Archive
January 2009
Vulnerabilities first published in this month (UTC), newest first.
466 results · Feed
-
Unscored —CVE-2009-0374 Public exploit
Google Chrome 1.0.154.43 allows remote attackers to trick a user into visiting an arbitrary URL via an onclick action t…
-
Unscored —
The verifyProof function in the Token Processing System (TPS) component in Red Hat Certificate System (RHCS) 7.1 throug…
-
Unscored —CVE-2009-0372 Public exploit
Unrestricted file upload vulnerability in index.php in Miltenovik Manojlo MemHT Portal 4.0.1 and earlier allows remote …
-
Unscored —
Microsoft Internet Explorer 7 allows remote attackers to trick a user into visiting an arbitrary URL via an onclick act…
-
Unscored —CVE-2009-0371 Public exploit
Directory traversal vulnerability in post.php in SiteXS CMS 0.1.1 and earlier allows remote attackers to include and ex…
-
Unscored —
Multiple unspecified vulnerabilities in IBM AIX 5.2.0 through 6.1.2 allow local users to append data to arbitrary files…
-
Unscored —
Cross-site scripting (XSS) vulnerability in HP Select Access 6.1 and 6.2 allows remote attackers to inject arbitrary we…
-
Unscored —
parse.c in sudo 1.6.9p17 through 1.6.9p19 does not properly interpret a system group (aka %group) in the sudoers file d…
-
Unscored —CVE-2009-0373 Public exploit
SQL injection vulnerability in the ElearningForce Flash Magazine Deluxe (com_flashmagazinedeluxe) component for Joomla!…
-
Unscored —CVE-2008-6012 Public exploit
Directory traversal vulnerability in index.php in Pritlog 0.4 and earlier, when magic_quotes_gpc is disabled, allows re…
-
Unscored —CVE-2008-6011 Public exploit
SQL injection vulnerability in index.php in SG Real Estate Portal 2.0 allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2008-6016 Public exploit
SQL injection vulnerability in questions.php in EsFaq 2.0 allows remote attackers to execute arbitrary SQL commands via…
-
Unscored —
Multiple SQL injection vulnerabilities in search.php in EsFaq 2.0 allow remote attackers to execute arbitrary SQL comma…
-
Unscored —CVE-2008-6010 Public exploit
Multiple directory traversal vulnerabilities in SG Real Estate Portal 2.0 allow remote attackers to read arbitrary file…
-
Unscored —
Multiple SQL injection vulnerabilities in Freeway before 1.4.3.210 allow remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2008-6007 Public exploit
SQL injection vulnerability in view_group.php in QuidaScript BookMarks Favourites Script (APB) allows remote attackers …
-
Unscored —
hyBook Guestbook Script stores sensitive information under the web root with insufficient access control, which allows …
-
Unscored —CVE-2008-6009 Public exploit
SG Real Estate Portal 2.0 allows remote attackers to bypass authentication and gain administrative access by setting th…
-
Unscored —CVE-2008-6006 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Micronation Banking System (minba) 1.5.0 allow remote attackers t…
-
Unscored —CVE-2008-6014 Public exploit
SQL injection vulnerability in scripts/links.php in Rianxosencabos CMS 0.9 allows remote attackers to execute arbitrary…
-
Unscored —CVE-2009-0343 Public exploit
Niels Provos Systrace 1.6f and earlier on the x86_64 Linux platform allows local users to bypass intended access restri…
-
Unscored —
Stack-based buffer overflow in Merak Media Player 3.2 allows remote attackers to execute arbitrary code via a long stri…
-
Unscored —
The shell32 module in Microsoft Internet Explorer 7.0 on Windows XP SP3 might allow remote attackers to execute arbitra…
-
Unscored —
Unspecified vulnerability in the Embedded Lights Out Manager (ELOM) on the Sun Fire X2100 M2 and X2200 M2 x86 platforms…
-
Unscored —
The IP-in-IP packet processing implementation in the IPsec and IP stacks in the kernel in Sun Solaris 9 and 10, and Ope…
-
Unscored —
Open redirect vulnerability in cs.html in the Autonomy (formerly Verity) Ultraseek search engine allows remote attacker…
-
Unscored —CVE-2009-0351 Public exploit
Stack-based buffer overflow in WFTPSRV.exe in WinFTP 2.3.0 allows remote authenticated users to execute arbitrary code …
-
Unscored —
Niels Provos Systrace before 1.6f on the x86_64 Linux platform allows local users to bypass intended access restriction…
-
Unscored —CVE-2009-0349 Public exploit
Stack-based buffer overflow in FTPShell Server 4.3 allows user-assisted remote attackers to cause a denial of service (…
-
Unscored —
Unspecified vulnerability in the Embedded Lights Out Manager (ELOM) on the Sun Fire X2100 M2 and X2200 M2 x86 platforms…
-
Unscored —CVE-2009-0348 Public exploit
The login module in Sun Java System Access Manager 6 2005Q1 (aka 6.3), 7 2005Q4 (aka 7.0), and 7.1 responds differently…
-
Unscored —CVE-2009-0333 Public exploit
SQL injection vulnerability in the WebAmoeba (WA) Ticket System (com_waticketsystem) component for Joomla! allows remot…
-
Unscored —CVE-2009-0328 Public exploit
ROBS-PROJECTS Digital Sales IPN (aka DS-IPN.NET or DS-IPN Paypal Shop) stores sensitive information under the web root …
-
Unscored —CVE-2009-0340 Public exploit
Multiple directory traversal vulnerabilities in Simple PHP Newsletter 1.5 allow remote attackers to read arbitrary file…
-
Unscored —CVE-2009-0329 Public exploit
SQL injection vulnerability in the PcCookBook (com_pccookbook) component for Joomla! allows remote attackers to execute…
-
Unscored —CVE-2009-0334 Public exploit
SQL injection vulnerability in index.asp in Katy Whitton BlogIt! allows remote attackers to execute arbitrary SQL comma…
-
Unscored —
Multiple SQL injection vulnerabilities in AV Book Library before 1.1 allow remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2009-0335 Public exploit
Cross-site scripting (XSS) vulnerability in index.asp in Katy Whitton BlogIt! allows remote attackers to inject arbitra…
-
Unscored —CVE-2009-0336 Public exploit
Katy Whitton BlogIt! stores sensitive information under the web root with insufficient access control, which allows rem…
-
Unscored —CVE-2009-0330 Public exploit
Directory traversal vulnerability in index.php in Simple Content Management System (SCMS) 1 allows remote attackers to …