Skip to content
OpenAdvisories

Archive

April 2009

Vulnerabilities first published in this month (UTC), newest first.

← March 2009 2009 / April May 2009 →
  1. 128
  2. 221
  3. 325
  4. 41
  5. 5 
  6. 638
  7. 743
  8. 825
  9. 931
  10. 1032
  11. 11 
  12. 12 
  13. 1318
  14. 146
  15. 1563
  16. 1610
  17. 1732
  18. 18 
  19. 19 
  20. 2011
  21. 2126
  22. 2225
  23. 2325
  24. 2423
  25. 25 
  26. 26 
  27. 2719
  28. 2826
  29. 2923
  30. 3016
All Critical High Medium Low Exploited only Public exploit

257 results · Clear filters · Feed

  • Unscored —
    CVE-2009-1227 Public exploit

    NOTE: this issue has been disputed by the vendor. Buffer overflow in the PKI Web Service in Check Point Firewall-1 PKI …

  • Unscored —
    CVE-2009-1224 Public exploit

    SQL injection vulnerability in vsp-core/pub/themes/bismarck/gamestat.php in vsp stats processor 0.45 allows remote atta…

  • Unscored —
    CVE-2009-1222 Public exploit

    Directory traversal vulnerability in index.php in webEdition 6.0.0.4 and earlier, when register_globals is enabled and …

  • Unscored —
    CVE-2009-1228 Public exploit

    Cross-site scripting (XSS) vulnerability in register.php in Arcadwy Arcade Script CMS allows remote attackers to inject…

  • Unscored —
    CVE-2009-1230 Public exploit

    Static code injection vulnerability in index.php in Podcast Generator 1.1 and earlier allows remote authenticated admin…

  • Unscored —
    CVE-2009-1225 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Turnkey Ebook Store 1.1 allows remote attackers to inject arbi…

  • Unscored —
    CVE-2003-1571 Public exploit

    Web Wiz Guestbook 6.0 stores sensitive information under the web root with insufficient access control, which allows re…

  • Unscored —
    CVE-2009-1220 Public exploit

    Cross-site scripting (XSS) vulnerability in +webvpn+/index.html in WebVPN on the Cisco Adaptive Security Appliances (AS…

  • Unscored —
    CVE-2009-1218 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Sun Calendar Express Web Server in Sun ONE Calendar Server 6.0 a…

  • Unscored —
    CVE-2009-1219 Public exploit

    Sun Calendar Express Web Server in Sun ONE Calendar Server 6.0 and Sun Java System Calendar Server 6 2004Q2 through 6.3…

  • Unscored —
    CVE-2007-4475 Public exploit EPSS 40%

    Stack-based buffer overflow in EAI WebViewer3D ActiveX control (webviewer3d.dll) in SAP AG SAPgui before 7.10 Patch Lev…

  • Unscored —
    CVE-2009-1217 Public exploit EPSS 16%

    Off-by-one error in the GpFont::SetData function in gdiplus.dll in Microsoft GDI+ on Windows XP allows remote attackers…

  • Unscored —
    CVE-2009-0686 Public exploit

    The TrendMicro Activity Monitor Module (tmactmon.sys) 2.52.0.1002 in Trend Micro Internet Pro 2008 and 2009, and Securi…

  • Unscored —
    CVE-2009-1209 Public exploit EPSS 12%

    Stack-based buffer overflow in W3C Amaya Web Browser 11.1 allows remote attackers to execute arbitrary code via a scrip…

  • Unscored —
    CVE-2009-1210 Public exploit EPSS 15%

    Format string vulnerability in the PROFINET/DCP (PN-DCP) dissector in Wireshark 1.0.6 and earlier allows remote attacke…

    wireshark Debian
  • Unscored —
    CVE-2009-1212 Public exploit

    Multiple insecure method vulnerabilities in PRECIS~2.DLL in the PrecisionID Datamatrix ActiveX control (DMATRIXLib.Data…

  • Unscored —
    CVE-2009-1204 Public exploit

    Cross-site scripting (XSS) vulnerability in TikiWiki (Tiki) CMS/Groupware 2.2 allows remote attackers to inject arbitra…