CVEs published in September 2009
575 vulnerabilities, 102 critical, 0 exploited.
- the-ghost ar web content managerSQL injection vulnerability in control/login.php in AR Web Content Manager (AWCM) 2.1, when...6.8 Medium
- wiccle iwiccleSQL injection vulnerability in the admin module in iWiccle 1.01 allows remote attackers to...7.5 High
- wiccle iwiccleMultiple directory traversal vulnerabilities in iWiccle 1.01, when magic_quotes_gpc is disabled,...4.3 Medium
- php-shop-system ixxo cartSQL injection vulnerability in IXXO Cart Standalone before 3.9.6.1, and the IXXO Cart component...7.5 High
- photodex proshow goldMultiple stack-based buffer overflows in Photodex ProShow Gold 4.0.2549 allow remote attackers to...9.3 High
- broidStack-based buffer overflow in broid 1.0 Beta 3a allows remote attackers to cause a denial of...9.3 High
- dimofinf infinity scriptSQL injection vulnerability in VivaPrograms Infinity Script 2.x.x, when magic_quotes_gpc is...6.8 Medium
- dimofinf infinity scriptDirectory traversal vulnerability in VivaPrograms Infinity Script 2.x.x, when magic_quotes_gpc is...6.8 Medium
- joao ventura printMultiple cross-site scripting (XSS) vulnerabilities in the Print (aka Printer, e-mail and PDF...3.5 Low
- raizlabs php email managerSQL injection vulnerability in remove.php in PHP eMail Manager 3.3.0 allows remote attackers to...7.5 High
- prakashatma mishra phpfreebbMultiple SQL injection vulnerabilities in phpfreeBB 1.0 allow remote attackers to execute...7.5 High
- drewish imagecacheThe ImageCache module 5.x before 5.x-2.5 and 6.x before 6.x-2.0-beta10, a module for Drupal, when...6.8 Medium
- drewish imagecacheMultiple cross-site scripting (XSS) vulnerabilities in the ImageCache module 5.x before 5.x-2.5...3.5 Low
- cbauthoritySQL injection vulnerability in main.php in CBAuthority allows remote attackers to execute...7.5 High
- stivaforum stiva forumMultiple cross-site scripting (XSS) vulnerabilities in Stiva Forum 1.0 allow remote attackers to...4.3 Medium
- ajsquare aj auction pro-oopdSQL injection vulnerability in store.php in AJ Auction Pro OOPD 2.x allows remote attackers to...7.5 High
- uloki php forumCross-site scripting (XSS) vulnerability in search.php in ULoKI PHP Forum 2.1 allows remote...4.3 Medium
- rob schultz media player classicInteger overflow in Media Player Classic 6.4.9 allows user-assisted remote attackers to cause a...4.3 Medium
- mozilla bugzillatoken.cgi in Bugzilla 3.4rc1 through 3.4.1 places a password in a URL at the beginning of a login...5.0 Medium
- mozilla bugzillaSQL injection vulnerability in the Bug.create WebService function in Bugzilla 2.23.4 through 3.0...7.5 High
- mozilla bugzillaSQL injection vulnerability in the Bug.search WebService function in Bugzilla 3.3.2 through 3.4.1...7.5 High
- stanford webauthweblogin/login.fcgi (aka the WebLogin login script) in Stanford University WebAuth 3.5.5, 3.6.0,...4.3 Medium
- linux kernel, canonical ubuntu linux, suse linux enterprise debuginfo +3 more +5 moreMemory leak in the appletalk subsystem in the Linux kernel 2.4.x through 2.4.37.6 and 2.6.x...7.1 High
- apple xsanThe screensharing feature in the Admin application in Apple Xsan before 2.2 places a cleartext...2.1 Low
- uebimiauUebimiau Webmail 3.2.0-2.0 stores sensitive information under the web root with insufficient...5.0 Medium
- jce-tech affiliate master datafeed parserCross-site scripting (XSS) vulnerability in search.php in JCE-Tech Affiliate Master Datafeed...4.3 Medium
- jce-tech php calendars scriptCross-site scripting (XSS) vulnerability in search.php in JCE-Tech PHP Calendars Script allows...4.3 Medium
- jce-tech php video scriptCross-site scripting (XSS) vulnerability in index.php in JCE-Tech PHP Video Script allows remote...4.3 Medium
- jce-tech auction rss content scriptMultiple cross-site scripting (XSS) vulnerabilities in JCE-Tech Auction RSS Content Script 3.0...4.3 Medium
- jce-tech searchfeed scriptCross-site scripting (XSS) vulnerability in index.php in JCE-Tech SearchFeed Script allows remote...4.3 Medium
- uwix com digifolioSQL injection vulnerability in the DigiFolio (com_digifolio) component 1.52 for Joomla! allows...7.5 High
- linkorcmsMultiple cross-site scripting (XSS) vulnerabilities in index.php in LinkorCMS 1.2 and earlier...4.3 Medium
- pad-site-scripts pad site scriptsMultiple cross-site scripting (XSS) vulnerabilities in PAD Site Scripts 3.6 allow remote...4.3 Medium
- pad-site-scripts pad site scriptsMultiple SQL injection vulnerabilities in PAD Site Scripts 3.6 allow remote attackers to execute...7.5 High
- digioz guestbookCross-site scripting (XSS) vulnerability in search.php in DigiOz Guestbook 1.7.2 allows remote...4.3 Medium
- david frohlich phpsanePHP remote file inclusion vulnerability in save.php in phpSANE 0.5.0 allows remote attackers to...7.5 High
- standalonearcade saaCross-site scripting (XSS) vulnerability in gamelist.php in Stand Alone Arcade 1.1 allows remote...4.3 Medium
- videogirls bizMultiple cross-site scripting (XSS) vulnerabilities in VideoGirls BiZ allow remote attackers to...4.3 Medium
- comsenz crazy star pluginSQL injection vulnerability in plugin.php in the Crazy Star plugin 2.0 for Discuz! allows remote...7.5 High
- grapari e-gold game series pirates of the caribbeanMultiple SQL injection vulnerabilities in index.php in Pirates of The Caribbean in the E-Gold...7.5 High
- sun opensolaris, solaris +1 moreHeap-based buffer overflow in w in Sun Solaris 8 through 10, and OpenSolaris before snv_124,...7.2 High
- apple mac os x serverCross-site scripting (XSS) vulnerability in the Wiki Server in Apple Mac OS X 10.5.8 allows...4.3 Medium
- apple mac os x, fedoraproject fedora, samba +1 more +3 moreSamba 3.4 before 3.4.2, 3.3 before 3.3.8, 3.2 before 3.2.15, and 3.0.12 through 3.0.36, as used...6.0 Medium
- apple mac os x, mac os x server +1 moreLaunch Services in Apple Mac OS X 10.5.8 does not properly recognize an unsafe Uniform Type...6.8 Medium
- apple mac os x, mac os x server +1 moreIncomplete blacklist vulnerability in Launch Services in Apple Mac OS X 10.5.8 allows user...6.8 Medium
- apple mac os x, mac os x server +1 moreImageIO in Apple Mac OS X 10.4.11 and 10.5.8 allows remote attackers to execute arbitrary code or...6.8 Medium
- apple mac os x, mac os x server +1 moreHeap-based buffer overflow in the USB backend in CUPS in Apple Mac OS X 10.5.8 allows local users...7.2 High
- apple mac os x, mac os x server +1 moreInteger overflow in CoreGraphics in Apple Mac OS X 10.4.11 and 10.5.8 allows remote attackers to...6.8 Medium
- apple mac os x, safari, mac os x server +2 moreInteger overflow in ColorSync in Apple Mac OS X 10.4.11 and 10.5.8, and Safari before 4.0.4 on...6.8 Medium
- apple mac os x, mac os x server +1 moreCarbonCore in Apple Mac OS X 10.4.11 and 10.5.8 allows attackers to execute arbitrary code or...6.8 Medium
- Show moreLoading…