CVEs published in July 2009
443 vulnerabilities, 77 critical, 2 exploited.
- editeurscripts esnewsCross-site scripting (XSS) vulnerability in modifier.php in EditeurScripts EsNews 1.2 allows...4.3 Medium
- activewebsoftwares active web mailSQL injection vulnerability in Active Web Mail 4.0 allows remote attackers to execute arbitrary...7.5 High
- aspthai.net aspthai forumsASPThai.NET ASPThai Forums 8.5 stores sensitive information under the web root with insufficient...5.0 Medium
- merlix educate serverMerlix Educate Server stores db.mdb under the web root with insufficient access control, which...5.0 Medium
- merlix educate serverMerlix Educate Server allows remote attackers to bypass intended security restrictions and obtain...5.0 Medium
- oramonOramon Oracle Database Monitoring Tool 2.0.1 stores sensitive information under the web root with...5.0 Medium
- editeurscripts esbaseadminCross-site scripting (XSS) vulnerability in default/login.php in EditeurScripts EsBaseAdmin 2.1...4.3 Medium
- mozilla firefoxMozilla Firefox before 3.0.12, and 3.5.x before 3.5.2, allows remote SOCKS5 proxy servers to...5.0 Medium
- google chromeGoogle Chrome 2.x through 2.0.172 allows remote attackers to cause a denial of service ...5.0 Medium
- opera browserOpera 9.52 and earlier allows remote attackers to cause a denial of service (CPU and memory...5.0 Medium
- microsoft ie, internet explorer +1 moreMicrosoft Internet Explorer 6.0.2900.2180 and earlier allows remote attackers to cause a denial...5.0 Medium
- rim blackberry 8800The Research In Motion (RIM) BlackBerry 8800 allows remote attackers to cause a denial of service...7.1 High
- mozilla firefox, fedoraproject fedora, opensuse +3 more +5 moreMozilla Firefox before 3.0.12 does not always use XPCCrossOriginWrapper when required during...4.3 Medium
- mozilla firefoxThe setTimeout function in Mozilla Firefox before 3.0.12 does not properly preserve object...10.0 High
- mozilla firefoxMozilla Firefox before 3.0.12 does not properly handle an SVG element that has a property with a...10.0 High
- mozilla firefoxInteger overflow in Apple CoreGraphics, as used in Safari before 4.0.3, Mozilla Firefox before 3...10.0 High
- mozilla firefoxMozilla Firefox before 3.0.12 and 3.5 before 3.5.1 allows remote attackers to cause a denial of...10.0 High
- mozilla firefox, thunderbird +1 moreThe JavaScript engine in Mozilla Firefox before 3.0.12 and Thunderbird allows remote attackers to...10.0 High
- mozilla firefox, thunderbird +1 moreMozilla Firefox before 3.0.12 and Thunderbird allow remote attackers to cause a denial of service...10.0 High
- mozilla firefox, seamonkey, thunderbird +2 moreThe nsXULTemplateQueryProcessorRDF::CheckIsSeparator function in Mozilla Firefox before 3.0.12,...10.0 High
- mozilla firefox, thunderbird +1 moreMultiple integer overflows in the (1) PL_Base64Decode and (2) PL_Base64Encode functions in...10.0 High
- mozilla firefox, thunderbird +1 moreThe browser engine in Mozilla Firefox before 3.0.12 and Thunderbird allows remote attackers to...10.0 High
- bioscripts minitwitterindex.php in MiniTwitter 0.2 beta allows remote authenticated users to modify certain options of...6.5 Medium
- bioscripts minitwitterMultiple SQL injection vulnerabilities in MiniTwitter 0.2 beta, when magic_quotes_gpc is disabled...6.0 Medium
- lullabot fivestar module for drupalCross-site request forgery (CSRF) vulnerability in the Fivestar module 5.x-1.x before 5.x-1.14...6.8 Medium
- verliadminMultiple cross-site scripting (XSS) vulnerabilities in index.php in VerliAdmin 0.3.7 and 0.3.8...4.3 Medium
- symantec winfax proStack-based buffer overflow in the Symantec.FaxViewerControl.1 ActiveX control in WinFax\DCCFAXVW...9.3 High
- verlihub-project verlihub control panelMultiple cross-site scripting (XSS) vulnerabilities in Verlihub Control Panel (VHCP) 1.7e allow...4.3 Medium
- sorinara streaming audio playerStack-based buffer overflow in Sorinara Streaming Audio Player (SAP) 0.9 allows remote attackers...9.3 High
- almondsoft almond classifiedsSQL injection vulnerability in the Almond Classifieds (com_aclassf) component 5.6.2 for Joomla!...7.5 High
- tfm mmplayerStack-based buffer overflow in TFM MMPlayer 2.0, and possibly 2.0.0.30, allows remote attackers...9.3 High
- t-okada shiromuku\(fs6\)diaryCross-site scripting (XSS) vulnerability in Perl CGI's By Mrs. Shiromuku shiromuku(fs6)DIARY 2.40...4.3 Medium
- corel getplus download manager, adobe acrobat reader +1 moreNOS Microsystems getPlus Download Manager, as used in Adobe Reader 1.6.2.36 and possibly other...7.2 High
- wiresharkUnspecified vulnerability in the Infiniband dissector in Wireshark 1.0.6 through 1.2.0, when...7.1 High
- wiresharkUnspecified vulnerability in the AFS dissector in Wireshark 0.9.2 through 1.2.0 allows remote...5.0 Medium
- wiresharkUnspecified vulnerability in the sFlow dissector in Wireshark 1.2.0 allows remote attackers to...5.0 Medium
- wiresharkMultiple unspecified vulnerabilities in Wireshark 1.2.0 allow remote attackers to cause a denial...5.0 Medium
- wiresharkBuffer overflow in the IPMI dissector in Wireshark 1.2.0 allows remote attackers to cause a...5.0 Medium
- adminnewstools admin news toolssystem/message.php in Admin News Tools 2.5 does not properly restrict access, which allows remote...7.5 High
- adminnewstools admin news toolsDirectory traversal vulnerability in system/download.php in Admin News Tools 2.5 allows remote...5.0 Medium
- google chromeGoogle Chrome before 2.0.172.37 allows attackers to leverage renderer access to cause a denial of...9.3 High
- google chrome, v8 +1 moreHeap-based buffer overflow in src/jsregexp.cc in Google V8 before 1.1.10.14, as used in Google...9.3 High
- olle johansson joblineSQL injection vulnerability in the search method in jobline.class.php in Jobline (com_jobline) 1...6.8 Medium
- supersimple super simple blog scriptMultiple SQL injection vulnerabilities in comments.php in Super Simple Blog Script 2.5.4, when...6.8 Medium
- supersimple super simple blog scriptMultiple directory traversal vulnerabilities in comments.php in Super Simple Blog Script 2.5.4...6.8 Medium
- scriptsez easy image downloaderMultiple cross-site scripting (XSS) vulnerabilities in ScriptsEz Easy Image Downloader allow...4.3 Medium
- ondanera hamster audio playerStack-based buffer overflow in Hamster Audio Player 0.3a allows remote attackers to execute...9.3 High
- bistudio arma, arma 2 +1 moreArmed Assault (aka ArmA) 1.14 and earlier, and 1.16 beta, and Armed Assault II 1.02 and earlier...5.0 Medium
- bistudio arma, arma 2 +1 moreFormat string vulnerability in Armed Assault (aka ArmA) 1.14 and earlier, and 1.16 beta, and...10.0 High
- bistudio arma, arma 2 +1 moreInteger underflow in Armed Assault (aka ArmA) 1.14 and earlier, and 1.16 beta, and Armed Assault...5.0 Medium
- Show moreLoading…