CVEs published in September 2009
575 vulnerabilities, 102 critical, 0 exploited.
- microsoft internet information servicesStack consumption vulnerability in the FTP Service in Microsoft Internet Information Services ...5.0 Medium
- bittorrent, utorrent +1 moreBuffer overflow in the web interface in BitTorrent 6.0.1 (build 7859) and earlier, and uTorrent 1...5.0 Medium
- alice gate2 plus wi-fiCross-site request forgery in cp06_wifi_m_nocifr.cgi in the administrator panel in TELECOM ITALIA...6.8 Medium
- ryo-oh-ki shareazaMultiple unspecified vulnerabilities in Shareaza before 2.3.1.0 have unknown impact and attack...10.0 High
- sinecmsDirectory traversal vulnerability in mods/Integrated/index.php in SineCMS 2.3.5 and earlier, when...6.8 Medium
- heroshare hero super player 3000Buffer overflow in Hero Super Player 3000 allows remote attackers to cause a denial of service ...9.3 High
- fortinet fortigate-1000Fortinet FortiGuard Fortinet FortiGate-1000 3.00 build 040075,070111 allows remote attackers to...7.5 High
- silcnet silc client, silc toolkit +1 moreMultiple format string vulnerabilities in lib/silcclient/command.c in Secure Internet Live...7.5 High
- silcnet silc client, silc toolkit +1 moreMultiple format string vulnerabilities in lib/silcclient/client_entry.c in Secure Internet Live...7.5 High
- sun openoffice.orgHeap-based buffer overflow in svtools/source/filter.vcl/wmf/enhwmf.cxx in Go-oo 2.x and 3.x...9.3 High
- silcnet silc toolkitThe silc_http_server_parse function in lib/silchttp/silchttpserver.c in the internal HTTP server...5.8 Medium
- silcnet silc toolkitThe silc_asn1_encoder function in lib/silcasn1/silcasn1_encode.c in Secure Internet Live...5.8 Medium
- webformatique reservation managerCross-site scripting (XSS) vulnerability in index.php in Reservation Manager allows remote...4.3 Medium
- propertywatchscript property watchMultiple cross-site scripting (XSS) vulnerabilities in PropertyWatchScript.com Property Watch 2.0...4.3 Medium
- rein velt veditPHP remote file inclusion vulnerability in editor/edit_htmlarea.php in Ve-EDIT 0.1.4 allows...7.5 High
- rein velt veditDirectory traversal vulnerability in debugger/debug_php.php in Ve-EDIT 0.1.4 allows remote...7.5 High
- indianpulses com gameserverSQL injection vulnerability in the Game Server (com_gameserver) component 1.0 for Joomla! allows...7.5 High
- phplivesupport. phplive\!SQL injection vulnerability in message_box.php in OSI Codes PHP Live! 3.3 allows remote attackers...7.5 High
- alqa6ari script q rSQL injection vulnerability in lesson.php in Alqatari Q R Script 1.0 allows remote attackers to...7.5 High
- allpublication jboardMultiple cross-site scripting (XSS) vulnerabilities in Joker Board (aka JBoard) 2.0 and earlier...4.3 Medium
- allpublication jboardMultiple SQL injection vulnerabilities in Joker Board (aka JBoard) 2.0 and earlier allow remote...7.5 High
- aksoft akplayerStack-based buffer overflow in akPlayer 1.9.0 allows remote attackers to execute arbitrary code...9.3 High
- aom-software beexMultiple cross-site scripting (XSS) vulnerabilities in AOM Software Beex 3 allow remote attackers...4.3 Medium
- bas bloemsaat kingcmsPHP remote file inclusion vulnerability in include/engine/content/elements/menu.php in KingCMS 0...7.5 High
- dlecms dlePHP remote file inclusion vulnerability in engine/api/api.class.php in DataLife Engine (DLE) 8.2...7.5 High
- artetics com artportalSQL injection vulnerability in the Artetics.com Art Portal (com_artportal) component 1.0 for...7.5 High
- jvitals com agoraDirectory traversal vulnerability in the Agora (com_agora) component 3.0.0b for Joomla! allows...6.8 Medium
- absoluteanime prime quick styleSQL injection vulnerability in root/includes/prime_quick_style.php in the Prime Quick Style addon...6.5 Medium
- htmldocBuffer overflow in the set_page_size function in util.cxx in HTMLDOC 1.8.27 and earlier allows...10.0 High
- opera browserOpera before 10.00 does not properly display all characters in Internationalized Domain Names ...5.0 Medium
- opera browserOpera before 10.00 on Linux, Solaris, and FreeBSD does not properly implement the "INPUT TYPE...4.3 Medium
- opera browserOpera before 10.00, when a collapsed address bar is used, does not properly update the domain...4.3 Medium
- opera browserOpera before 10.00 does not check all intermediate X.509 certificates for revocation, which makes...7.5 High
- opera browserOpera before 10.00 trusts root X.509 certificates signed with the MD2 algorithm, which makes it...5.0 Medium
- opera browserOpera before 10.00 does not properly handle a (1) '\0' character or (2) invalid wildcard...5.0 Medium
- linux kernelThe tty_ldisc_hangup function in drivers/char/tty_ldisc.c in the Linux kernel 2.6.31-rc before 2...4.9 Medium
- vmware studioDirectory traversal vulnerability in a support component in the web interface in VMware Studio 2...5.0 Medium
- qtsrc/network/ssl/qsslcertificate.cpp in Nokia Trolltech Qt 4.x does not properly handle a '\0'...4.3 Medium
- openoffice openoffice.orgHeap-based buffer overflow in OpenOffice.org (OOo) before 3.1.1 and StarOffice/StarSuite 7, 8,...9.3 High
- openoffice openoffice.orgInteger underflow in OpenOffice.org (OOo) before 3.1.1 and StarOffice/StarSuite 7, 8, and 9 might...9.3 High
- numarasoftware footprintsNumara FootPrints 7.5a through 7.5a1 and 8.0 through 8.0a allows remote attackers to execute...10.0 High
- ekinboardUnrestricted file upload vulnerability in EkinBoard 1.1.0 and earlier allows remote attackers to...6.8 Medium
- ekinboardEkinBoard 1.1.0 and earlier, when register_globals is enabled, allows remote attackers to bypass...6.8 Medium
- phprisk netriskNetRisk 1.9.7 does not properly restrict access to admin/change_submit.php, which allows remote...7.5 High
- doceboDocebo 3.5.0.3 and earlier allows remote attackers to obtain sensitive information via a direct...5.0 Medium
- doceboSQL injection vulnerability in the autoDetectRegion function in doceboCore/lib/lib.regset.php in...7.5 High
- devscripts devel team devscriptsEval injection vulnerability in scripts/uscan.pl before Rev 1984 in devscripts allows remote...9.3 High
- ocsinventory-ng ocs inventory ngSQL injection vulnerability in machine.php in Open Computer and Software (OCS) Inventory NG 1.02...7.5 High
- spipSPIP 1.9 before 1.9.2i and 2.0.x through 2.0.8 does not use proper access control for (1) ecrire...7.5 High
- ocsinventory-ng ocs inventory ngMultiple SQL injection vulnerabilities in Open Computer and Software (OCS) Inventory NG 1.02 for...7.5 High
- Show moreLoading…