CVE List - 2009 / May
Showing 201 - 300 of 364 CVEs for May 2009 (Page 3 of 4)
| CVE ID | Date | Title |
|---|---|---|
| CVE-2009-1647 | 2009-05-15 | Heap-based buffer overflow in popcorn.exe in Ultrafunk Popcorn 1.87 allows... |
| CVE-2009-1639 | 2009-05-15 | Stack-based buffer overflow in Nucleus Data Recovery Kernel Recovery for... |
| CVE-2009-1649 | 2009-05-16 | Directory traversal vulnerability in arch.php in beLive 0.2.3 allows remote... |
| CVE-2009-1650 | 2009-05-16 | Multiple SQL injection vulnerabilities in photos.php in Shutter 0.1.1 allow... |
| CVE-2009-1651 | 2009-05-16 | SQL injection vulnerability in admin/member_details.php in 2daybiz Business Community Script... |
| CVE-2009-1652 | 2009-05-16 | admin/adminaddeditdetails.php in Business Community Script does not properly restrict access,... |
| CVE-2009-1653 | 2009-05-16 | Directory traversal vulnerability in examples/tbs_us_examples_0view.php in TinyButStrong 3.4.0 allows remote... |
| CVE-2009-1654 | 2009-05-16 | Cross-site scripting (XSS) vulnerability in questiondetail.php in Easy Scripts Answer... |
| CVE-2009-1655 | 2009-05-16 | Multiple SQL injection vulnerabilities in myaccount.php in Easy Scripts Answer... |
| CVE-2009-1656 | 2009-05-16 | Xerox WorkCentre and WorkCentre Pro 232, 238, 245, 255, 265,... |
| CVE-2008-6809 | 2009-05-17 | SQL injection vulnerability in hotel_habitaciones.php in Venalsur Booking Centre Booking... |
| CVE-2008-6810 | 2009-05-17 | Multiple SQL injection vulnerabilities in admin/checklogin.php in Venalsur Booking Centre... |
| CVE-2008-6811 | 2009-05-17 | Unrestricted file upload vulnerability in image_processing.php in the e-Commerce Plugin... |
| CVE-2009-1657 | 2009-05-17 | Multiple SQL injection vulnerabilities in the Starrating plugin before 0.7.7... |
| CVE-2009-1658 | 2009-05-17 | Multiple SQL injection vulnerabilities in admin/admin.php in Realty Webware Technologies... |
| CVE-2009-1659 | 2009-05-17 | Unrestricted file upload vulnerability in admin/uploadimage.php in eLitius 1.0 allows... |
| CVE-2009-1660 | 2009-05-17 | Stack-based buffer overflow in URUWorks ViPlay3 3.0 and earlier allows... |
| CVE-2009-1661 | 2009-05-17 | SQL injection vulnerability in admin/utopic.php in uTopic 1.0, when magic_quotes_gpc... |
| CVE-2009-1662 | 2009-05-17 | Multiple SQL injection vulnerabilities in admin/login.php in Wright Way Services... |
| CVE-2009-1663 | 2009-05-17 | Unrestricted file upload vulnerability in myaccount.php in Easy Scripts Answer... |
| CVE-2009-1664 | 2009-05-17 | myaccount.php in Easy Scripts Answer and Question Script does not... |
| CVE-2009-1665 | 2009-05-17 | myaccount.php in Easy Scripts Answer and Question Script allows remote... |
| CVE-2009-1667 | 2009-05-18 | Stack-based buffer overflow in Mini-stream CastRipper 2.50.70 allows remote attackers... |
| CVE-2009-1668 | 2009-05-18 | TYPSoft FTP Server 1.11 allows remote attackers to cause a... |
| CVE-2009-1669 | 2009-05-18 | The smarty_function_math function in libs/plugins/function.math.php in Smarty 2.6.22 allows context-dependent... |
| CVE-2009-1670 | 2009-05-18 | user/index.php in TCPDB 3.8 does not require administrative authentication, which... |
| CVE-2009-1671 | 2009-05-18 | Multiple buffer overflows in the Deployment Toolkit ActiveX control in... |
| CVE-2009-1672 | 2009-05-18 | The Deployment Toolkit ActiveX control in deploytk.dll 6.0.130.3 in Sun... |
| CVE-2009-1673 | 2009-05-18 | The kernel in Sun Solaris 9 allows local users to... |
| CVE-2009-1674 | 2009-05-18 | Stack-based buffer overflow in Microchip MPLAB IDE 8.30 allows user-assisted... |
| CVE-2009-1675 | 2009-05-18 | Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote... |
| CVE-2009-1677 | 2009-05-18 | Multiple static code injection vulnerabilities in the saveFeed function in... |
| CVE-2009-1678 | 2009-05-18 | Directory traversal vulnerability in the saveFeed function in rss/feedcreator.class.php in... |
| CVE-2009-0721 | 2009-05-18 | Unspecified vulnerability in Easy Login in the Sender module in... |
| CVE-2009-1666 | 2009-05-18 | Multiple unspecified vulnerabilities in CycloMedia CycloScopeLite 2.50.3.0 allow remote attackers... |
| CVE-2009-1252 | 2009-05-19 | Stack-based buffer overflow in the crypto_recv function in ntp_crypto.c in... |
| CVE-2009-1377 | 2009-05-19 | The dtls1_buffer_record function in ssl/d1_pkt.c in OpenSSL 0.9.8k and earlier... |
| CVE-2009-1378 | 2009-05-19 | Multiple memory leaks in the dtls1_process_out_of_seq_message function in ssl/d1_both.c in... |
| CVE-2009-1379 | 2009-05-19 | Use-after-free vulnerability in the dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL... |
| CVE-2009-1418 | 2009-05-19 | Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH)... |
| CVE-2009-1730 | 2009-05-20 | Multiple directory traversal vulnerabilities in NetMechanica NetDecision TFTP Server 4.2... |
| CVE-2009-1731 | 2009-05-20 | SQL injection vulnerability in panel/index.php in MLFFAT 2.1 allows remote... |
| CVE-2009-1732 | 2009-05-20 | Cross-site scripting (XSS) vulnerability in admin/usermanager in IPplan 4.91a allows... |
| CVE-2009-1733 | 2009-05-20 | Cross-site request forgery (CSRF) vulnerability in IPplan 4.91a allows remote... |
| CVE-2009-1734 | 2009-05-20 | SQL injection vulnerability in listing_video.php in VidSharePro allows remote attackers... |
| CVE-2009-1735 | 2009-05-20 | Cross-site scripting (XSS) vulnerability in search.php in VidSharePro allows remote... |
| CVE-2009-1736 | 2009-05-20 | SQL injection vulnerability in the GridSupport (GS) Ticket System (com_gsticketsystem)... |
| CVE-2009-1737 | 2009-05-20 | Directory traversal vulnerability in bom.php in MyPic 2.1 allows remote... |
| CVE-2009-1738 | 2009-05-20 | Cross-site scripting (XSS) vulnerability in Feed Block 6.x-1.x before 6.x-1.1,... |
| CVE-2009-1739 | 2009-05-20 | PAD Site Scripts 3.6 allows remote attackers to bypass authentication... |
| CVE-2009-1740 | 2009-05-20 | Multiple heap-based buffer overflows in the D-Link MPEG4 Viewer ActiveX... |
| CVE-2009-1741 | 2009-05-20 | Multiple SQL injection vulnerabilities in login.php in DM FileManager 3.9.2,... |
| CVE-2009-1742 | 2009-05-20 | code.php in PC4Arb Pc4 Uploader 9.0 and earlier makes it... |
| CVE-2009-1743 | 2009-05-21 | Directory traversal vulnerability in InstallHFZ.exe 6.5.201.0 in Pinnacle Hollywood Effects... |
| CVE-2009-1744 | 2009-05-21 | InstallHFZ.exe 6.5.201.0 in Pinnacle Hollywood Effects 6, a module in... |
| CVE-2009-1161 | 2009-05-21 | Directory traversal vulnerability in the TFTP service in Cisco CiscoWorks... |
| CVE-2009-1593 | 2009-05-21 | Armorlogic Profense Web Application Firewall before 2.2.22, and 2.4.x before... |
| CVE-2009-1594 | 2009-05-21 | Armorlogic Profense Web Application Firewall before 2.2.22, and 2.4.x before... |
| CVE-2009-1729 | 2009-05-21 | Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Communications... |
| CVE-2009-0897 | 2009-05-21 | IBM WebSphere Partner Gateway (WPG) 6.1.0 before 6.1.0.1 and 6.1.1... |
| CVE-2009-1745 | 2009-05-21 | Armorlogic Profense Web Application Firewall before 2.2.22, and 2.4.x before... |
| CVE-2009-1746 | 2009-05-21 | SQL injection vulnerability in berita.php in Dian Gemilang DGNews 3.0... |
| CVE-2008-6812 | 2009-05-21 | SQL injection vulnerability in bukutamu.php in phpWebNews 0.2 MySQL Edition... |
| CVE-2008-6813 | 2009-05-21 | SQL injection vulnerability in index.php in phpWebNews 0.2 MySQL Edition... |
| CVE-2009-1747 | 2009-05-21 | SQL injection vulnerability in index.php in 26th Avenue bSpeak 1.10... |
| CVE-2009-1748 | 2009-05-21 | Multiple directory traversal vulnerabilities in index.php in Catviz 0.4.0 Beta... |
| CVE-2009-1749 | 2009-05-21 | Multiple cross-site scripting (XSS) vulnerabilities in index.php in Catviz 0.4.0... |
| CVE-2009-1750 | 2009-05-21 | Unrestricted file upload vulnerability in VidSharePro allows remote authenticated users... |
| CVE-2009-1751 | 2009-05-21 | SQL injection vulnerability in list_list.php in Realty Webware Technologies Web-Base... |
| CVE-2009-1752 | 2009-05-21 | exJune Office Message System 1 does not properly restrict access... |
| CVE-2009-1753 | 2009-05-21 | Coccinelle 0.1.7 allows local users to overwrite arbitrary files via... |
| CVE-2009-1756 | 2009-05-22 | SLiM Simple Login Manager 1.3.0 places the X authority magic... |
| CVE-2009-1758 | 2009-05-22 | The hypervisor_callback function in Xen, possibly before 3.4.0, as applied... |
| CVE-2009-1759 | 2009-05-22 | Stack-based buffer overflow in the btFiles::BuildFromMI function (trunk/btfiles.cpp) in Enhanced... |
| CVE-2009-1755 | 2009-05-22 | Off-by-one error in the packet_read_query_section function in packet.c in nsd... |
| CVE-2009-1757 | 2009-05-22 | Cross-site request forgery (CSRF) vulnerability in Transmission 1.5 before 1.53... |
| CVE-2009-1635 | 2009-05-22 | Multiple cross-site scripting (XSS) vulnerabilities in the WebAccess component in... |
| CVE-2009-1762 | 2009-05-22 | Multiple cross-site scripting (XSS) vulnerabilities in the WebAccess login page... |
| CVE-2009-1763 | 2009-05-22 | Unspecified vulnerability in the Solaris Secure Digital slot driver (aka... |
| CVE-2009-1764 | 2009-05-22 | SQL injection vulnerability in inc/ajax.asp in MaxCMS 2.0 allows remote... |
| CVE-2009-1765 | 2009-05-22 | Multiple directory traversal vulnerabilities in pluck 4.6.2, when register_globals is... |
| CVE-2009-1766 | 2009-05-22 | SQL injection vulnerability in index.php in LightOpenCMS 0.1 allows remote... |
| CVE-2009-1767 | 2009-05-22 | admin/edituser.php in 2daybiz Template Monster Clone does not require administrative... |
| CVE-2009-1768 | 2009-05-22 | Directory traversal vulnerability in download.php in Rama Zaiten CMS 0.9.8... |
| CVE-2009-1769 | 2009-05-22 | The web interface in Open Computer and Software Inventory Next... |
| CVE-2009-1770 | 2009-05-22 | Directory traversal vulnerability in includes/database/examples/addressbook.php in Flyspeck CMS 6.8 allows... |
| CVE-2009-1771 | 2009-05-22 | index.php in Flyspeck CMS 6.8 does not require administrative authentication... |
| CVE-2009-1774 | 2009-05-22 | Directory traversal vulnerability in plugins/ddb/foot.php in Strawberry 1.1.1 allows remote... |
| CVE-2009-1772 | 2009-05-22 | Cross-site scripting (XSS) vulnerability in activeCollab 2.1 Corporate allows remote... |
| CVE-2009-1773 | 2009-05-22 | activeCollab 2.1 Corporate allows remote attackers to obtain sensitive information... |
| CVE-2009-1381 | 2009-05-22 | The map_yp_alias function in functions/imap_general.php in SquirrelMail before 1.4.19-1 on... |
| CVE-2009-1776 | 2009-05-22 | Multiple cross-site scripting (XSS) vulnerabilities in FormMail.pl in Matt Wright... |
| CVE-2009-1777 | 2009-05-22 | CRLF injection vulnerability in FormMail.pl in Matt Wright FormMail 1.92,... |
| CVE-2009-1778 | 2009-05-22 | SQL injection vulnerability in the new user registration feature in... |
| CVE-2009-1779 | 2009-05-22 | PHP remote file inclusion vulnerability in admin.php in Frax.dk Php... |
| CVE-2009-1780 | 2009-05-22 | admin.php in Frax.dk Php Recommend 1.3 and earlier does not... |
| CVE-2009-1781 | 2009-05-22 | Static code injection vulnerability in admin.php in Frax.dk Php Recommend... |
| CVE-2009-1782 | 2009-05-22 | Multiple F-Secure anti-virus products, including Anti-Virus for Microsoft Exchange 7.10... |
| CVE-2009-1783 | 2009-05-22 | Multiple FRISK Software F-Prot anti-virus products, including Antivirus for Exchange,... |
| CVE-2009-1784 | 2009-05-22 | The AVG parsing engine 8.5 323, as used in multiple... |