe hypervisor_callback function in Xen, possibly before 3.4.0, as applied to the Linux kernel 2...5.0 Medium
- transmissionbt transmissionCross-site request forgery (CSRF) vulnerability in Transmission 1.5 before 1.53 and 1.6 before 1...6.8 Medium
- simone rota slim simple login managerSLiM Simple Login Manager 1.3.0 places the X authority magic cookie (mcookie) on the command line...2.1 Low
- pidginMultiple integer overflows in the msn_slplink_process_msg functions in the MSN protocol handler...9.3 High
- pidginThe PurpleCircBuffer implementation in Pidgin (formerly Gaim) before 2.5.6 does not properly...5.0 Medium
- pidginBuffer overflow in the XMPP SOCKS5 bytestream server in Pidgin (formerly Gaim) before 2.5.6...7.1 High
- emn coccinelleCoccinelle 0.1.7 allows local users to overwrite arbitrary files via a symlink attack on an...3.3 Low
- exjune office message systemexJune Office Message System 1 does not properly restrict access to (1) configure.asp and (2)...7.5 High
- realtywebware realty web-baseSQL injection vulnerability in list_list.php in Realty Webware Technologies Web-Base 1.0 allows...7.5 High
- omnisoftsol vidshareproUnrestricted file upload vulnerability in VidSharePro allows remote authenticated users to...6.0 Medium
- joost horward catvizMultiple cross-site scripting (XSS) vulnerabilities in index.php in Catviz 0.4.0 beta 1 allow...4.3 Medium
- joost horward catvizMultiple directory traversal vulnerabilities in index.php in Catviz 0.4.0 Beta 1 allow remote...7.5 High
- 26thavenue bspeakSQL injection vulnerability in index.php in 26th Avenue bSpeak 1.10 allows remote attackers to...7.5 High
- surat kabar phpwebnewsSQL injection vulnerability in index.php in phpWebNews 0.2 MySQL Edition allows remote attackers...7.5 High
- surat kabar phpwebnewsSQL injection vulnerability in bukutamu.php in phpWebNews 0.2 MySQL Edition allows remote...7.5 High
- Show moreLoading…