CVEs published in July 2009
443 vulnerabilities, 77 critical, 2 exploited.
- maxdev cwguestbookSQL injection vulnerability in the CWGuestBook module 2.1 and earlier for MAXdev MDPro (aka MD...7.5 High
- armassa ard-9808, ard-9808 software +1 moreThe ARD-9808 DVR card security camera stores sensitive information under the web root with...7.5 High
- armassa ard-9808, ard-9808 software +1 moreThe ARD-9808 DVR card security camera allows remote attackers to cause a denial of service via a...7.8 High
- avatic aardvark topsites phpindex.php in Aardvark Topsites PHP 5.2.0 and earlier allows remote attackers to obtain sensitive...5.0 Medium
- avatic aardvark topsites phpindex.php in Aardvark Topsites PHP 5.2.1 and earlier allows remote attackers to obtain sensitive...5.0 Medium
- avatic aardvark topsites phpCross-site scripting (XSS) vulnerability in index.php in Aardvark Topsites PHP 5.2.0 and earlier...4.3 Medium
- radware appwall, gateway +1 moreThe radware AppWall Web Application Firewall (WAF) 1.0.2.6, with Gateway 4.6.0.2, allows remote...7.8 High
- phion airlock web application firewallThe management interface in the phion airlock Web Application Firewall (WAF) 4.1-10.41 does not...10.0 High
- hyperguard web application firewall project web application firewallThe Artofdefence Hyperguard Web Application Firewall (WAF) module before 2.5.5-11635, 3.0 before...5.0 Medium
- hp openview network node managerStack-based buffer overflow in rping in HP OpenView Network Node Manager (OV NNM) 7.53 on Linux...7.5 High
- sun opensolaris, solaris +1 moreUnspecified vulnerability in the udp subsystem in the kernel in Sun Solaris 10, and OpenSolaris...7.1 High
- sun opensolaris, solaris +1 moreThe NFSv4 server kernel module in Sun Solaris 10, and OpenSolaris before snv_119, does not...10.0 High
- hp oncplusUnspecified vulnerability in NFS / ONCplus B.11.31_06 and B.11.31_07 on HP HP-UX B.11.31 allows...4.9 Medium
- preproject pre asp job boardCross-site scripting (XSS) vulnerability in Employee/emp_login.asp in Pre ASP Job Board allows...4.3 Medium
- avast antivirusMultiple stack-based buffer overflows in avast! Linux Home Edition 1.0.5, 1.0.5-1, and 1.0.8...6.8 Medium
- clamavThe unpack feature in ClamAV 0.93.3 and earlier allows remote attackers to cause a denial of...5.0 Medium
- ez publishThe registration view (/user/register) in eZ Publish 3.5.6 and earlier, and possibly other...7.5 High
- cpanel, netenberg fantastico de luxe +1 moreDirectory traversal vulnerability in index.php in Fantastico, as used with cPanel 11.x, allows...5.0 Medium
- pluck-cms pluckDirectory traversal vulnerability in data/modules/blog/module_pages_site.php in Pluck 4.6.1...6.8 Medium
- tutorial-share tutorial shareOptimum Web Design Tutorial Share 3.5.0 and earlier allows remote attackers to bypass...7.5 High
- appleple a-newsCross-site scripting (XSS) vulnerability in Appleple a-News 2.32 allows remote attackers to...4.3 Medium
- chad phillips logintobogganUnspecified vulnerability in LoginToboggan 6.x-1.x before 6.x-1.5, a module for Drupal, when ...6.8 Medium
- kim eckert com bsadvSQL injection vulnerability in the Boy Scout Advancement (com_bsadv) component 0.3 and earlier...7.5 High
- arcadetradescript arcade trade scriptCross-site scripting (XSS) vulnerability in index.php in Arcade Trade Script 1.0 beta allows...4.3 Medium
- nagiosstatuswml.cgi in Nagios before 3.1.1 allows remote attackers to execute arbitrary commands via...7.5 High
- james ashton compfaceBuffer overflow in compface 1.5.2 and earlier allows user-assisted attackers to cause a denial of...4.3 Medium
- libtiffBuffer underflow in the LZWDecodeCompat function in libtiff 3.8.2 allows context-dependent...4.3 Medium
- phpmyadminCross-site scripting (XSS) vulnerability in phpMyAdmin before 3.2.0.1 allows remote attackers to...4.3 Medium
- sun java web console, solaris +1 moreMultiple cross-site scripting (XSS) vulnerabilities in the help jsp scripts in Sun Java Web...4.3 Medium
- oracle opensolaris, solaris +1 moreThe Virtual Network Terminal Server daemon (vntsd) for Logical Domains (aka LDoms) in Sun Solaris...4.6 Medium
- biglle vote for us extensionSQL injection vulnerability in voteforus.php in the Vote For Us extension 1.0.1 and earlier for...7.5 High
- cpanelDirectory traversal vulnerability in frontend/x3/stats/lastvisit.html in cPanel allows remote...5.0 Medium
- huawei d100The Huawei D100 allows remote attackers to obtain sensitive information via a direct request to ...7.8 High
- huawei d100 firmwareThe default configuration of the Wi-Fi component on the Huawei D100 does not use encryption,...5.0 Medium
- huawei d100 firmwareThe Huawei D100 stores the administrator's account name and password in cleartext in a cookie,...7.5 High
- huawei d100The Huawei D100 has (1) a certain default administrator password for the web interface, and does...10.0 High
- dedecmsUnrestricted file upload vulnerability in member/uploads_edit.php in dedecms 5.3 allows remote...6.8 Medium
- phome empire cmsSQL injection vulnerability in Empire CMS 5.1 allows remote attackers to execute arbitrary SQL...7.5 High
- sun java system access managerCross-site scripting (XSS) vulnerability in the Cross-Domain Controller (CDC) servlet in Sun Java...2.6 Low
- pidginThe OSCAR protocol implementation in Pidgin before 2.5.8 misinterprets the ICQWebMessage message...5.0 Medium
- freebsd, k-meleon project k-meleon, mozilla firefox +3 more +5 moreArray index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka...6.8 Medium
- gmitc com dbqueryPHP remote file inclusion vulnerability in the Green Mountain Information Technology and...7.5 High
- christof bruyland v-webmailMultiple PHP remote file inclusion vulnerabilities in V-webmail 1.6.4 allow remote attackers to...6.8 Medium