CVEs published in September 2009
575 vulnerabilities, 102 critical, 0 exploited.
- thecodeweasel opensiteadminPHP remote file inclusion vulnerability in pages/pageHeader.php in OpenSiteAdmin 0.9.7 BETA...7.5 High
- jforjoomla com jreservationSQL injection vulnerability in the JReservation (com_jreservation) component 1.0 and 1.5 for...7.5 High
- nelogic nephp publisherSQL injection vulnerability in admin/index.php in NeLogic Nephp Publisher Enterprise 3.5.9 and 4...7.5 High
- eliteladders elite gaming laddersSQL injection vulnerability in ladders.php in Elite Gaming Ladders 3.2 allows remote attackers to...7.5 High
- fmycloneMultiple SQL injection vulnerabilities in FMyClone 2.3 allow remote attackers to execute...6.5 Medium
- tomex phppollscriptPHP remote file inclusion vulnerability in php/init.poll.php in phpPollScript 1.3 and earlier,...6.8 Medium
- rssmediascriptCross-site scripting (XSS) vulnerability in index.php in RSSMediaScript allows remote attackers...4.3 Medium
- shalwan zainuSQL injection vulnerability in index.php in Zainu 1.0 allows remote attackers to execute...7.5 High
- cfshopkart cf shopkartSQL injection vulnerability in index.cfm in CF ShopKart 5.4 beta allows remote attackers to...7.5 High
- fanupdateSQL injection vulnerability in show-cat.php in FanUpdate 2.2.1 allows remote attackers to execute...7.5 High
- frank lichtenheld fsphpMultiple PHP remote file inclusion vulnerabilities in FSphp 0.2.1 allow remote attackers to...7.5 High
- richrumble clearsitePHP remote file inclusion vulnerability in include/header.php in ClearSite 4.50 allows remote...7.5 High
- phpThe popen API function in TSRM/tsrm_win32.c in PHP before 5.2.11 and 5.3.x before 5.3.1, when...5.0 Medium
- phpUnspecified vulnerability in the imagecolortransparent function in PHP before 5.2.11 has unknown...7.5 High
- phpUnspecified vulnerability in PHP before 5.2.11, and 5.3.x before 5.3.1, has unknown impact and...7.5 High
- phpThe php_openssl_apply_verification_policy function in PHP before 5.2.11 does not properly perform...7.5 High
- linux kernelThe kvm_emulate_hypercall function in arch/x86/kvm/x86.c in KVM in the Linux kernel 2.6.25-rc1,...7.2 High
- gnome glib, opensuse, suse linux enterprise server +2 moreThe g_file_copy function in glib 2.0 sets the permissions of a target file to the permissions of...7.8 High
- kernel linux kernel, linux kernel +1 moreThe sg_build_indirect function in drivers/scsi/sg.c in Linux kernel 2.6.28-rc1 through 2.6.31-rc8...4.9 Medium
- macournoyer thinHigh severity vulnerability that affects thin7.5 High
- linux kernelNFSv4 in the Linux kernel 2.6.18, and possibly other versions, does not properly clean up an...4.6 Medium
- phpspot php bbs, php bbs ce, php image capture bbs +3 more +5 moreDirectory traversal vulnerability in phpspot PHP BBS, PHP Image Capture BBS, PHP & CSS BBS, PHP...5.0 Medium
- phpspot php bbs, php bbs ce, php image capture bbs +3 more +5 moreCross-site scripting (XSS) vulnerability in phpspot PHP BBS, PHP Image Capture BBS, PHP & CSS BBS...4.3 Medium
- linux kernelInteger signedness error in the find_ie function in net/wireless/scan.c in the cfg80211 subsystem...7.8 High
- qnap ts-239 pro turbo nas, ts-639 pro turbo nas +1 moreThe QNAP TS-239 Pro and TS-639 Pro with firmware 2.1.7 0613, 3.1.0 0627, and 3.1.1 0815 create a...4.9 Medium
- qnap ts-239 pro firmware, ts-639 pro firmware +1 moreThe QNAP TS-239 Pro and TS-639 Pro with firmware 2.1.7 0613, 3.1.0 0627, and 3.1.1 0815 use the...5.5 Medium
- xenu by datavaultDataVault.Tesla/Impl/TypeSystem/AssociationHelper.cs in datavault allows context-dependent...5.0 Medium
- nasd corenet1Zoran/WinFormsAdvansed/RegeularDataToXML/Form1.cs in WinFormsAdvansed in NASD CORE.NET Terelik ...5.0 Medium
- microsoft enterprise libraryBlocks/Common/Src/Configuration/Manageability/Adm/AdmContentBuilder.cs in Microsoft patterns &...5.0 Medium
- mozilla firefoxMozilla Firefox 3.6a1, 3.5.3, 3.5.2, and earlier 3.5.x versions, and 3.0.14 and earlier 2.x and 3...4.4 Medium
- apple iphone osiPhone Mail in Apple iPhone OS, and iPhone OS for iPod touch, does not validate X.509...7.5 High
- apple safariStack consumption vulnerability in WebKit.dll in WebKit in Apple Safari 3.2.3, and possibly other...5.0 Medium
- apple iphone os, safari +1 moreApple Safari on iPhone OS 3.0.1 allows remote attackers to cause a denial of service (application...4.3 Medium
- qnap ts-239 pro turbo nas, ts-639 pro turbo nas +1 moreThe QNAP TS-239 Pro and TS-639 Pro with firmware 2.1.7 0613, 3.1.0 0627, and 3.1.1 0815 create an...5.9 Medium
- postfixThe postfix.postinst script in the Debian GNU/Linux and Ubuntu postfix 2.5.5 package grants the...6.9 Medium
- ibm websphere application serverUnspecified vulnerability in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.27 allows...7.8 High
- ibm websphere application serverIBM WebSphere Application Server (WAS) 6.1 before 6.1.0.27, and 7.0 before 7.0.0.7, does not...2.1 Low
- ibm websphere application serverCross-site scripting (XSS) vulnerability in Eclipse Help in IBM WebSphere Application Server (WAS...4.3 Medium
- go-ooMultiple heap-based buffer overflows in cppcanvas/source/mtfrenderer/emfplus.cxx in Go-oo 2.x and...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 7 through 7.0.6000.16711 allows remote attackers to cause a denial of...5.0 Medium
- opera browserOpera 9.52 and earlier allows remote attackers to cause a denial of service (CPU consumption) via...5.0 Medium
- google chromeGoogle Chrome 1.0.154.48 and earlier allows remote attackers to cause a denial of service (CPU...5.0 Medium
- microsoft internet explorerMicrosoft Internet Explorer 6 through 6.0.2900.2180, and 7.0.6000.16711, allows remote attackers...5.0 Medium
- opera browserOpera before 10.01 does not properly restrict HTML in a (1) RSS or (2) Atom feed, which allows...4.3 Medium
- opera browserCross-site scripting (XSS) vulnerability in Opera 9 and 10 allows remote attackers to inject...4.3 Medium
- google chromeThe getSVGDocument method in Google Chrome before 3.0.195.21 omits an unspecified "access check,"...4.3 Medium
- google chromeCross-site scripting (XSS) vulnerability in Google Chrome 2.x and 3.x before 3.0.195.21 allows...4.3 Medium
- netbsdThe kernel in NetBSD, probably 5.0.1 and earlier, on x86 platforms does not properly handle a pre...4.6 Medium
- ibm websphere business eventsUnspecified vulnerability in the wberuntimeear application in the test servlet in IBM WebSphere...10.0 High
- google chromeGoogle Chrome 0.2.149.29 and earlier allows remote attackers to cause a denial of service ...5.0 Medium
- Show moreLoading…