CVEs published in August 2009
525 vulnerabilities, 81 critical, 1 exploited.
- kyoceramita scanner file utilityThe Scanner File Utility (aka listener) in Kyocera Mita (KM) 3.3.0.1 allows remote attackers to...9.8 Critical
- phpcartMultiple cross-site scripting (XSS) vulnerabilities in Carmosa phpCart 3.4 through 4.6.4 allow...4.3 Medium
- eset smart securityeasdrv.sys in ESET Smart Security 3.0.667.0 allows local users to cause a denial of service ...7.2 High
- sophos puremessage for microsoft exchangeThe installation of Sophos PureMessage for Microsoft Exchange 3.0 before 3.0.2, when both anti...5.0 Medium
- sophos puremessage for microsoft exchangeSophos PureMessage for Microsoft Exchange 3.0 before 3.0.2 allows remote attackers to cause a...5.0 Medium
- sophos puremessage for microsoft exchangeSophos PureMessage Scanner service (PMScanner.exe) in PureMessage for Microsoft Exchange 3.0...5.0 Medium
- najdi.si toolbarStack-based buffer overflow in an ActiveX control in najdisitoolbar.dll in Najdi.si Toolbar 2.0.4...9.3 High
- dnnsoftware dotnetnukeDotNetNuke 2.0 through 4.8.4 allows remote attackers to load .ascx files instead of skin files,...7.5 High
- dnnsoftware dotnetnukeUnspecified vulnerability in DotNetNuke 4.0 through 4.8.4 and 5.0 allows remote attackers to...5.0 Medium
- dnnsoftware dotnetnukeUnspecified vulnerability in DotNetNuke 4.4.1 through 4.8.4 allows remote authenticated users to...6.5 Medium
- qsoft-inc k-rateUnspecified vulnerability in the Manage Templates feature in Qsoft K-Rate Premium allows remote...6.8 Medium
- qsoft-inc k-rateMultiple cross-site scripting (XSS) vulnerabilities in Qsoft K-Rate Premium allow remote...4.3 Medium
- qsoft-inc k-rateMultiple SQL injection vulnerabilities in Qsoft K-Rate Premium allow remote attackers to execute...7.5 High
- intel biosIntel Desktop and Intel Mobile Boards with BIOS firmware DQ35JO, DQ35MP, DP35DP, DG33FB, DG33BU,...6.9 Medium
- sugarcrmSQL injection vulnerability in SugarCRM 4.5.1o and earlier, 5.0.0k and earlier, and 5.2.0g and...7.5 High
- arubanetworks aruba mobility controller, arubaos +1 moreThe SNMP daemon in ArubaOS 3.3.2.6 in Aruba Mobility Controller does not restrict SNMP access,...7.8 High
- cisco cs-marsThe Cisco Security Monitoring, Analysis and Response System (CS-MARS) 6.0.4 and earlier stores...3.3 Low
- cisco aironet ap1100, aironet ap1200 +1 moreCisco Aironet Lightweight Access Point (AP) devices send the contents of certain multicast data...7.8 High
- mozilla firefoxMozilla Firefox 3.5.2 on Windows XP, in some situations possibly involving an incompletely...5.0 Medium
- google chromeGoogle Chrome 1.0.154.65, 1.0.154.48, and earlier allows remote attackers to (1) cause a denial...5.0 Medium
- google chromeGoogle Chrome before 2.0.172.43 does not prevent SSL connections to a site with an X.509...6.4 Medium
- sun solarisin.lpd in the print service in Sun Solaris 8 and 9 allows remote attackers to cause a denial of...7.8 High
- google chromeGoogle V8, as used in Google Chrome before 2.0.172.43, allows remote attackers to bypass intended...10.0 High
- cisco aironet ap1100, aironet ap1200 +1 moreThe Over-the-Air Provisioning (OTAP) functionality on Cisco Aironet Lightweight Access Point 1100...7.3 High
- cisco unified communications managerCisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x, 5.x before 5.1(3g), 6...7.8 High
- cisco unified communications managerCisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x, 5.x before 5.1(3g), 6...7.8 High
- cisco unified communications managerCisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x, 5.x before 5.1(3g), 6...7.8 High
- cisco ios, ios xe, unified communications manager +2 moreCisco IOS 12.2 through 12.4 and 15.0 through 15.1, Cisco IOS XE 2.5.x and 2.6.x before 2.6.1, and...7.8 High
- cisco unified communications managerCisco Unified Communications Manager (aka CUCM, formerly CallManager) before 6.1(1) allows remote...7.8 High
- buildbotBuildbot vulnerable to cross-site scripting4.3 Medium
- unica affinium campaignCampaign/CampaignListener in the listener server in Unica Affinium Campaign 7.2.1.0.55 allows...5.0 Medium
- unica affinium campaignMultiple directory traversal vulnerabilities in Unica Affinium Campaign 7.2.1.0.55 allow remote...6.8 Medium
- unica affinium campaignMultiple cross-site scripting (XSS) vulnerabilities in Unica Affinium Campaign 7.2.1.0.55 allow...4.3 Medium
- pligg cmsMultiple SQL injection vulnerabilities in Pligg 9.9 and earlier allow remote attackers to execute...7.5 High
- pligg cmsMultiple directory traversal vulnerabilities in Pligg 9.9 and earlier allow remote attackers to ...7.8 High
- pligg cmsCross-site scripting (XSS) vulnerability in Pligg 9.9 and earlier allows remote attackers to...4.3 Medium
- photopost vbgalleryUnrestricted file upload vulnerability in upload.php in PhotoPost vBGallery 2.4.2 allows remote...6.5 Medium
- openproPHP remote file inclusion vulnerability in search_wA.php in OpenPro 1.3.1 allows remote attackers...7.5 High
- maianscriptworld maian greetingsMaian Greetings 2.1 allows remote attackers to bypass authentication and gain administrative...7.5 High
- thehockeystop hockeystats onlineMultiple SQL injection vulnerabilities in TheHockeyStop HockeySTATS Online 2.0 Basic and Advanced...7.5 High
- hirschelectronics velocity security management systemDirectory traversal vulnerability in the web server 1.0 in Velocity Security Management System...5.0 Medium
- kaspersky anti-virus, internet security +1 moreavp.exe in Kaspersky Internet Security 9.0.0.459 and Anti-Virus 9.0.0.463 allows remote attackers...4.3 Medium
- radvision scopiaCross-site scripting (XSS) vulnerability in entry/index.jsp in Radvision Scopia 5.7, and possibly...4.3 Medium
- squirrelmailMultiple cross-site request forgery (CSRF) vulnerabilities in SquirrelMail 1.4.19 and earlier,...6.8 Medium
- decomputeur toolbar uninstallerUnspecified vulnerability in the update feature in Toolbar Uninstaller 1.0.2 allows remote...9.3 High
- kolmck kol playerStack-based buffer overflow in Thaddy de Konng KOL Player 1.0 allows remote attackers to cause a...9.3 High
- cuteflowCuteFlow 2.10.3 and 2.11.0_c does not properly restrict access to pages/edituser.php, which...7.5 High
- buildbotBuildbot Cross-site scripting (XSS) vulnerability4.3 Medium
- revou micro blogging twitter cloneMultiple SQL injection vulnerabilities in ReVou Micro Blogging Twitter clone allow remote...7.5 High
- mybbMyBB (aka MyBulletinBoard) 1.4.3 includes the sensitive my_post_key parameter in URLs to...6.8 Medium
- Show moreLoading…