CVEs published in August 2009
525 vulnerabilities, 81 critical, 1 exploited.
- 68 classifieds classifiedsMultiple cross-site scripting (XSS) vulnerabilities in 68 Classifieds 4.1 allow remote attackers...4.3 Medium
- ajsquare aj matrix dnaSQL injection vulnerability in index.php in AJ Matrix DNA allows remote attackers to execute...7.5 High
- garagesalesjunkie garagesales scriptCross-site scripting (XSS) vulnerability in visitor/view.php in GarageSales Script allows remote...4.3 Medium
- garagesalesjunkie garagesales scriptSQL injection vulnerability in visitor/view.php in GarageSales Script allows remote attackers to...7.5 High
- sellatsite.com smart asp surveySQL injection vulnerability in showresult.asp in Smart ASP Survey allows remote attackers to...7.5 High
- phparcadescriptSQL injection vulnerability in linkout.php in PHPArcadeScript (PHP Arcade Script) 4.0 allows...7.5 High
- php-paid4mailSQL injection vulnerability in paidbanner.php in PHP Paid 4 Mail Script allows remote attackers...7.5 High
- shop-020 php paid 4 mail scriptPHP remote file inclusion vulnerability in home.php in PHP Paid 4 Mail Script allows remote...7.5 High
- realtysoft pg roomate finder solutionMultiple cross-site scripting (XSS) vulnerabilities in PG Roommate Finder Solution allow remote...4.3 Medium
- freearcadescript free arcade scriptCross-site scripting (XSS) vulnerability in Free Arcade Script 1.3 allows remote attackers to...4.3 Medium
- poweruploadPowerUpload 2.4 allows remote attackers to bypass authentication and gain administrative access...7.5 High
- ultrize timesheetPHP remote file inclusion vulnerability in include/timesheet.php in Ultrize TimeSheet 1.2.2, when...6.8 Medium
- linux kernelThe load_flat_shared_library function in fs/binfmt_flat.c in the flat subsystem in the Linux...7.8 High
- linux kernelThe init_posix_timers function in kernel/posix-timers.c in the Linux kernel before 2.6.31-rc6...7.2 High
- dd-wrthttpd.c in httpd in the management GUI in DD-WRT 24 sp1 does not require administrative...7.5 High
- dd-wrthttpd.c in httpd in the management GUI in DD-WRT 24 sp1, and other versions before build 12533,...8.3 High
- microsoft internet explorer, windows 7 +1 moreMicrosoft Internet Explorer 8.0.7100.0 on Windows 7 RC on the x64 platform allows remote...5.0 Medium
- linux kernelThe mm_for_maps function in fs/proc/base.c in the Linux kernel 2.6.30.4 and earlier allows local...2.1 Low
- hp insight control suite for linuxCross-site request forgery (CSRF) vulnerability in HP Insight Control Suite For Linux (aka ICE-LX...6.8 Medium
- snom 300 firmware, 320 firmware, 360 firmware +2 more +4 moreThe web interface on the snom VoIP phones snom 300, snom 320, snom 360, snom 370, and snom 820...9.8 Critical
- dd-wrtMultiple cross-site request forgery (CSRF) vulnerabilities in apply.cgi in DD-WRT 24 sp2 allow...6.8 Medium
- dd-wrtMultiple cross-site request forgery (CSRF) vulnerabilities in apply.cgi in DD-WRT 24 sp1 and...6.8 Medium
- debian linux, linux kernel, redhat enterprise linux desktop +5 more +7 moreThe Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all...7.8 High
- ibm websphere commerceUnspecified vulnerability in IBM WebSphere Commerce 6.0 Enterprise before 6.0.0.8, when trace is...1.5 Low
- ibm websphere partner gatewaySQL injection vulnerability in the console in IBM WebSphere Partner Gateway (WPG) Enterprise 6.0...6.5 Medium
- ibm websphere application serverIBM WebSphere Application Server (WAS) 7.0 before 7.0.0.5 does not properly read the...7.5 High
- ibm websphere application serverThe System Management/Repository component in IBM WebSphere Application Server (WAS) 7.0 before 7...5.0 Medium
- ibm websphere application serverUnspecified vulnerability in wsadmin in the System Management/Repository component in IBM...5.0 Medium
- ibm websphere application serverThe Migration component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.25 and 7.0...2.1 Low
- ibm websphere application serverThe Servlet Engine/Web Container component in IBM WebSphere Application Server (WAS) 6.1 before 6...7.5 High
- ibm websphere application serverThe Web Services functionality in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.25 and...2.1 Low
- ibm websphere application serverThe Security component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.25 and 7.0...7.5 High
- ibm websphere application serverThe Service Component Architecture (SCA) feature pack for IBM WebSphere Application Server (WAS)...6.5 Medium
- ibm websphere commerceMultiple unspecified vulnerabilities in IBM WebSphere Commerce 6.0 before 6.0.0.7 have unknown...10.0 High
- wordpresswp-login.php in WordPress 2.8.3 and earlier allows remote attackers to force a password reset for...7.5 High
- avira antivir, antivir security suite +1 moreUnquoted Windows search path vulnerability in the scheduler (sched.exe) in Avira AntiVir, AntiVir...7.2 High
- karen stevenson cckMultiple cross-site scripting (XSS) vulnerabilities in Drupal Content Construction Kit (CCK) 5.x...3.5 Low
- simplemachines smfThe password reset functionality in Simple Machines Forum (SMF) 1.0.x before 1.0.14, 1.1.x before...7.5 High
- ubbcentral ubb.threadsSQL injection vulnerability in dosearch.inc.php in UBB.threads 7.3.1 and earlier allows remote...7.5 High
- pentasoft corp. avactis shopping cartMultiple cross-site scripting (XSS) vulnerabilities in checkout.php in Avactis Shopping Cart 1.8...4.3 Medium
- pligg cmsMultiple SQL injection vulnerabilities in submit.php in Pligg CMS 9.9.5 allow remote attackers to...7.5 High
- alt-n mdaemon, worldclient +1 moreMultiple unspecified vulnerabilities in WorldClient in Alt-N MDaemon before 10.02 have unknown...5.0 Medium
- aj square auctionAJ Square AJ Auction Pro Platinum Skin #1 sends a redirect but does not exit when it is called...7.5 High
- aj square auctionAJ Square AJ Auction OOPD, Pro Platinum Skin #1, Pro Platinum Skin #2, and Web 2.0 send a...7.5 High
- x7 group chatSQL injection vulnerability in the login page in X7 Chat 2.0.5 allows remote attackers to execute...7.5 High
- turnkeyforms text link salesadmin.php in TurnkeyForms Text Link Sales allows remote attackers to bypass authentication and...7.5 High
- avira antivir, antivir personal, antivir professional +1 more +3 moreAvira AntiVir Premium, Premium Security Suite, AntiVir Professional, and AntiVir Personal - FREE...7.2 High
- mozilla seamonkey, thunderbird +1 moremailnews in Mozilla Thunderbird before 2.0.0.18 and SeaMonkey before 1.1.13, when JavaScript is...4.3 Medium
- apple safariWebKit in Apple Safari before 4.0.3 does not properly restrict the URL scheme of the pluginspage...7.1 High
- apple iphone os, safari +1 moreIncomplete blacklist vulnerability in WebKit in Apple Safari before 4.0.3, as used on iPhone OS...5.8 Medium
- Show moreLoading…