CVEs published in September 2009
575 vulnerabilities, 102 critical, 0 exploited.
- sznewsPHP remote file inclusion vulnerability in printnews.php3 in SZNews 2.7 allows remote attackers...7.5 High
- paul gibbs php-ipnmonitorSQL injection vulnerability in index.php in PHP-IPNMonitor allows remote attackers to execute...7.5 High
- datemillMultiple cross-site scripting (XSS) vulnerabilities in Datemill 1.0 allow remote attackers to...4.3 Medium
- datetopia match agency bizMultiple cross-site scripting (XSS) vulnerabilities in Match Agency BiZ 1.0 allow remote...4.3 Medium
- tourismscripts adult portal escort listingSQL injection vulnerability in profile.php in Tourism Scripts Adult Portal escort listing allows...7.5 High
- joomlahbs com hbssearchMultiple SQL injection vulnerabilities in the Hotel Booking Reservation System (aka HBS or...7.5 High
- plohni image votingSQL injection vulnerability in index.php in Image voting 1.0 allows remote attackers to execute...7.5 High
- datetopia buy dating siteCross-site scripting (XSS) vulnerability in profile.php in Datetopia Buy Dating Site 1.0 allows...4.3 Medium
- andrew sterling hanenkamp rest api moduleMultiple unspecified vulnerabilities in the Rest API module for Drupal have unknown impact and...10.0 High
- steve lockwood node2nodeMultiple unspecified vulnerabilities in the Node2Node module for Drupal have unknown impact and...10.0 High
- drupalMultiple unspecified vulnerabilities in the quota_by_role (Quota by role) module for Drupal have...10.0 High
- kristy frey node browser moduleMultiple unspecified vulnerabilities in the Node Browser module for Drupal have unknown impact...10.0 High
- roshan shah subdomain managerMultiple unspecified vulnerabilities in the Subdomain Manager module for Drupal have unknown...10.0 High
- datavore gyroSQL injection vulnerability in Datavore Gyro 5.0 allows remote attackers to execute arbitrary SQL...7.5 High
- datavore gyroCross-site scripting (XSS) vulnerability in Datavore Gyro 5.0 allows remote attackers to inject...4.3 Medium
- d-link dir-400Buffer overflow on the D-Link DIR-400 wireless router allows remote attackers to execute...10.0 High
- sap crystal reports serverUnspecified vulnerability in SAP Crystal Reports Server 2008 allows remote attackers to execute...10.0 High
- sap crystal reports serverHeap-based buffer overflow in SAP Crystal Reports Server 2008 has unknown impact and attack...10.0 High
- sap crystal reports serverUnspecified vulnerability in SAP Crystal Reports Server 2008 on Windows XP allows attackers to...5.0 Medium
- hotwebscripts hotweb rentalsSQL injection vulnerability in details.asp in HotWeb Rentals allows remote attackers to execute...7.5 High
- alphaplug com alphauserpointsSQL injection vulnerability in frontend/assets/ajax/checkusername.php in the AlphaUserPoints ...7.5 High
- linksys wrt54glBuffer overflow on the Linksys WRT54GL wireless router allows remote attackers to execute...10.0 High
- freesshdUnspecified vulnerability in FreeSSHD 1.2.4 allows remote attackers to cause a denial of service...5.0 Medium
- mcafee email and web security applianceUnspecified vulnerability in McAfee Email and Web Security Appliance 5.1 VMtrial allows remote...7.8 High
- effectmatrix magic morphStack-based buffer overflow in EffectMatrix (E.M.) Magic Morph 1.95b allows remote attackers to...9.3 High
- s9y serendipity event freetagSQL injection vulnerability in the Freetag (serendipity_event_freetag) plugin before 3.09 for...7.5 High
- phpprobid php pro bidSQL injection vulnerability in auction_details.php in PHP Pro Bid allows remote attackers to...7.5 High
- turtus turtushoutSQL injection vulnerability in the TurtuShout component 0.11 for Joomla! allows remote attackers...7.5 High
- hp storageworks 1\/8 g2 tape autoloader, storageworks msl2024 tape library, storageworks msl4048 tape library +1 more +3 moreUnspecified vulnerability in the Remote Management Interface (RMI) for MSL Tape Libraries and 1/8...8.5 High
- internet2 opensaml, xmltooling, shibboleth-sp +2 moreBuffer overflow in OpenSAML before 1.1.3 as used in Internet2 Shibboleth Service Provider...9.3 High
- internet2 shibboleth-spInternet2 Shibboleth Service Provider software 1.3.x before 1.3.3 and 2.x before 2.2.1, when...7.5 High
- internet2 opensaml, xmltooling, shibboleth-sp +2 moreOpenSAML 2.x before 2.2.1 and XMLTooling 1.x before 1.2.1, as used by Internet2 Shibboleth...7.5 High
- fedorahosted newtHeap-based buffer overflow in textbox.c in newt 0.51.5, 0.51.6, and 0.52.2 allows local users to...4.6 Medium
- lhacky com jincSQL injection vulnerability in the Lhacky! Extensions Cave Joomla! Integrated Newsletters...7.5 High
- alibasta com koesubmitPHP remote file inclusion vulnerability in koesubmit.php in the koeSubmit (com_koesubmit)...7.5 High
- sopinet com jbudgetsmagicSQL injection vulnerability in the JBudgetsMagic (com_jbudgetsmagic) component 0.3.2 through 0.4...7.5 High
- ddlcms ddl cmsMultiple PHP remote file inclusion vulnerabilities in DDL CMS 1.0 allow remote attackers to...7.5 High
- cpecreator cp creatorSQL injection vulnerability in index.php in cP Creator 2.7.1, when magic_quotes_gpc is disabled,...6.8 Medium
- exeter winplotStack-based buffer overflow in Winplot 1.25.0.1 allows user-assisted remote attackers to execute...9.3 High
- webilix wx-guestbookCross-site scripting (XSS) vulnerability in sign.php in WX-Guestbook 1.1.208 allows remote...4.3 Medium
- webilix wx-guestbookMultiple SQL injection vulnerabilities in WX-Guestbook 1.1.208 allow remote attackers to execute...7.5 High
- cmscontrolSQL injection vulnerability in index.php in CMScontrol Content Management System 7.x allows...7.5 High
- focusdev com surveymanagerSQL injection vulnerability in the Focusplus Developments Survey Manager (com_surveymanager)...7.5 High
- andres g aragoneses prodlerPHP remote file inclusion vulnerability in include/prodler.class.php in ProdLer 2.0 and earlier...7.5 High
- robig barosminiMultiple PHP remote file inclusion vulnerabilities in BAnner ROtation System mini (BAROSmini) 0...7.5 High
- siemens gigaset se361 wlan routerThe Siemens Gigaset SE361 WLAN router allows remote attackers to cause a denial of service ...7.8 High
- saphplessonSQL injection vulnerability in SaphpLesson 4.3, when magic_quotes_gpc is disabled, allows remote...6.8 Medium
- zenas paolinkCross-site scripting (XSS) vulnerability in scrivi.php in Zenas PaoLink (aka Pao-Link) 1.0 allows...4.3 Medium
- dimofinf dawaweenSQL injection vulnerability in poems.php in DCI-Designs Dawaween 1.03 allows remote attackers to...7.5 High
- breedveld com albumDirectory traversal vulnerability in the Roland Breedveld Album (com_album) component 1.14 for...7.5 High
- Show moreLoading…