CVE List - 2009 / October
Showing 1 - 100 of 352 CVEs for October 2009 (Page 1 of 4)
| CVE ID | Date | Title |
|---|---|---|
| CVE-2009-3506 | 2009-10-01 | Multiple cross-site scripting (XSS) vulnerabilities in CMSphp 0.21 allow remote... |
| CVE-2009-3507 | 2009-10-01 | Directory traversal vulnerability in modules.php in CMSphp 0.21 allows remote... |
| CVE-2009-3508 | 2009-10-01 | Multiple directory traversal vulnerabilities in MUJE CMS 1.0.4.34 allow remote... |
| CVE-2009-3509 | 2009-10-01 | Cross-site scripting (XSS) vulnerability in admin/admin_index.php in CJ Dynamic Poll... |
| CVE-2009-3510 | 2009-10-01 | SQL injection vulnerability in viewListing.php in linkSpheric 0.74 Beta 6... |
| CVE-2009-3511 | 2009-10-01 | Multiple PHP remote file inclusion vulnerabilities in justVisual 1.2 allow... |
| CVE-2009-3512 | 2009-10-01 | Multiple cross-site scripting (XSS) vulnerabilities in MyWeight 1.0 allow remote... |
| CVE-2009-3513 | 2009-10-01 | Multiple cross-site scripting (XSS) vulnerabilities in Pilot Group (PG) eTraining... |
| CVE-2009-3514 | 2009-10-01 | Multiple SQL injection vulnerabilities in d.net CMS allow remote attackers... |
| CVE-2009-3515 | 2009-10-01 | Directory traversal vulnerability in dnet_admin/index.php in d.net CMS allows remote... |
| CVE-2009-0209 | 2009-10-01 | PI Server in OSIsoft PI System before 3.4.380.x does not... |
| CVE-2009-2904 | 2009-10-01 | A certain Red Hat modification to the ChrootDirectory feature in... |
| CVE-2009-3516 | 2009-10-01 | gssd in IBM AIX 5.3.x through 5.3.9 and 6.1.0 through... |
| CVE-2009-3517 | 2009-10-01 | nfs.ext in IBM AIX 5.3.x through 5.3.9 and 6.1.0 through... |
| CVE-2009-3518 | 2009-10-01 | Argument injection vulnerability in the iim: URI handler in IBMIM.exe... |
| CVE-2009-3519 | 2009-10-01 | Multiple memory leaks in the IP module in the kernel... |
| CVE-2009-3520 | 2009-10-01 | Cross-site request forgery (CSRF) vulnerability in the Your_account module in... |
| CVE-2009-3522 | 2009-10-01 | Stack-based buffer overflow in aswMon2.sys in avast! Home and Professional... |
| CVE-2009-3523 | 2009-10-01 | aavmKer4.sys in avast! Home and Professional for Windows before 4.8.1356... |
| CVE-2009-3524 | 2009-10-01 | Unspecified vulnerability in ashWsFtr.dll in avast! Home and Professional for... |
| CVE-2009-3521 | 2009-10-01 | Multiple cross-site scripting (XSS) vulnerabilities in the Visualization Engine (VE)... |
| CVE-2009-3528 | 2009-10-02 | SQL injection vulnerability in Profile.php in MyMsg 1.0.3 allows remote... |
| CVE-2009-3529 | 2009-10-02 | SQL injection vulnerability in index.php in RadScripts RadBids Gold 4... |
| CVE-2009-3530 | 2009-10-02 | Cross-site scripting (XSS) vulnerability in storefront.php in RadScripts RadBids Gold... |
| CVE-2009-3531 | 2009-10-02 | SQL injection vulnerability in vnews.php in Universe CMS 1.0.6 allows... |
| CVE-2009-3532 | 2009-10-02 | Multiple SQL injection vulnerabilities in login.asp (aka the login screen)... |
| CVE-2009-3533 | 2009-10-02 | SQL injection vulnerability in report.php in Meeting Room Booking System... |
| CVE-2009-3534 | 2009-10-02 | Directory traversal vulnerability in index.php in LionWiki 3.0.3, when magic_quotes_gpc... |
| CVE-2009-3535 | 2009-10-02 | Directory traversal vulnerability in image.php in Clear Content 1.1 allows... |
| CVE-2009-3536 | 2009-10-02 | Multiple stack-based buffer overflows in EpicDJSoftware EpicVJ 1.2.8.0 and 1.3.1.2... |
| CVE-2009-3537 | 2009-10-02 | Multiple stack-based buffer overflows in EpicDJSoftware EpicDJ 1.3.9.1 allow remote... |
| CVE-2009-3541 | 2009-10-02 | PHP remote file inclusion vulnerability in CoupleDB.php in PHPGenealogy 2.0... |
| CVE-2009-3542 | 2009-10-02 | Directory traversal vulnerability in ls.php in LittleSite (aka LS or... |
| CVE-2009-3543 | 2009-10-02 | SQL injection vulnerability in _phenotype/admin/login.php in Phenotype CMS before 2.9... |
| CVE-2009-3538 | 2009-10-02 | Directory traversal vulnerability in thumb.php in Clear Content 1.1 allows... |
| CVE-2009-3539 | 2009-10-02 | Multiple cross-site scripting (XSS) vulnerabilities in YourFreeWorld Ultra Classifieds Pro... |
| CVE-2009-3540 | 2009-10-02 | Cross-site scripting (XSS) vulnerability in listads.php in YourFreeWorld Ultra Classifieds... |
| CVE-2009-2679 | 2009-10-05 | Unspecified vulnerability in bootpd in HP HP-UX B.11.11, B.11.23, and... |
| CVE-2009-3525 | 2009-10-05 | The pyGrub boot loader in Xen 3.0.3, 3.3.0, and Xen-3.3.1... |
| CVE-2009-3544 | 2009-10-05 | Xerver HTTP Server 4.32 allows remote attackers to obtain the... |
| CVE-2009-3545 | 2009-10-05 | DataWizard Technologies FtpXQ FTP Server 3.0 allows remote authenticated users... |
| CVE-2009-3561 | 2009-10-05 | Directory traversal vulnerability in Xerver HTTP Server 4.32 allows remote... |
| CVE-2009-3562 | 2009-10-05 | Cross-site scripting (XSS) vulnerability in Xerver HTTP Server 4.32 allows... |
| CVE-2009-3564 | 2009-10-06 | puppetmasterd in puppet 0.24.6 does not reset supplementary groups when... |
| CVE-2009-3567 | 2009-10-06 | Cross-site scripting (XSS) vulnerability in modules/tickets/functions_ticketsui.php in Kayako SupportSuite and... |
| CVE-2009-3569 | 2009-10-06 | Stack-based buffer overflow in OpenOffice.org (OOo) allows remote attackers to... |
| CVE-2009-3570 | 2009-10-06 | Unspecified vulnerability in OpenOffice.org (OOo) has unspecified impact and remote... |
| CVE-2009-3571 | 2009-10-06 | Unspecified vulnerability in OpenOffice.org (OOo) has unknown impact and client-side... |
| CVE-2009-3573 | 2009-10-06 | Multiple insecure method vulnerabilities in the PDIControl.PDI.1 ActiveX control (PDIControl.dll)... |
| CVE-2009-3574 | 2009-10-06 | Tuniac 090517c allows remote attackers to cause a denial of... |
| CVE-2009-3568 | 2009-10-06 | Comment RSS 5.x before 5.x-2.2 and 6.x before 6.x-2.2, a... |
| CVE-2009-3572 | 2009-10-06 | OpenBSD 4.4, 4.5, and 4.6, when running on an i386... |
| CVE-2009-3527 | 2009-10-06 | Race condition in the Pipe (IPC) close function in FreeBSD... |
| CVE-2009-3575 | 2009-10-07 | Buffer overflow in DHTRoutingTableDeserializer.cc in aria2 0.15.3, 1.2.0, and other... |
| CVE-2009-3579 | 2009-10-07 | Cross-site scripting (XSS) vulnerability in the CookieDump.java sample application in... |
| CVE-2009-2906 | 2009-10-07 | smbd in Samba 3.0 before 3.0.37, 3.2 before 3.2.15, 3.3... |
| CVE-2009-2948 | 2009-10-07 | mount.cifs in Samba 3.0 before 3.0.37, 3.2 before 3.2.15, 3.3... |
| CVE-2009-3589 | 2009-10-08 | incron 0.5.5 does not initialize supplementary groups when running a... |
| CVE-2009-3590 | 2009-10-08 | SQL injection vulnerability in showcat.php in VS PANEL 7.3.6 allows... |
| CVE-2009-3591 | 2009-10-08 | Dopewars 1.5.12 allows remote attackers to cause a denial of... |
| CVE-2009-3592 | 2009-10-08 | Cross-site scripting (XSS) vulnerability in customer/home.php in Qualiteam X-Cart allows... |
| CVE-2009-3593 | 2009-10-08 | Multiple cross-site scripting (XSS) vulnerabilities in Freelancers 1.0 allow remote... |
| CVE-2009-3594 | 2009-10-08 | Cross-site scripting (XSS) vulnerability in bpost.php in BLOB Blog System... |
| CVE-2009-3595 | 2009-10-08 | SQL injection vulnerability in results.php in VS PANEL 7.5.5 allows... |
| CVE-2009-3596 | 2009-10-08 | JoxTechnology Ajox Poll does not properly restrict access to admin/managepoll.php,... |
| CVE-2009-3597 | 2009-10-08 | Digitaldesign CMS 0.1 stores sensitive information under the web root... |
| CVE-2009-3598 | 2009-10-08 | Cross-site scripting (XSS) vulnerability in survey_result.php in eCardMAX FormXP 2007... |
| CVE-2009-3599 | 2009-10-08 | Cross-site scripting (XSS) vulnerability in single_winner1.php in HUBScript 1.0 allows... |
| CVE-2009-3600 | 2009-10-08 | HUBScript 1.0 allows remote attackers to obtain configuration information via... |
| CVE-2009-3601 | 2009-10-08 | Cross-site scripting (XSS) vulnerability in demo_page.php in Scriptsez Ultimate Poll... |
| CVE-2009-3643 | 2009-10-09 | Dxmsoft XM Easy Personal FTP Server 5.8.0 allows remote attackers... |
| CVE-2009-3646 | 2009-10-09 | InterVations NaviCOPA Web Server 3.01 allows remote attackers to obtain... |
| CVE-2009-3647 | 2009-10-09 | Cross-site scripting (XSS) vulnerability in emaullinks.php in YABSoft Mega File... |
| CVE-2009-3648 | 2009-10-09 | Cross-site scripting (XSS) vulnerability in Service Links 6.x-1.0, a module... |
| CVE-2009-3649 | 2009-10-09 | Cross-site scripting (XSS) vulnerability in forums/index.php in Power Bulletin Board... |
| CVE-2009-3650 | 2009-10-09 | Cross-site scripting (XSS) vulnerability in Dex 5.x-1.0 and earlier and... |
| CVE-2009-3651 | 2009-10-09 | Cross-site scripting (XSS) vulnerability in the "Monitor browsers' feature in... |
| CVE-2009-3652 | 2009-10-09 | Cross-site scripting (XSS) vulnerability in Organic Groups (OG) 5.x-7.x before... |
| CVE-2009-3653 | 2009-10-09 | Cross-site scripting (XSS) vulnerability in the additional links interface in... |
| CVE-2009-3654 | 2009-10-09 | Unspecified vulnerability in Boost before 6.x-1.03, a module for Drupal,... |
| CVE-2009-3655 | 2009-10-09 | Rhino Software Serv-U 7.0.0.1 through 8.2.0.3 allows remote attackers to... |
| CVE-2009-3656 | 2009-10-09 | Cross-site request forgery (CSRF) vulnerability in Shared Sign-On 5.x and... |
| CVE-2009-3657 | 2009-10-09 | Session fixation vulnerability in Shared Sign-On 5.x and 6.x, a... |
| CVE-2009-3658 | 2009-10-09 | Use-after-free vulnerability in the Sb.SuperBuddy.1 ActiveX control (sb.dll) in America... |
| CVE-2009-3642 | 2009-10-09 | Multiple SQL injection vulnerabilities in the Call Logging feature in... |
| CVE-2009-3644 | 2009-10-09 | SQL injection vulnerability in the Soundset (com_soundset) component 1.0 for... |
| CVE-2009-3645 | 2009-10-09 | SQL injection vulnerability in the JoomlaCache CB Resume Builder (com_cbresumebuilder)... |
| CVE-2009-3659 | 2009-10-11 | SQL injection vulnerability in file/stats.php in BS Counter 2.5.3 allows... |
| CVE-2009-3660 | 2009-10-11 | PHP remote file inclusion vulnerability in libraries/database.php in Efront 3.5.4... |
| CVE-2009-3661 | 2009-10-11 | Multiple SQL injection vulnerabilities in the DJ-Catalog (com_djcatalog) component for... |
| CVE-2009-3663 | 2009-10-11 | Format string vulnerability in the h_readrequest function in http.c in... |
| CVE-2009-3664 | 2009-10-11 | Multiple directory traversal vulnerabilities in index.php in Nullam Blog 0.1.2... |
| CVE-2009-3665 | 2009-10-11 | Multiple SQL injection vulnerabilities in index.php in Nullam Blog 0.1.2... |
| CVE-2009-3666 | 2009-10-11 | Cross-site scripting (XSS) vulnerability in index.php in Nullam Blog 0.1.2... |
| CVE-2009-3667 | 2009-10-11 | SQL injection vulnerability in admin/index.php in AdsDX 3.05 allows remote... |
| CVE-2009-3669 | 2009-10-11 | SQL injection vulnerability in the foobla Suggestions (com_foobla_suggestions) component 1.5.11... |
| CVE-2009-3670 | 2009-10-11 | Stack-based buffer overflow in KSP Sound Player 2009 R2 and... |
| CVE-2009-3662 | 2009-10-11 | FileCopa FTP Server 5.01 allows remote attackers to cause a... |
| CVE-2009-3668 | 2009-10-11 | Cross-site scripting (XSS) vulnerability in ardguest.php in Ardguest 1.8 allows... |
| CVE-2009-2684 | 2009-10-13 | Multiple cross-site scripting (XSS) vulnerabilities in Jetdirect and the Embedded... |