CVEs published in September 2009
575 vulnerabilities, 102 critical, 0 exploited.
- oracle e-business suite 11iMultiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10.2 allow remote attackers...5.0 Medium
- oracle e-business suiteMultiple unspecified vulnerabilities in Oracle E-Business Suite 12.0.3 allow (1) local users to...6.0 Medium
- oracle application serverUnspecified vulnerability in the Oracle Internet Directory component in Oracle Application Server...4.0 Medium
- oracle application serverUnspecified vulnerability in the Oracle JDeveloper component in Oracle Application Server 10.1.2...4.3 Medium
- oracle application server, e-business suite +1 moreUnspecified vulnerability in the Oracle Forms component in Oracle Application Server 10.1.2.2 and...4.3 Medium
- oracle application serverUnspecified vulnerability in the Oracle BPEL Worklist Application component in Oracle Application...6.8 Medium
- oracle application server, e-business suite 11i +1 moreUnspecified vulnerability in the E-Business Application client, as used in Oracle Application...9.3 High
- netplex-tech xtacacsdBuffer overflow in the report function in xtacacsd 4.1.2 and earlier allows remote attackers to...10.0 High
- meridio document and records managementCross-site scripting (XSS) vulnerability in Meridio Document and Records Management before 4.3...3.5 Low
- chris buccella small footprint cim brokerUnspecified vulnerability in Small Footprint CIM Broker (SFCB) before 1.2.5 has unknown impact...10.0 High
- greensql firewallGreenSQL Firewall (greensql-fw) before 0.9.2 allows remote attackers to bypass SQL injection...7.5 High
- white dune duneMultiple format string vulnerabilities in White_Dune before 0.29beta851 have unspecified impact...10.0 High
- geoserverPartialBufferOutputStream2 flush issues5.0 Medium
- php-nuke recipe moduleSQL injection vulnerability in index.php in the Recipes module 1.3, 1.4, and possibly other...7.5 High
- foxitsoftware wac serverHeap-based buffer overflow in Foxit Remote Access Server (aka WAC Server) 2.0 Build 3503 allows...10.0 High
- elinksBuffer overflow in entity_cache in ELinks before 0.11.4rc0 allows remote attackers to cause a...7.8 High
- linphaMultiple cross-site scripting (XSS) vulnerabilities in LinPHA before 1.3.3 allow remote attackers...4.3 Medium
- runcmsCross-site scripting (XSS) vulnerability in system/admin.php in RunCMS 1.6.1 allows remote...4.3 Medium
- runcmsCross-site request forgery (CSRF) vulnerability in RunCMS 1.6.1 allows remote attackers to hijack...6.8 Medium
- f5 nginx, debian linux, fedoraproject fedora +2 moreBuffer underflow in src/http/ngx_http_parse.c in nginx 0.1.0 through 0.5.37, 0.6.x before 0.6.39,...7.5 High
- prototypejs prototype, debian linux +1 moreUnspecified vulnerability in Prototype JavaScript framework (prototypejs) before 1.6.0.2 allows...7.5 High
- horde groupware, groupware webmail edition, kronolith h3 +2 more +4 moreHorde Kronolith H3 2.1 before 2.1.7 and 2.2 before 2.2-RC2; Nag H3 2.1 before 2.1.4 and 2.2...10.0 High
- horde groupware, groupware webmail edition, horde +4 more +6 moreUnspecified vulnerability in the Horde API in Horde 3.1 before 3.1.6 and 3.2 before 3.2 before 3...10.0 High
- microsoft officeMicrosoft Office 2008 for Mac, when running on Macintosh systems that restrict Office access to...4.6 Medium
- claudio matsuoka extended module playerMultiple buffer overflows in the dtt_load function in loaders/dtt_load.c Extended Module Player ...10.0 High
- claudio matsuoka extended module playerExtended Module Player (XMP) 2.5.1 and earlier allow remote attackers to execute arbitrary code...10.0 High
- anantasoft gazelle cmsUnrestricted file upload vulnerability in admin/editor/filemanager/browser.html in Anantasoft...6.8 Medium
- anantasoft gazelle cmsDirectory traversal vulnerability in Anantasoft Gazelle CMS 1.0 allows remote attackers to...5.0 Medium
- anantasoft gazelle cmsAnantasoft Gazelle CMS 1.0 allows remote attackers to conduct a password reset for other users...7.5 High
- symantec altiris deployment solutionMultiple unspecified vulnerabilities in Symantec Altiris Deployment Solution 6.9 might allow...10.0 High
- symantec altiris deployment solutionUnspecified vulnerability in mm.exe in Symantec Altiris Deployment Solution 6.9 allows remote...7.8 High
- kaspersky online scanner, anti-virus scanner +1 moreUnspecified vulnerability in Kaspersky Online Scanner 7.0 has unknown impact and attack vectors,...10.0 High
- novell iprintBuffer overflow in the ActiveX control in Novell iPrint Client 4.38 allows remote attackers to...9.3 High
- boldfx model agency manager proMultiple SQL injection vulnerabilities in Model Agency Manager PRO (formerly Modeling Agency...7.5 High
- odelao obophixPHP remote file inclusion vulnerability in fonctions_racine.php in OBOphiX 2.7.0 and earlier...7.5 High
- theratstudios the rat cmsUnrestricted file upload vulnerability in admin/add_album.php in The Rat CMS Alpha 2 allows...6.8 Medium
- hitachi groupmax groupware server, groupmax server set, groupmax scheduler server set +2 moreUnspecified vulnerability in Hitachi Groupmax Groupware Server 07-00 through 07-50-/A, Groupmax...7.5 High
- anantasoft gazelle cmsMultiple cross-site scripting (XSS) vulnerabilities in Anantasoft Gazelle CMS 1.0 and earlier...4.3 Medium
- aimp aimp2 audio converterStack-based buffer overflow in AIMP2 Audio Converter 2.53 (build 330) and earlier allows remote...9.3 High
- hitachi jp1 file transmission serverMultiple unspecified vulnerabilities in Hitachi JP1/File Transmission Server/FTP before 09-00...10.0 High
- mevin basic php events listerMevin Productions Basic PHP Events Lister 2.0 does not properly restrict access to (1) admin...6.5 Medium
- anantasoft gazelle cmsDirectory traversal vulnerability in index.php in Anantasoft Gazelle CMS 1.0, when...4.3 Medium
- apple mac os x, mac os x server +1 moreBuffer overflow in Alias Manager in Apple Mac OS X 10.4.11 and 10.5.8 allows attackers to execute...6.8 Medium
- wordpress peter\'s math anti-spam for wordpressPeter's Math Anti-Spam Spinoff plugin for WordPress generates audio CAPTCHA clips by...4.3 Medium
- brilaps mostlyce, mambo-foundation mambo +1 moreThe Image Manager in MOStlyCE before 2.4, as used in Mambo 4.6.3 and earlier, allows remote...5.8 Medium
- brilaps mostlyce, mambo-foundation mambo +1 moreCross-site request forgery (CSRF) vulnerability in administrator/index2.php in MOStlyCE before 2...6.8 Medium
- brilaps mostlyce, mambo-foundation mambo +1 moreCross-site scripting (XSS) vulnerability in mambots/editors/mostlyce/jscripts/tiny_mce...4.3 Medium
- brilaps mostlyce, mambo-foundation mambo +1 moreMOStlyCE before 2.4, as used in Mambo 4.6.3 and earlier, allows remote attackers to obtain...5.0 Medium
- soundblaster ensoniq pci es1371 wdm driverCreativeLabs es1371mp.sys 5.1.3612.0 WDM audio driver, as used in Ensoniq PCI 1371 sound cards...6.9 Medium
- ming han ajchatdirectory.php in AJchat 0.10 allows remote attackers to bypass input validation and conduct SQL...7.5 High
- Show moreLoading…