CVEs published in July 2009
443 vulnerabilities, 77 critical, 2 exploited.
- ordasoft com vehiclemanagerPHP remote file inclusion vulnerability in toolbar_ext.php in the VehicleManager ...7.5 High
- squid-cache squidSquid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 allows remote attackers to cause a denial...5.0 Medium
- squid-cache squidSquid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 does not properly enforce "buffer limits...5.0 Medium
- openexrHeap-based buffer overflow in the compression implementation in OpenEXR 1.2.2 allows context...6.8 Medium
- openexr, apple mac os x, canonical ubuntu linux +3 more +5 moreThe decompression implementation in the Imf::hufUncompress function in OpenEXR 1.2.2 and 1.6.1...6.8 Medium
- openexrMultiple integer overflows in OpenEXR 1.2.2 and 1.6.1 allow context-dependent attackers to cause...7.5 High
- datachecknh v-spacepalSQL injection vulnerability in login.asp in DataCheck Solutions V-SpacePal allows remote...7.5 High
- maxdev mdproSQL injection vulnerability in the Surveys (aka NS-Polls) module in MDPro (MD-Pro) 1.083.x allows...7.5 High
- baofeng stormStack-based buffer overflow in medialib.dll in BaoFeng Storm 3.9.62 allows remote attackers to...9.3 High
- datachecknh sitepalSQL injection vulnerability in z_admin_login.asp in DataCheck Solutions SitePal 1.x allows remote...7.5 High
- datachecknh sitepalMultiple cross-site scripting (XSS) vulnerabilities in DataCheck Solutions SitePal 1.x allow...4.3 Medium
- datachecknh linkpalSQL injection vulnerability in z_admin_login.asp in DataCheck Solutions LinkPal 1.x allows remote...7.5 High
- datachecknh linkpalMultiple cross-site scripting (XSS) vulnerabilities in DataCheck Solutions LinkPal 1.x allow...4.3 Medium
- prosmdrSQL injection vulnerability in login.aspx in ProSMDR allows remote attackers to execute arbitrary...7.5 High
- gander myfusionDirectory traversal vulnerability in infusions/last_seen_users_panel/last_seen_users_panel.php in...6.8 Medium
- scott courtney links packageCross-site scripting (XSS) vulnerability in the Links Related module in the Links Package 5.x...3.5 Low
- amotools com amocourseSQL injection vulnerability in the amoCourse (com_amocourse) component for Joomla! allows remote...7.5 High
- chatelao php address bookMultiple SQL injection vulnerabilities in PHP Address Book 4.0.x allow remote attackers to...6.8 Medium
- pinme com pinboardSQL injection vulnerability in the com_pinboard component for Joomla! allows remote attackers to...7.5 High
- brainjar asp football poolASP Football Pool 2.3 stores sensitive information under the web root with insufficient access...5.0 Medium
- traidnt upMultiple SQL injection vulnerabilities in adminquery.php in Traidnt Up 2.0 allow remote attackers...6.8 Medium
- zenhelpdesk zen help deskMultiple SQL injection vulnerabilities in adminlogin.asp in Zen Help Desk 2.1 allow remote...7.5 High
- e-supportportal escon supportportal proMultiple SQL injection vulnerabilities in index.php in Escon SupportPortal Pro 3.0 allow remote...7.5 High
- r2newsletter r2 newsletter lite, r2 newsletter pro, r2 newsletter stats +2 moreR2 Newsletter Lite, Pro, and Stats stores sensitive information under the web root with...5.0 Medium
- joomlaequipment juserSQL injection vulnerability in the Joomlaequipment (aka JUser or com_juser) component 2.0.4 for...7.5 High
- akiva webboardMultiple directory traversal vulnerabilities in view.php in Webboard 2.90 beta and earlier allow...5.0 Medium
- radscripts radclassifiedsSQL injection vulnerability in index.php in RadCLASSIFIEDS Gold 2.0 allows remote attackers to...7.5 High
- onlinegrades online gradesMultiple SQL injection vulnerabilities in Online Grades & Attendance 3.2.6 and earlier allow (1)...6.5 Medium
- sun java system access manager policy agentThe Sun Java System (SJS) Access Manager Policy Agent module 2.2 for SJS Web Proxy Server 4.0...7.8 High
- sun opensolaris, solaris +1 moreUnspecified vulnerability in the Solaris Auditing subsystem in Sun Solaris 9 and 10 and...4.7 Medium
- zen cart cart** DISPUTED ** Directory traversal vulnerability in admin/includes/languages/english.php in Zen...6.8 Medium
- zen cart cart** DISPUTED ** Directory traversal vulnerability in admin/includes/initsystem.php in Zen Cart 1...6.8 Medium
- editeurscripts espartenairesCross-site scripting (XSS) vulnerability in login.php in EsPartenaires 1.0 allows remote...4.3 Medium
- censuraCross-site scripting (XSS) vulnerability in productSearch.html in Censura 2.0.4 and 2.1.0 allows...4.3 Medium
- censuraCross-site scripting (XSS) vulnerability in censura.php in Censura 1.16.04 allows remote...4.3 Medium
- censuraSQL injection vulnerability in censura.php in Censura 1.16.04 allows remote attackers to execute...7.5 High
- phpjunkyard gbookSQL injection vulnerability in guestbook.php in PHPJunkYard GBook 1.6 allows remote attackers to...7.5 High
- runcms myannoncesSQL injection vulnerability in the MyAnnonces module for E-Xoopport 3.1 allows remote attackers...7.5 High
- resalecode hutscripts php website scriptSQL injection vulnerability in showcategory.php in Hutscripts PHP Website Script allows remote...7.5 High
- resalecode hutscripts php website scriptMultiple cross-site scripting (XSS) vulnerabilities in Hutscripts PHP Website Script allow remote...4.3 Medium
- resalecode hotscripts type php clone scriptMultiple cross-site scripting (XSS) vulnerabilities in Hotscripts Type PHP Clone Script allow...4.3 Medium
- dragdropcartMultiple cross-site scripting (XSS) vulnerabilities in DragDropCart allow remote attackers to...4.3 Medium
- edgephp ezarticlesCross-site scripting (XSS) vulnerability in articles.php in EDGEPHP EZArticles allows remote...4.3 Medium
- mlffatSQL injection vulnerability in index.php in Mlffat 2.2 allows remote attackers to execute...7.5 High
- humayun shabbir bhutta asp product catalogSQL injection vulnerability in default.asp in ASP Product Catalog allows remote attackers to...7.5 High
- aspsiteware autodealerMultiple SQL injection vulnerabilities in ASP SiteWare autoDealer 1 and 2 allow remote attackers...7.5 High
- linux kernelOff-by-one error in the options_write function in drivers/misc/sgi-gru/gruprocfs.c in the SGI GRU...7.2 High
- ibm tivoli identity managerMultiple session fixation vulnerabilities in IBM Tivoli Identity Manager (ITIM) 5.0.0.6 allow...6.8 Medium
- akamai technologies download managerStack-based buffer overflow in manager.exe in Akamai Download Manager (aka DLM or dlmanager)...9.3 High
- adobe acrobat, flash player, acrobat and reader, flash player +1 more +3 moreUnspecified vulnerability in Adobe Reader and Acrobat 9.x through 9.1.2, and Adobe Flash Player 9...7.8 High
- Show moreLoading…