Sourceforge - vulnerabilities (CVEs)

25 CVEs in 25 products, 0 in the last 30 days, newest from 2026-04-04.

Products

202cms - 2 CVEs
Data Center Audit - 2 CVEs
Easyndexer - 2 CVEs
Creammonkey - 1 CVEs
Emule X-ray - 1 CVEs
Greasekit - 1 CVEs
Jgbbs - 1 CVEs
Meneame English Pligg - 1 CVEs
Mymarket - 1 CVEs
Net-snmp - 1 CVEs
Newsdaemon - 1 CVEs
Openbiz Cubi Lite - 1 CVEs
Php Ticket - 1 CVEs
Phpmyclub - 1 CVEs
Placeto Cms - 1 CVEs
Putmail - 1 CVEs
Simplepress Cms - 1 CVEs
Snes9k 0.0.9z - 1 CVEs
Sox - Sound Exchange - 1 CVEs
Web Slider - 1 CVEs
Webmplayer - 1 CVEs
Wordperfect Document Importer-exporter - 1 CVEs
Wow Raid Manager - 1 CVEs
Echo Mirage - 0 CVEs
Gps Tracking System - 0 CVEs

Newest CVEs of Sourceforge

CVE-2018-25251 - CVSS 8.6 (high), 2026-04-04: Snes9K 0.0.9z contains a buffer overflow vulnerability in the Netplay Socket Port Number field that allows local attackers to trigger a structured exception…
CVE-2018-25209 - CVSS 8.8 (high), 2026-03-26: OpenBiz Cubi Lite 3.0.8 contains a SQL injection vulnerability in the login form that allows unauthenticated attackers to manipulate database queries through…
CVE-2019-25575 - CVSS 8.8 (high), 2026-03-21: SimplePress CMS 1.0.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious…
CVE-2019-25539 - CVSS 8.8 (high), 2026-03-12: 202CMS v10 beta contains a blind SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code…
CVE-2019-25538 - CVSS 8.8 (high), 2026-03-12: 202CMS v10 beta contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the…
CVE-2019-25529 - CVSS 7.1 (high), 2026-03-12: Placeto CMS Alpha rv.4 contains an SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code…
CVE-2018-25190 - CVSS 6.9 (medium), 2026-03-06: Easyndexer 1.0 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to create administrative accounts by submitting…
CVE-2018-25189 - CVSS 8.8 (high), 2026-03-06: Data Center Audit 2.6.2 contains an SQL injection vulnerability in the username parameter of dca_login.php that allows unauthenticated attackers to execute…
CVE-2018-25177 - CVSS 6.9 (medium), 2026-03-06: Data Center Audit 2.6.2 contains a cross-site request forgery vulnerability that allows attackers to reset administrator passwords without authentication by…
CVE-2018-25178 - CVSS 8.7 (high), 2026-03-06: Easyndexer 1.0 contains an arbitrary file download vulnerability that allows unauthenticated attackers to download sensitive files by manipulating the file…
CVE-2018-25166 - CVSS 8.8 (high), 2026-03-06: Meneame English Pligg 5.8 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting…
CVE-2019-1010004 - CVSS 5.5 (medium), 2019-07-15: SoX - Sound eXchange 14.4.2 and earlier is affected by: Out-of-bounds Read. The impact is: Denial of Service. The component is: read_samples function at…
CVE-2008-6161 - CVSS 4.3 (medium), 2009-02-18: Cross-site scripting (XSS) vulnerability in WOW Raid Manager (WRM) before 3.5.1 allows remote attackers to inject arbitrary web script or HTML via unspecified…
CVE-2008-2503 - CVSS 9.3 (critical), 2008-05-29: Buffer overflow in Uploadlist in eMule X-Ray before 1.4 has unknown impact and remote attack vectors.
CVE-2008-2298 - CVSS 7.5 (high), 2008-05-18: Admin.php in Web Slider 0.6 allows remote attackers to bypass authentication and gain privileges by setting the admin cookie to 1.
CVE-2008-0501 - CVSS 5.8 (medium), 2008-01-30: Directory traversal vulnerability in phpMyClub 0.0.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the…
CVE-2007-6640 - CVSS 6.4 (medium), 2008-01-04: Creammonkey 0.9 through 1.1 and GreaseKit 1.2 through 1.3 does not properly prevent access to dangerous functions, which allows remote attackers to read the…
CVE-2007-1572 - CVSS 6.8 (medium), 2007-03-21: SQL injection vulnerability in search.asp in JGBBS 3.0 Beta 1 and earlier allows remote attackers to execute arbitrary SQL commands via the title parameter, a…
CVE-2007-1466 - CVSS 6.8 (medium), 2007-03-16: Integer overflow in the WP6GeneralTextPacket::_readContents function in WordPerfect Document importer/exporter (libwpd) before 0.8.9 allows user-assisted…
CVE-2007-1135 - CVSS 6.8 (medium), 2007-03-02: Multiple SQL injection vulnerabilities in WebMplayer before 0.6.1-Alpha allow remote attackers to execute arbitrary SQL commands via the (1) strid parameter…
CVE-2007-1137 - CVSS 5 (medium), 2007-03-02: putmail.py in Putmail before 1.4 does not detect when a user attempts to use TLS with a server that does not support it, which causes putmail.py to send the…
CVE-2005-4837 - CVSS 10 (critical), 2005-12-31: snmp_api.c in snmpd in Net-SNMP 5.2.x before 5.2.2, 5.1.x before 5.1.3, and 5.0.x before 5.0.10.2, when running in master agentx mode, allows remote attackers…
CVE-2002-2364 - CVSS 4.3 (medium), 2002-12-31: Cross-site scripting (XSS) vulnerability in PHP Ticket 0.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a help ticket.
CVE-2002-2362 - CVSS 4.3 (medium), 2002-12-31: Cross-site scripting (XSS) vulnerability in form_header.php in MyMarket 1.71 allows remote attackers to inject arbitrary web script or HTML via the noticemsg…
CVE-2001-0234 - CVSS 7.5 (high), 2001-05-03: NewsDaemon before 0.21b allows remote attackers to execute arbitrary SQL queries and gain privileges via a malformed user_username parameter.