CVEs published in July 2009
443 vulnerabilities, 77 critical, 2 exploited.
- clansphereMultiple SQL injection vulnerabilities in ClanSphere before 2009.0.1 allow remote attackers to...7.5 High
- sourcefire 3d sensor, defense center +1 moreThe web-based management interfaces in Sourcefire Defense Center (DC) and 3D Sensor before 4.8.2...9.0 High
- zophCross-site scripting (XSS) vulnerability in people.php in Zoph before 0.7.0.6 allows remote...4.3 Medium
- hans oesterholt cmmeCross-site scripting (XSS) vulnerability in admin.php (aka the login page) in Content Management...4.3 Medium
- shalwan opialSQL injection vulnerability in albumdetail.php in Opial 1.0 allows remote attackers to execute...7.5 High
- opialSQL injection vulnerability in admin/index.php in Opial 1.0 allows remote attackers to execute...7.5 High
- rentventorySQL injection vulnerability in index.php in Rentventory allows remote attackers to execute...7.5 High
- freewebshopDirectory traversal vulnerability in includes/startmodules.inc.php in FreeWebshop.org 2.2.9 R2,...6.8 Medium
- w3bcms gaestebuch guestbook moduleSQL injection vulnerability in includes/module/book/index.inc.php in w3b|cms Gaestebuch Guestbook...6.8 Medium
- netcatSQL injection vulnerability in modules/poll/index.php in AIST NetCat 3.0 and 3.12 allows remote...7.5 High
- joomla joomla\!, markus donhauser ice gallery component for joomla +1 moreSQL injection vulnerability in the Ice Gallery (com_ice) component 0.5 beta 2 for Joomla! allows...7.5 High
- php link directory link directorySQL injection vulnerability in page.php in PHP Link Directory (phpLD) 3.3, when register_globals...5.1 Medium
- php-fusionCross-site scripting (XSS) vulnerability in messages.php in PHP-Fusion 6.01.17 and 7.00.3 allows...4.3 Medium
- w2b phpgreetcardsUnrestricted file upload vulnerability in index.php in phpGreetCards 3.7 allows remote attackers...6.8 Medium
- w2b phpgreetcardsCross-site scripting (XSS) vulnerability in index.php in phpGreetCards 3.7 allows remote...4.3 Medium
- ocsinventory-ng ocsinventory-agent, ocs inventory ng +1 moreUntrusted search path vulnerability in Agent/Backend.pm in Ocsinventory-Agent before 0.0.9.3, and...7.2 High
- cms.tut.su cms chainukMultiple directory traversal vulnerabilities in CMS Chainuk 1.2 and earlier allow remote...7.5 High
- cms.tut.su cms chainukCMS Chainuk 1.2 and earlier allows remote attackers to obtain sensitive information via (1) a...5.0 Medium
- cms.tut.su cms chainukMultiple static code injection vulnerabilities in CMS Chainuk 1.2 and earlier allow remote...7.5 High
- cms.tut.su cms chainukCross-site scripting (XSS) vulnerability in admin/admin_menu.php in CMS Chainuk 1.2 and earlier...4.3 Medium
- max kervin kervinet forumKerviNet Forum 1.1 and earlier allows remote attackers to obtain sensitive information via a...5.0 Medium
- max kervin kervinet forumadmin/edit_user.php in KerviNet Forum 1.1 and earlier does not require administrative...7.5 High
- max kervin kervinet forumCross-site scripting (XSS) vulnerability in add_voting.php in KerviNet Forum 1.1 and earlier...3.5 Low
- max kervin kervinet forumMultiple SQL injection vulnerabilities in KerviNet Forum 1.1 and earlier allow remote attackers...7.5 High
- clicknet cmsDirectory traversal vulnerability in index.php in Clicknet CMS 2.1 allows remote attackers to...5.0 Medium
- fckeditorMultiple cross-site scripting (XSS) vulnerabilities in FCKeditor before 2.6.4.1 allow remote...4.3 Medium
- axesstel mv 410rThe web interface on the Axesstel MV 410R redirects users back to the referring page after...5.8 Medium
- axesstel mv 410rCross-site scripting (XSS) vulnerability in cgi-bin/sysconf.cgi on the Axesstel MV 410R allows...4.3 Medium
- axesstel mv 410rcgi-bin/sysconf.cgi on the Axesstel MV 410R allows remote attackers to cause a denial of service ...7.8 High
- axesstel mv 410rThe web interface on the Axesstel MV 410R relies on client-side JavaScript code to validate input...7.5 High
- axesstel mv 410rThe default configuration of the Wi-Fi component on the Axesstel MV 410R does not use encryption,...5.0 Medium
- axesstel mv 410rThe Axesstel MV 410R allows remote attackers to cause a denial of service via a flood of SYN...7.8 High
- axesstel mv 410rThe Axesstel MV 410R has a certain default administrator password, and does not force a password...10.0 High
- ibm tivoli identity managerMultiple cross-site scripting (XSS) vulnerabilities in IBM Tivoli Identity Manager (ITIM) 5.0...4.3 Medium
- sun lightweight availability collection toolRace condition in the Sun Lightweight Availability Collection Tool 3.0 on Solaris 7 through 10...2.1 Low
- jun furuse camlimagesMultiple integer overflows in CamlImages 2.2 and earlier might allow context-dependent attackers...7.5 High
- dilloInteger overflow in the Png_datainfo_callback function in Dillo 2.1 and earlier allows remote...7.5 High
- fckeditorMultiple directory traversal vulnerabilities in FCKeditor before 2.6.4.1 allow remote attackers...7.5 High
- apache http server, canonical ubuntu linux, debian linux +6 more +8 moreThe stream_reqbody_cl function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP...7.1 High
- suse linuxThe YaST2 LDAP module in yast2-ldap-server on SUSE Linux Enterprise Server 11 (aka SLE11) does...7.5 High
- linux kernelThe ptrace_start function in kernel/ptrace.c in the Linux kernel 2.6.18 does not properly handle...5.5 Medium
- ibm websphere application serverThe IBM Stax XMLStreamWriter in the Web Services component in IBM WebSphere Application Server ...6.4 Medium
- xmb forum xmbCross-site scripting (XSS) vulnerability in XMB 1.5 allows remote attackers to inject arbitrary...4.3 Medium
- max kervin kervinet forumSQL injection vulnerability in topic.php in KerviNet Forum 1.1 allows remote attackers to execute...7.5 High
- jinzoraDirectory traversal vulnerability in index.php in Jinzora Media Jukebox 2.8 and earlier allows...7.5 High
- mcafee smartfilterSmartFilter Web Gateway Security 4.2.1.00 stores user credentials in cleartext in config.txt and...4.6 Medium
- selbstzweck rgallery pluginSQL injection vulnerability in the rGallery plugin 1.2.3 for WoltLab Burning Board (WBB3) allows...7.5 High
- bow der kleine x-blcSQL injection vulnerability in include/get_read.php in Extensible-BioLawCom CMS (X-BLC) 0.2.0 and...7.5 High
- codice-cms codice cmsSQL injection vulnerability in index.php in Codice CMS 2 allows remote attackers to execute...7.5 High
- punres affiliates modMultiple SQL injection vulnerabilities in affiliates.php in the Affiliation (aka Affiliates)...7.5 High
- Show moreLoading…