Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: April 2009

50 records · 1 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2009-1209
    41Plan

    Stack-based buffer overflow in W3C Amaya Web Browser 11.1 allows remote attackers to execute arbitrary code via a script tag with a long def

    CriticalCVSS 9.3Proof of conceptEPSS 12%

    w3 · amayaApr 1, 2009

  • CVE-2009-1210
    45Plan

    Format string vulnerability in the PROFINET/DCP (PN-DCP) dissector in Wireshark 1.0.6 and earlier allows remote attackers to execute arbitra

    CriticalCVSS 10.0Proof of conceptEPSS 15%

    wireshark · wiresharkApr 1, 2009

  • CVE-2009-1216
    47Plan

    Multiple unspecified vulnerabilities in (1) unlzh.c and (2) unpack.c in the gzip libraries in Microsoft Windows Server 2008, Windows Service

    CriticalCVSS 10.0No exploitEPSS 24%

    microsoft · subsystem for unix-based applicationsApr 1, 2009

  • CVE-2009-1217
    22Monitor

    Off-by-one error in the GpFont::SetData function in gdiplus.dll in Microsoft GDI+ on Windows XP allows remote attackers to cause a denial of

    MediumCVSS 4.3Proof of conceptEPSS 16%

    microsoft · gdi\+Apr 1, 2009

  • CVE-2007-4475
    49Plan

    Stack-based buffer overflow in EAI WebViewer3D ActiveX control (webviewer3d.dll) in SAP AG SAPgui before 7.10 Patch Level 9 allows remote at

    CriticalCVSS 9.3WeaponizedEPSS 40%

    sap · sapguiApr 1, 2009

  • CVE-2009-0556
    85Now

    Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3, and PowerPoint in Microsoft Office 2004 for Mac, allows remote attackers to ex

    HighCVSS 8.8KEVWeaponizedEPSS 67%

    microsoft · office powerpointApr 3, 2009

  • CVE-2009-1247
    34Monitor

    SQL injection vulnerability in login.php in Acute Control Panel 1.0.0 allows remote attackers to execute arbitrary SQL commands via the user

    HighCVSS 7.5Proof of conceptEPSS 13%

    acutecp.rediscussed · acutecpApr 6, 2009

  • CVE-2009-0796
    19Monitor

    Cross-site scripting (XSS) vulnerability in Status.pm in Apache::Status and Apache2::Status in mod_perl1 and mod_perl2 for the Apache HTTP S

    LowCVSS 2.6Proof of conceptEPSS 29%

    apache · mod perlApr 7, 2009

  • CVE-2009-1257
    40Plan

    Heap-based buffer overflow in Magic ISO Maker 5.5 build 0274 allows remote attackers to cause a denial of service (crash) or execute arbitra

    CriticalCVSS 9.0Proof of conceptEPSS 13%

    magic iso maker · magic iso makerApr 7, 2009

  • CVE-2009-1260
    50Plan

    Multiple stack-based buffer overflows in UltraISO 9.3.3.2685 and earlier allow remote attackers to cause a denial of service (crash) or exec

    CriticalCVSS 9.3WeaponizedEPSS 42%

    ezbsystems · ultraisoApr 7, 2009

  • CVE-2008-6668
    24Monitor

    Multiple directory traversal vulnerabilities in nweb2fax 0.2.7 and earlier allow remote attackers to read arbitrary files via a ..

    MediumCVSS 5.0Proof of conceptEPSS 14%

    dirk bartley · nweb2faxApr 8, 2009

  • CVE-2009-1284
    24Monitor

    Buffer overflow in BibTeX 0.99 allows context-dependent attackers to cause a denial of service (memory corruption and crash) via a long .bib

    MediumCVSS 5.0Proof of conceptEPSS 11%

    bibtex · bibtexApr 9, 2009

  • CVE-2008-6714
    34Monitor

    admin.php in xeCMS 1.0.0 RC2 and earlier allows remote attackers to bypass authentication and access the admin panel by setting the xecms_us

    HighCVSS 7.5Proof of conceptEPSS 12%

    xecms project · xecmsApr 10, 2009

  • CVE-2009-1287
    24Monitor

    Cross-site scripting (XSS) vulnerability in Cisco Subscriber Edge Services Manager (SESM) allows remote attackers to inject arbitrary web sc

    MediumCVSS 4.3Proof of conceptEPSS 23%

    cisco · subscriber edge services managerApr 13, 2009

  • CVE-2009-0159
    31Monitor

    Stack-based buffer overflow in the cookedprint function in ntpq/ntpq.c in ntpq in NTP before 4.2.4p7-RC2 allows remote NTP servers to execut

    MediumCVSS 6.8No exploitEPSS 13%

    ntp · ntpApr 14, 2009

  • CVE-2009-0077
    44Plan

    The firewall engine in Microsoft Forefront Threat Management Gateway, Medium Business Edition (TMG MBE); and Internet Security and Accelerat

    MediumCVSS 5.0No exploitEPSS 78%

    microsoft · forefront threat management gatewayApr 15, 2009

  • CVE-2009-0084
    47Plan

    Use-after-free vulnerability in DirectShow in Microsoft DirectX 8.1 and 9.0 allows remote attackers to execute arbitrary code via an MJPEG f

    CriticalCVSS 9.3No exploitEPSS 31%

    microsoft · windows 2000Apr 15, 2009

  • CVE-2009-0086
    44Plan

    Integer underflow in Windows HTTP Services (aka WinHTTP) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold

    CriticalCVSS 10.0No exploitEPSS 14%

    microsoft · windows 2000Apr 15, 2009

  • CVE-2009-0087
    45Plan

    Unspecified vulnerability in the Word 6 text converter in WordPad in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2

    CriticalCVSS 9.3No exploitEPSS 25%

    microsoft · office wordApr 15, 2009

  • CVE-2009-0088
    46Plan

    The WordPerfect 6.x Converter (WPFT632.CNV, 1998.1.27.0) in Microsoft Office Word 2000 SP3 and Microsoft Office Converter Pack does not prop

    CriticalCVSS 9.3No exploitEPSS 28%

    microsoft · office converter packApr 15, 2009

  • CVE-2009-0100
    46Plan

    Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1; Excel in Microsoft Office 2004 and 2008 for Mac; Microsoft Office Excel V

    CriticalCVSS 9.3No exploitEPSS 28%

    microsoft · officeApr 15, 2009

  • CVE-2009-0235
    47Plan

    Stack-based buffer overflow in the Word 97 text converter in WordPad in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and

    CriticalCVSS 9.3No exploitEPSS 33%

    microsoft · windows 2000Apr 15, 2009

  • CVE-2009-0237
    24Monitor

    Cross-site scripting (XSS) vulnerability in cookieauth.dll in the HTML forms authentication component in Microsoft Forefront Threat Manageme

    MediumCVSS 4.3No exploitEPSS 22%

    microsoft · forefront threat management gatewayApr 15, 2009

  • CVE-2009-0550
    41Plan

    Windows HTTP Services (aka WinHTTP) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2

    CriticalCVSS 9.3No exploitEPSS 11%

    microsoft · windows 2000Apr 15, 2009

  • CVE-2009-0551
    39Monitor

    Microsoft Internet Explorer 6 SP1, 6 and 7 on Windows XP SP2 and SP3, 6 and 7 on Windows Server 2003 SP1 and SP2, 7 on Windows Vista Gold an

    HighCVSS 8.1No exploitEPSS 24%

    microsoft · internet explorerApr 15, 2009

  • CVE-2009-0552
    46Plan

    Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4, 6 SP1, 6 on Windows XP SP2 and SP3, and 6 on Windows Server 2003 SP1 and

    CriticalCVSS 9.3No exploitEPSS 28%

    microsoft · ieApr 15, 2009

  • CVE-2009-0553
    49Plan

    Microsoft Internet Explorer 6 SP1, 6 and 7 on Windows XP SP2 and SP3, 6 and 7 on Windows Server 2003 SP1 and SP2, 7 on Windows Vista Gold an

    CriticalCVSS 9.3Proof of conceptEPSS 41%

    microsoft · internet explorerApr 15, 2009

  • CVE-2009-0554
    45Plan

    Microsoft Internet Explorer 5.01 SP4, 6 SP1, 6 and 7 on Windows XP SP2 and SP3, 6 and 7 on Windows Server 2003 SP1 and SP2, 7 on Windows Vis

    HighCVSS 8.8No exploitEPSS 32%

    microsoft · internet explorerApr 15, 2009

  • CVE-2009-0978
    40Plan

    Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4 and 11.1.0.6 allows remote authenticated users to a

    MediumCVSS 5.5WeaponizedEPSS 16%

    oracle · database 10gApr 15, 2009

  • CVE-2009-0991
    25Monitor

    Unspecified vulnerability in the Listener component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote at

    MediumCVSS 5.0Proof of conceptEPSS 15%

    oracle · database 10gApr 15, 2009

  • CVE-2007-2238
    51Plan

    Multiple stack-based buffer overflows in the Whale Client Components ActiveX control (WhlMgr.dll), as used in Microsoft Intelligent Applicat

    CriticalCVSS 9.3WeaponizedEPSS 45%

    microsoft · intelligent application gateway 2007Apr 16, 2009

  • CVE-2008-4830
    45Plan

    Insecure method vulnerability in the KWEdit ActiveX control in SAP GUI 6.40 Patch 29 (KWEDIT.DLL 6400.1.1.41) and 7.10 Patch 5 (KWEDIT.DLL 7

    CriticalCVSS 9.3WeaponizedEPSS 27%

    sap · sap guiApr 16, 2009

  • CVE-2009-1285
    40Plan

    Static code injection vulnerability in the getConfigFile function in setup/lib/ConfigFile.class.php in phpMyAdmin 3.x before 3.1.3.2 allows

    HighCVSS 7.5WeaponizedEPSS 10%

    phpmyadmin · phpmyadminApr 16, 2009

  • CVE-2009-1314
    43Plan

    body.asp in Web File Explorer 3.1 allows remote attackers to create arbitrary files and execute arbitrary code via the savefile action with

    CriticalCVSS 10.0Proof of conceptEPSS 10%

    webfileexplorer · web file explorerApr 16, 2009

  • CVE-2009-1324
    42Plan

    Stack-based buffer overflow in Mini-stream ASX to MP3 Converter 3.0.0.7 allows remote attackers to execute arbitrary code via a long URI in

    CriticalCVSS 9.3Proof of conceptEPSS 16%

    mini-stream · asx to mp3 converterApr 17, 2009

  • CVE-2009-1330
    43Plan

    Stack-based buffer overflow in Easy RM to MP3 Converter allows remote attackers to execute arbitrary code via a long filename in a playlist

    CriticalCVSS 9.3Proof of conceptEPSS 21%

    mini-stream · easy rm to mp3 converterApr 17, 2009

  • CVE-2008-5518
    48Plan

    Multiple directory traversal vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1 through 2.1.3 on Wi

    CriticalCVSS 9.4Proof of conceptEPSS 35%

    apache · geronimoApr 17, 2009

  • CVE-2009-0038
    22Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1 through 2.1.

    MediumCVSS 4.3Proof of conceptEPSS 18%

    apache · geronimoApr 17, 2009

  • CVE-2009-0039
    30Monitor

    Multiple cross-site request forgery (CSRF) vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1 throu

    MediumCVSS 6.8Proof of conceptEPSS 11%

    apache · geronimoApr 17, 2009

  • CVE-2009-1185
    52Plan

    udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to gain privileges by sen

    HighCVSS 7.2WeaponizedEPSS 80%

    udev project · udevApr 17, 2009

  • CVE-2009-1331
    42Plan

    Integer overflow in Microsoft Windows Media Player (WMP) 11.0.5721.5260 allows remote attackers to cause a denial of service (application cr

    CriticalCVSS 9.3Proof of conceptEPSS 18%

    microsoft · windows media playerApr 17, 2009

  • CVE-2009-1335
    22Monitor

    Microsoft Internet Explorer 7 and 8 on Windows XP and Vista allows remote attackers to cause a denial of service (application hang) via a la

    MediumCVSS 4.3Proof of conceptEPSS 15%

    microsoft · internet explorerApr 17, 2009

  • CVE-2009-1350
    60This week

    Unspecified vulnerability in xtagent.exe in Novell NetIdentity Client before 1.2.4 allows remote attackers to execute arbitrary code by esta

    CriticalCVSS 10.0WeaponizedEPSS 65%

    novell · netidentity client1.2.3Apr 21, 2009

  • CVE-2009-1191
    24Monitor

    mod_proxy_ajp.c in the mod_proxy_ajp module in the Apache HTTP Server 2.2.11 allows remote attackers to obtain sensitive response data, inte

    MediumCVSS 5.0No exploitEPSS 12%

    apache · http serverApr 23, 2009

  • CVE-2009-1437
    41Plan

    Stack-based buffer overflow in PortableApps CoolPlayer Portable (aka CoolPlayer+ Portable) 2.19.6 and earlier allows remote attackers to exe

    CriticalCVSS 9.3Proof of conceptEPSS 13%

    coolplayer · coolplayerApr 27, 2009

  • CVE-2008-2438
    43Plan

    Integer overflow in ovalarmsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbi

    CriticalCVSS 10.0No exploitEPSS 11%

    hp · openview network node managerApr 28, 2009

  • CVE-2009-1429
    66This week

    The Intel LANDesk Common Base Agent (CBA) in Symantec Alert Management System 2 (AMS2), as used in Symantec System Center (SSS); Symantec An

    CriticalCVSS 10.0WeaponizedEPSS 87%

    symantec · antivirusApr 29, 2009

  • CVE-2009-1430
    54Plan

    Multiple stack-based buffer overflows in IAO.EXE in the Intel Alert Originator Service in Symantec Alert Management System 2 (AMS2), as used

    CriticalCVSS 9.3WeaponizedEPSS 55%

    symantec · antivirusApr 29, 2009

  • CVE-2009-1492
    45Plan

    The getAnnots Doc method in the JavaScript API in Adobe Reader and Acrobat 9.1, 8.1.4, 7.1.1, and earlier allows remote attackers to cause a

    CriticalCVSS 9.3Proof of conceptEPSS 25%

    adobe · acrobatApr 30, 2009

  • CVE-2009-1493
    34Monitor

    The customDictionaryOpen spell method in the JavaScript API in Adobe Reader 9.1, 8.1.4, 7.1.1, and earlier on Linux and UNIX allows remote a

    MediumCVSS 6.8Proof of conceptEPSS 21%

    adobe · readerApr 30, 2009