Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2009
August

CVEs published in August 2009

525 vulnerabilities, 81 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

raidsonic icy box nasuserHandler.cgi in RaidSonic ICY BOX NAS firmware 2.3.2.IB.2.RS.1 allows remote attackers to...CVE-2008-708110.0 HighAugust 25, 2009
phpclassifiedsscript php classifieds scriptTeam PHP PHP Classifieds Script stores sensitive information under the web root with insufficient...CVE-2008-7080Public exploit5.0 MediumAugust 25, 2009
nero showtimeBuffer overflow in Nero ShowTime 5.0.15.0 allows remote attackers to cause a denial of service ...CVE-2008-7079Public exploit9.3 HighAugust 25, 2009
maxum rumpusMultiple buffer overflows in Rumpus before 6.0.1 allow remote attackers to (1) cause a denial of...CVE-2008-7078Public exploit9.0 HighAugust 25, 2009
relative sailplannerMultiple SQL injection vulnerabilities in SailPlanner 0.3a allow remote attackers to execute...CVE-2008-7077Public exploit7.5 HighAugust 25, 2009
kalptaru infotech stararticlesUnrestricted file upload vulnerability in user.modify.profile.php in Kalptaru Infotech Ltd. Star...CVE-2008-7076Public exploit6.5 MediumAugust 25, 2009
kalptaru infotech stararticlesMultiple SQL injection vulnerabilities in Kalptaru Infotech Ltd. Star Articles 6.0 allow remote...CVE-2008-7075Public exploit7.5 HighAugust 25, 2009
memcode i.scribeFormat string vulnerability in MemeCode Software i.Scribe 1.88 through 2.00 before Beta9 allows...CVE-2008-7074Public exploit9.3 HighAugust 25, 2009
ekkaia pie web, rssmodule rss module +1 morePHP remote file inclusion vulnerability in lib/action/rss.php in RSS module 0.1 for Pie Web M{a,e...CVE-2008-7073Public exploit6.8 MediumAugust 25, 2009
chipmunk-scripts chipmunk topsitesCross-site scripting (XSS) vulnerability in index.php in Chipmunk Topsites allows remote...CVE-2008-7072Public exploit4.3 MediumAugust 25, 2009
chipmunk-scripts chipmunk topsitesSQL injection vulnerability in authenticate.php in Chipmunk Topsites allows remote attackers to...CVE-2008-7071Public exploit7.5 HighAugust 25, 2009
kvircArgument injection vulnerability in the URI handler in KVIrc 3.4.2 Shiny allows remote attackers...CVE-2008-7070Public exploit9.3 HighAugust 25, 2009
paul arbogast accmsAll Club CMS (ACCMS) 0.0.2 and earlier stores sensitive information under the web root with...CVE-2008-7069Public exploit7.5 HighAugust 25, 2009
pagetreecms page tree cmsPHP remote file inclusion vulnerability in admin/plugins/Online_Users/main.php in PageTree CMS 0...CVE-2008-7067Public exploit7.5 HighAugust 25, 2009
2enetworx openforumOpenForum 0.66 Beta allows remote attackers to bypass authentication and reset passwords of other...CVE-2008-7066Public exploit7.5 HighAugust 25, 2009
siemens gigaset c450 ip, gigaset c475 ip +1 moreSiemens C450 IP and C475 IP VoIP devices allow remote attackers to cause a denial of service ...CVE-2008-7065Public exploit7.8 HighAugust 25, 2009
quicksilver forums forumsDirectory traversal vulnerability in the get_lang function in global.php in Quicksilver Forums 1...CVE-2008-7064Public exploit7.5 HighAugust 25, 2009
ocean12tech faq manager proOcean12 FAQ Manager Pro stores sensitive data under the web root with insufficient access control...CVE-2008-7063Public exploit5.0 MediumAugust 25, 2009
lovecmsUnrestricted file upload vulnerability in admin/index.php in Download Manager module 1.0 for...CVE-2008-7062Public exploit6.8 MediumAugust 25, 2009
google chromeThe tooltip manager (chrome/views/tooltip_manager.cc) in Google Chrome 0.2.149.29 Build 1798 and...CVE-2008-7061Public exploit4.3 MediumAugust 24, 2009
one-newsMultiple cross-site scripting (XSS) vulnerabilities in One-News Beta 2 allow remote attackers to...CVE-2008-70604.3 MediumAugust 24, 2009
aled owen one-newsSQL injection vulnerability in index.php in One-News Beta 2 allows remote attackers to execute...CVE-2008-7059Public exploit7.5 HighAugust 24, 2009
grayscalecms bandsite cmsCross-site request forgery (CSRF) vulnerability in BandSite CMS 1.1.4 allows remote attackers to...CVE-2008-7058Public exploit6.8 MediumAugust 24, 2009
grayscalecms bandsite cmsCross-site scripting (XSS) vulnerability in merchandise.php in BandSite CMS 1.1.4 allows remote...CVE-2008-7057Public exploit4.3 MediumAugust 24, 2009
grayscalecms bandsite cmsBandSite CMS 1.1.4 does not perform access control for adminpanel/phpmydump.php, which allows...CVE-2008-7056Public exploit5.0 MediumAugust 24, 2009
visualshapers ezcontentsmodule.php in ezContents 2.0.3 allows remote attackers to bypass the directory traversal...CVE-2008-7055Public exploit5.1 MediumAugust 24, 2009
visualshapers ezcontentsMultiple directory traversal vulnerabilities in ezContents 2.0.3 allow remote attackers to...CVE-2008-7054Public exploit5.1 MediumAugust 24, 2009
logmein ractrl.dllLogMeIn Remote Access Utility ActiveX control (RACtrl.dll) allows remote attackers to cause a...CVE-2008-7053Public exploit9.3 HighAugust 24, 2009
ibm websphere commerce suiteThe (1) Net.Commerce and (2) Net.Data components in IBM WebSphere Commerce Suite store sensitive...CVE-2009-29565.0 MediumAugust 24, 2009
google chromeGoogle Chrome 1.0.154.48 and earlier allows remote attackers to cause a denial of service (CPU...CVE-2009-29555.0 MediumAugust 24, 2009
microsoft internet explorerMicrosoft Internet Explorer 6.0.2900.2180 and earlier allows remote attackers to cause a denial...CVE-2009-2954EPSS 13.1%5.0 MediumAugust 24, 2009
mozilla firefoxMozilla Firefox 3.0.6 through 3.0.13, and 3.5.x, allows remote attackers to cause a denial of...CVE-2009-2953Public exploit5.0 MediumAugust 24, 2009
sun opensolaris, solaris +1 moreUnspecified vulnerability in the pollwakeup function in Sun Solaris 10, and OpenSolaris before...CVE-2009-29524.9 MediumAugust 24, 2009
phenotype-cms phenotype cmsPhenotype CMS before 2.9 does not use a random salt value for password encryption, which makes it...CVE-2009-29517.5 HighAugust 24, 2009
preprojects pre real estate listingsUnrestricted file upload vulnerability in profile.php in Pre Projects Pre Real Estate Listings...CVE-2008-7052Public exploit6.5 MediumAugust 24, 2009
ajsquare aj articleAJ Square AJ Article allows remote attackers to bypass authentication and access administrator...CVE-2008-7051Public exploit7.5 HighAugust 24, 2009
wowraidmanagerThe password_check function in auth/auth_phpbb3.php in WoW Raid Manager 3.5.1 before Patch 1,...CVE-2008-70507.5 HighAugust 24, 2009
natterchatMultiple SQL injection vulnerabilities in login.asp in NatterChat 1.1 and 1.12 allow remote...CVE-2008-7049Public exploit7.5 HighAugust 24, 2009
natterchatMultiple cross-site scripting (XSS) vulnerabilities in NatterChat 1.12 allow remote attackers to...CVE-2008-70484.3 MediumAugust 24, 2009
natterchatNatterChat 1.1 allows remote attackers to bypass authentication and gain administrator privileges...CVE-2008-7047Public exploit7.5 HighAugust 24, 2009
ajsquare free polling scriptAJ Square Free Polling Script (AJPoll) allows remote attackers to bypass authentication and...CVE-2008-7046Public exploit6.4 MediumAugust 24, 2009
ajsquare free polling scriptAJ Square Free Polling Script (AJPoll) Database version allows remote attackers to bypass...CVE-2008-7045Public exploit6.4 MediumAugust 24, 2009
ajsquare free polling scriptSQL injection vulnerability in admin/include/newpoll.php in AJ Square Free Polling Script (AJPoll...CVE-2008-7044Public exploit7.5 HighAugust 24, 2009
freshscripts fresh email scriptCross-site scripting (XSS) vulnerability in register.php in FreshScripts Fresh Email Script 1.0...CVE-2008-7043Public exploit4.3 MediumAugust 24, 2009
freshscripts fresh email scriptPHP remote file inclusion vulnerability in url.php in FreshScripts Fresh Email Script 1.0 through...CVE-2008-7042Public exploit7.5 HighAugust 24, 2009
ajsquare aj classifiedsAJ Classifieds allows remote attackers to bypass authentication and gain administrator privileges...CVE-2008-7041Public exploit7.5 HighAugust 24, 2009
yellowswordfish simple forumSQL injection vulnerability in ahah/sf-profile.php in the Yellow Swordfish Simple Forum module...CVE-2008-7040Public exploit7.5 HighAugust 24, 2009
gelatocmsCross-site scripting (XSS) vulnerability in admin/comments.php in Gelato CMS 0.95 allows remote...CVE-2008-70394.3 MediumAugust 24, 2009
maxdev my egallerySQL injection vulnerability in the My_eGallery module for PHP-Nuke allows remote attackers to...CVE-2008-7038Public exploit7.5 HighAugust 24, 2009
itn news gadgetThe Sidebar gadget in ITN News Gadget (aka ITN Hub Gadget) 1.06 for Windows Vista, and possibly...CVE-2008-70377.5 HighAugust 24, 2009
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open