CVEs published in September 2009
575 vulnerabilities, 102 critical, 0 exploited.
- vastal mmorpg zone SQL injection vulnerability in view_news.php in Vastal I-Tech MMORPG Zone allows remote attackers... 7.5 High
- alibabaclone alibaba clone SQL injection vulnerability in offers_buy.php in Alibaba Clone 3.0 allows remote attackers to... 7.5 High
- bpowerhouse bpholidaylettings Multiple SQL injection vulnerabilities in search.aspx in BPowerHouse BPHolidayLettings 1.0 allow... 7.5 High
- bpowerhouse bpmusic SQL injection vulnerability in music.php in BPowerHouse BPMusic 1.0 allows remote attackers to... 7.5 High
- bpowerhouse bpstudents SQL injection vulnerability in students.php in BPowerHouse BPStudents 1.0 allows remote attackers... 7.5 High
- bpowerhouse bpgames Multiple SQL injection vulnerabilities in BPowerHouse BPGames 1.0 allow remote attackers to... 7.5 High
- bpowerhouse bplawyercasedocuments SQL injection vulnerability in employee.aspx in BPowerHouse BPLawyerCaseDocuments 1.0 allows... 7.5 High
- hbcms SQL injection vulnerability in php/update_article_hits.php in HBcms 1.7 allows remote attackers... 6.8 Medium
- vastal agent zone SQL injection vulnerability in view_listing.php in Vastal I-Tech Agent Zone (aka The Real Estate... 7.5 High
- vastal dvd zone Cross-site scripting (XSS) vulnerability in view_mag.php in Vastal I-Tech DVD Zone allows remote... 4.3 Medium
- vastal dvd zone SQL injection vulnerability in view_mag.php in Vastal I-Tech DVD Zone allows remote attackers to... 7.5 High
- todor lazarov t-htb manager Multiple SQL injection vulnerabilities in index.php in T-HTB Manager 0.5, when magic_quotes_gpc... 6.8 Medium
- zenas paobacheca guestbook Multiple cross-site scripting (XSS) vulnerabilities in Zenas PaoBacheca Guestbook 2.1 allow... 4.3 Medium
- gotdns loggix project Multiple PHP remote file inclusion vulnerabilities in Loggix Project 9.4.5 and earlier allow... 7.5 High
- kinfusion com sportfusion SQL injection vulnerability in the Kinfusion SportFusion (com_sportfusion) component 0.2.2... 7.5 High
- gnu wget GNU Wget before 1.12 does not properly handle a '\0' character in a domain name in the Common... 6.8 Medium
- adobe photoshop elements Adobe Photoshop Elements 8.0 installs the Adobe Active File Monitor V8 service with an insecure... 7.8 High
- ron jerome bibliography Cross-site scripting (XSS) vulnerability in the Bibliography (aka Biblio) module 6.x-1.6 for... 2.1 Low
- juniper junos Multiple cross-site scripting (XSS) vulnerabilities in the J-Web interface in Juniper JUNOS 8.5R1... 3.5 Low
- juniper junos Multiple cross-site scripting (XSS) vulnerabilities in the J-Web interface in Juniper JUNOS 8.5R1... 3.5 Low
- juniper junos Cross-site scripting (XSS) vulnerability in the J-Web interface in Juniper JUNOS 8.5R1.14 and 9... 4.3 Medium
- coreftp core ftp Stack-based buffer overflow in Core FTP 2.1 build 1612 allows user-assisted remote attackers to... 9.3 High
- globalscape cuteftp Heap-based buffer overflow in the Create New Site feature in GlobalSCAPE CuteFTP Professional,... 9.3 High
- trustport antivirus, pc security +1 more TrustPort Antivirus before 2.8.0.2266 and PC Security before 2.0.0.1291 use weak permissions ... 7.8 High
- isygen com icrmbasic A certain interface in the iCRM Basic (com_icrmbasic) component 1.4.2.31 for Joomla! does not... 7.5 High
- isygen icrm basic SQL injection vulnerability in the iCRM Basic (com_icrmbasic) component 1.4.2.31 for Joomla!... 7.5 High
- drupal, ron jerome bibliography +1 more Cross-site scripting (XSS) vulnerability in Bibliography (Biblio) 5.x before 5.x-1.17 and 6.x... 4.3 Medium
- nightlight fireftp Argument injection vulnerability in (1) src/content/js/connection/sftp.js and (2) src/content/js... 6.0 Medium
- rim blackberry device software The Blackberry Browser in RIM BlackBerry Device Software 4.5.0 before 4.5.0.173, 4.6.0 before 4.6... 6.8 Medium
- ibm db2 IBM DB2 9.1 before FP8 does not require the SETSESSIONUSER privilege for the SET SESSION... 10.0 High
- ibm db2 IBM DB2 8 before FP18, 9.1 before FP8, and 9.5 before FP4 allows remote authenticated users to... 6.5 Medium
- ibm db2 IBM DB2 8 before FP18, 9.1 before FP8, 9.5 before FP4, and 9.7 before FP2 does not perform the... 7.5 High
- ibm informix dynamic server IBM Informix Dynamic Server (IDS) 10.00 before 10.00.xC11, 11.10 before 11.10.xC4, and 11.50... 5.0 Medium
- ibm lotus connections Cross-site scripting (XSS) vulnerability in profiles/html/simpleSearch.do in IBM Lotus... 4.3 Medium
- sun solaris Multiple unspecified vulnerabilities in Common Desktop Environment (CDE) in Sun Solaris 10, when... 6.9 Medium
- cisco ace web application firewall, ace xml gateway +1 more Cisco ACE XML Gateway (AXG) and ACE Web Application Firewall (WAF) before 6.1 allow remote... 5.0 Medium
- google chrome Google Chrome, possibly 3.0.195.21 and earlier, does not properly handle a '\0' character in a... 7.5 High
- apple safari Apple Safari, possibly before 4.0.3, on Mac OS X does not properly handle a '\0' character in a... 7.5 High
- ibm lotus quickr Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Quickr 8.1.0 services for... 4.3 Medium
- hp remote graphics software Unspecified vulnerability in the Sender module in HP Remote Graphics Software (RGS) 5.1.3 through... 7.1 High
- hp procurve identity driven manager Unspecified vulnerability in HP ProCurve Identity Driven Manager (IDM) A.02.x through A.02.03 and... 6.8 Medium
- radactive i-load WebCoreModule.ashx in RADactive I-Load before 2008.2.5.0 allows remote attackers to obtain... 5.0 Medium
- radactive i-load Directory traversal vulnerability in WebCoreModule.ashx in RADactive I-Load before 2008.2.5.0... 5.0 Medium
- radactive i-load Multiple cross-site scripting (XSS) vulnerabilities in WebCoreModule.ashx in RADactive I-Load... 4.3 Medium
- collectorz mp3 collector MP3 Collector 2.3 allows remote attackers to cause a denial of service (application crash) via a... 4.3 Medium
- bakbone netvault npvmgr.exe in BakBone NetVault Backup 8.22 Build 29 allows remote attackers to cause a denial of... 5.0 Medium
- radactive i-load Unrestricted file upload vulnerability in RADactive I-Load before 2008.2.5.0 allows remote... 6.8 Medium
- rick estrada com mytube SQL injection vulnerability in the MyRemote Video Gallery (com_mytube) component 1.0 Beta for... 7.5 High
- code-crafters ability mail server Unspecified vulnerability in Code-Crafters Ability Mail Server before 2.70 allows remote... 5.0 Medium
- e107 Cross-site scripting (XSS) vulnerability in email.php in e107 0.7.16 and earlier allows remote... 4.3 Medium
- Show olderLoading…