Archive
22 January 2009
Vulnerabilities first published on this day (UTC), newest first.
31 results · Feed
-
Unscored —CVE-2009-0259 Public exploit
The Word processor in OpenOffice.org 1.1.2 through 1.1.5 allows remote attackers to cause a denial of service (crash) a…
-
High —
Indexed Search Engine for TYPO3 Command Execution via Metacharacter Injection
The Indexed Search Engine (indexed_search) system extension in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allows remote attackers to execute arbitrary commands via a crafted filename containing shell metacharacters, which is not p…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 throug…
-
Unscored —CVE-2009-0255 Public exploit
The System extension Install tool in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 creates th…
-
High —
Authentication library in TYPO3 vulnerable to session fixation
Session fixation vulnerability in the authentication library in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allows remote attackers to hijack web sessions via unspecified vectors related to (1) frontend and (2) backend authenticati…
-
Unscored —
Cisco Security Manager 3.1 and 3.2 before 3.2.2, when Cisco IPS Event Viewer (IEV) is used, exposes TCP ports used by t…
-
Unscored —
SQL injection vulnerability in mod_auth_mysql.c in the mod-auth-mysql (aka libapache2-mod-auth-mysql) module for the Ap…
-
Unscored —CVE-2009-0253 Public exploit
Mozilla Firefox 3.0.5 allows remote attackers to trick a user into visiting an arbitrary URL via an onclick action that…
-
Unscored —
Unspecified vulnerability in Apple QuickTime MPEG-2 Playback Component before 7.60.92.0 on Windows allows remote attack…
-
Unscored —
Stack-based buffer overflow in easyHDR PRO 1.60.2 allows user-assisted attackers to execute arbitrary code via an inval…
-
Unscored —
The Certificate Authority Proxy Function (CAPF) service in Cisco Unified Communications Manager 5.x before 5.1(3e) and …
-
Unscored —CVE-2009-0248 Public exploit
Cross-site scripting (XSS) vulnerability in rankup.asp in Katy Whitton RankEm allows remote attackers to inject arbitra…
-
Unscored —CVE-2009-0252 Public exploit
Multiple SQL injection vulnerabilities in default.asp in Enthrallweb eReservations allow remote attackers to execute ar…
-
Unscored —CVE-2009-0250 Public exploit
Ryneezy phoSheezy 0.2 stores sensitive information under the web root with insufficient access control, which allows re…
-
Unscored —
The server for 53KF Web IM 2009 Home, Professional, and Enterprise editions relies on client-side protection mechanisms…
-
Unscored —CVE-2009-0249 Public exploit
Katy Whitton RankEm stores sensitive information under the web root with insufficient access control, which allows remo…
-
Unscored —CVE-2009-0251 Public exploit
Static code injection vulnerability in admin.php in Ryneezy phoSheezy 0.2 allows remote authenticated administrators to…
-
Unscored —
Stack-based buffer overflow in easyHDR PRO 1.60.2 allows user-assisted attackers to execute arbitrary code via an inval…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in MODx before 0.9.6.3 allow remote attackers to inject arbitrary w…
-
Unscored —CVE-2008-5944 Public exploit
Cross-site scripting (XSS) vulnerability in modules.php in NavBoard 16 (2.6.0) allows remote attackers to inject arbitr…
-
Unscored —CVE-2008-5939 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in MODx CMS 0.9.6.2 and earlier allows remote attackers to inject…
-
Unscored —CVE-2008-5938 Public exploit
PHP remote file inclusion vulnerability in assets/snippets/reflect/snippet.reflect.php in MODx CMS 0.9.6.2 and earlier,…
-
Unscored —CVE-2008-5943 Public exploit
Multiple directory traversal vulnerabilities in NavBoard 16 (2.6.0) allow remote attackers to include and execute arbit…
-
Unscored —CVE-2008-5947 Public exploit
PHP remote file inclusion vulnerability in include/class_yapbbcooker.php in YapBB 1.2.Beta 2 allows remote attackers to…
-
Unscored —
SQL injection vulnerability in index.php in MODx 0.9.6.2 and earlier, when magic_quotes_gpc is disabled, allows remote …
-
Unscored —CVE-2008-5946 Public exploit
SQL injection vulnerability in readmore.php in PHP-Fusion 4.01 allows remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2008-5945 Public exploit
Nukeviet 2.0 Beta allows remote attackers to bypass authentication and gain administrative access by setting the admf c…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in MODx 0.9.6.1p2 and earlier allows remote attackers to perform unauth…
-
Unscored —CVE-2008-5936 Public exploit
front-end/edit.php in mini-pub 0.3 and earlier allows remote attackers to read files and obtain PHP source code via a f…
-
Unscored —CVE-2008-5937 Public exploit
AyeView 2.20 allows user-assisted attackers to cause a denial of service (memory consumption or application crash) via …
-
Unscored —
Cross-site scripting (XSS) vulnerability in Usagi Project MyNETS 1.2.0.1 and earlier allows remote attackers to inject …