CVEs published in September 2009
575 vulnerabilities, 102 critical, 0 exploited.
- ibm lotus notes connectorA certain ActiveX control in lnresobject.dll 7.1.1.119 in the Research In Motion (RIM) Lotus...4.3 Medium
- autonomy keyview, ibm lotus notes, symantec brightmail appliance +4 more +6 moreBuffer overflow in xlssr.dll in the Autonomy KeyView XLS viewer (aka File Viewer for Excel), as...9.3 High
- simon rycroft sidMultiple PHP remote file inclusion vulnerabilities in Specimen Image Database (SID), when...6.8 Medium
- gurpartap singh liveCross-site request forgery (CSRF) vulnerability in Live 5.x before 5.x-0.1, a module for Drupal,...6.8 Medium
- ber kessels refine by taxoCross-site scripting (XSS) vulnerability in Refine by Taxonomy 5.x before 5.x-0.1, a module for...4.3 Medium
- agilewikiUnspecified vulnerability in AgileWiki before 0.10.1 has unknown impact and attack vectors...10.0 High
- synfig synfigstudioUnspecified vulnerability in Synfig Animation Studio before 0.61.08 allows attackers to execute...10.0 High
- intralearnMultiple cross-site scripting (XSS) vulnerabilities in IntraLearn Software IntraLearn 2.1, and...4.3 Medium
- intralearnIntraLearn Software IntraLearn 2.1, and possibly other versions before 4.2.3, allows remote...5.0 Medium
- coronamatrix phpaddressbookMultiple SQL injection vulnerabilities in index.php in CoronaMatrix phpAddressBook 2.0 allow...7.5 High
- rarlab winrarMultiple unspecified vulnerabilities in RARLAB WinRAR before 3.71 have unknown impact and attack...10.0 High
- phpbbphpBB 2.0.23 includes the session ID in a request to modcp.php when the moderator or...6.8 Medium
- cpanelAbsolute path traversal vulnerability in the Disk Usage module (frontend/x/diskusage/index.html)...5.0 Medium
- alexphpteam \@lex pollCross-site scripting (XSS) vulnerability in setup.php in @lex Poll 2.1 allows remote attackers to...4.3 Medium
- alexguestbook \@lex guestbookMultiple cross-site scripting (XSS) vulnerabilities in @lex Guestbook 4.0.5 and earlier allow...4.3 Medium
- eye.fi eye-fi managerMultiple cross-site request forgery (CSRF) vulnerabilities in WS-Proxy in Eye-Fi 1.1.2 allow...6.8 Medium
- eye.fi eye-fi managerThe Manager in Eye-Fi 1.1.2 generates predictable snonce values based on the time of day, which...5.0 Medium
- eye.fi eye-fi managerWS-Proxy in Eye-Fi 1.1.2 allows remote attackers to cause a denial of service (crash) via an...5.0 Medium
- icq toolbartoolbaru.dll in ICQ Toolbar (ICQToolbar) 2.3 allows remote attackers to cause a denial of service...4.3 Medium
- icq toolbartoolbaru.dll in ICQ Toolbar (ICQToolbar) 2.3 allows remote attackers to cause a denial of service...4.3 Medium
- redgalaxy download centerMultiple cross-site scripting (XSS) vulnerabilities in the default URI in Chris LaPointe...4.3 Medium
- onlinetools easyimagecatalogueMultiple cross-site scripting (XSS) vulnerabilities in onlinetools.org EasyImageCatalogue 1.3.1...4.3 Medium
- nuked-klanCross-site scripting (XSS) vulnerability in index.php in Nuked-Klan 1.3 beta allows remote...4.3 Medium
- thekelleys dnsmasqThe tftp_request function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, allows...4.3 Medium
- thekelleys dnsmasqHeap-based buffer overflow in the tftp_request function in tftp.c in dnsmasq before 2.50, when -...6.8 Medium