CVEs published in August 2009
525 vulnerabilities, 81 critical, 1 exploited.
- bcoos, bcoos devtracker, e-xoops +2 moreMultiple cross-site scripting (XSS) vulnerabilities in index.php in DevTracker module 3.0 for...4.3 Medium
- phpraiderCross-site scripting (XSS) vulnerability in an unspecified component in Simple Machines phpRaider...4.3 Medium
- tigran abrahamyan phpecho cmsPHP remote file inclusion vulnerability in kernel/smarty/Smarty.class.php in PHPEcho CMS 2.0 rc3...7.5 High
- galore com simpleshopSQL injection vulnerability in the Simple Shop Galore (com_simpleshop) component for Joomla!...7.5 High
- f5 big-ipWeb Management Console Cross-site request forgery (CSRF) vulnerability in the web management...6.8 Medium
- foxitsoftware wac serverHeap-based buffer overflow in Foxit Remote Access Server (aka WAC Server) 2.0 Build 3503 allows...10.0 High
- site2nite real estate webMultiple SQL injection vulnerabilities in Site2Nite Real Estate Web allow remote attackers to...7.5 High
- alilg aliboardUnrestricted file upload vulnerability in usercp.php in AlilG Application AliBoard Beta allows...6.0 Medium
- tiki tikiwiki cms\/groupwareTikiWiki 1.6.1 allows remote attackers to bypass authentication by entering a valid username with...7.5 High
- linux kernel, canonical ubuntu linux, fedoraproject fedora +9 more +11 moreThe udp_sendmsg function in the UDP implementation in (1) net/ipv4/udp.c and (2) net/ipv6/udp.c...7.8 High
- programmedintegration piplMultiple stack-based buffer overflows in xaudio.dll in Programmed Integration PIPL 2.5.0 and 2.5...9.3 High
- piwigoSQL injection vulnerability in comments.php in Piwigo before 2.0.3 allows remote attackers to...7.5 High
- sap netweaverCross-site scripting (XSS) vulnerability in uddiclient/process in the UDDI client in SAP...4.3 Medium
- slideshowpro directorDirectory traversal vulnerability in p.php in SlideShowPro Director 1.1 through 1.3.8 allows...7.8 High
- elkagroup elkapax cmsCross-site scripting (XSS) vulnerability in the Search feature in elka CMS (aka Elkapax) allows...4.3 Medium
- tgs-cms tgs content managementMultiple SQL injection vulnerabilities in TGS Content Management 0.x allow remote attackers to...7.5 High
- tgs-cms tgs content managementCross-site scripting (XSS) vulnerability in login.php in TGS Content Management 0.x allows remote...4.3 Medium
- digitalspinners ds cmsSQL injection vulnerability in DetailFile.php in DigitalSpinners DS CMS 1.0 allows remote...7.5 High
- phpcompet.free php competition systemMultiple SQL injection vulnerabilities in PHP Competition System BETA 0.84 and earlier allow...7.5 High
- webdav neon, apple mac os x, canonical ubuntu linux +1 more +3 moreneon before 0.28.6, when OpenSSL or GnuTLS is used, does not properly handle a '\0' character in...5.8 Medium
- webdav neonneon before 0.28.6, when expat is used, does not properly detect recursion during entity...4.3 Medium
- cisco ios xrCisco IOS XR 3.8.1 and earlier allows remote authenticated users to cause a denial of service ...3.3 Low
- adobe flex sdkCross-site scripting (XSS) vulnerability in index.template.html in the express-install templates...2.6 Low
- cisco ios xrCisco IOS XR 3.8.1 and earlier allows remote attackers to cause a denial of service (process...3.3 Low
- aves rpg boardRPG.Board 0.8 Beta2 and earlier allows remote attackers to bypass authentication and gain...7.5 High
- libra file manager php filemanagerLibra File Manager 1.18 and earlier allows remote attackers to bypass authentication and gain...7.5 High
- efrontlearning efrontUnrestricted file upload vulnerability in filesystem3.class.php in eFront 3.5.1 build 2710 and...6.8 Medium
- checkpoint zonealarmTrueVector in Check Point ZoneAlarm 8.0.020.000, with vsmon.exe running, allows remote HTTP...4.3 Medium
- arzdev gemini portal, gemini lite +1 moreadmin.php in Arz Development The Gemini Portal 4.7 and earlier allows remote attackers to bypass...6.8 Medium
- arubanetworks aruba mobility controller, arubaos +1 moreAruba Mobility Controller running ArubaOS 3.3.1.16, and possibly other versions, installs the...10.0 High
- chilkatsoft chilkat imap activex controlInsecure method vulnerability in ChilkatMail_v7_9.dll in the Chilkat Software IMAP ActiveX...9.3 High
- availscript jobs portal scriptUnrestricted file upload vulnerability in editlogo.php in AvailScript Jobs Portal Script allows...6.0 Medium
- mcafee safeboot device encryptionMcAfee SafeBoot Device Encryption 4 build 4750 and earlier stores pre-boot authentication...2.1 Low
- esqlanelapseEsqlanelapse 2.6.1 and 2.6.2 allows remote attackers to bypass authentication and gain privileges...7.5 High
- nashtech easy php calendarCross-site scripting (XSS) vulnerability in NashTech Easy PHP Calendar 6.3.25 allows remote...4.3 Medium
- cacertCross-site scripting (XSS) vulnerability in analyse.php in CAcert 20080921, and possibly other...4.3 Medium
- luke mewburn tnftpdtnftpd before 20080929 splits large command strings into multiple commands, which allows remote...6.8 Medium
- djcalendarDirectory traversal vulnerability in DJcalendar.cgi in DJCalendar allows remote attackers to read...7.8 High
- videosbroadcastyourself videos broadcast yourselfMultiple SQL injection vulnerabilities in Videos Broadcast Yourself 2 allow remote attackers to...7.5 High
- bitmixsoft php-lanceMultiple directory traversal vulnerabilities in BitmixSoft PHP-Lance 1.52 allow remote attackers...5.0 Medium
- pixaria galleryAbsolute path traversal vulnerability in pixaria.image.php in Pixaria Gallery 2.0.0 through 2.3.5...7.8 High
- mocdesigns php newsMultiple SQL injection vulnerabilities in login.php in MOC Designs PHP News 1.1 allow remote...7.5 High
- elvinbtsMultiple cross-site scripting (XSS) vulnerabilities in Elvin 1.2.2 allow remote attackers to...4.3 Medium
- boonex orcaCross-site scripting (XSS) vulnerability in Boonex Orca 2.0 and 2.0.2 allows remote authenticated...3.5 Low
- thegreenbow vpn clientThe tgbvpn.sys driver in TheGreenBow IPSec VPN Client 4.61.003 allows local users to cause a...2.1 Low
- imtoo mpeg encoderStack-based buffer overflow in ImTOO MPEG Encoder 3.1.53 allows remote attackers to cause a...4.3 Medium
- 2kgames vietcong 2Format string vulnerability in the CNS_AddTxt function in logs.dll in 2K Games Vietcong 2 1.10...9.3 High
- 2fly gift delivery systemSQL injection vulnerability in 2fly_gift.php in 2FLY Gift Delivery System 6.0 allows remote...7.5 High
- xzeroscripts xzero community classifiedsCross-site scripting (XSS) vulnerability in index.php in XZero Community Classifieds 4.97.8 and...4.3 Medium
- xzeroscripts xzero community classifiedsCross-site scripting (XSS) vulnerability in index.php in XZero Community Classifieds 4.97.8...4.3 Medium
- Show moreLoading…