Archive
27 January 2009
Vulnerabilities first published on this day (UTC), newest first.
44 results · Feed
-
Unscored —
Multiple buffer overflows in Ipswitch IMail before 2006.21 allow remote attackers or authenticated users to execute arb…
-
Unscored —
Format string vulnerability in BMC PATROL Agent before 3.7.30 allows remote attackers to execute arbitrary code via for…
-
Unscored —
The Backbone service (ftbackbone.exe) in EMC AutoStart before 5.3 SP2 allows remote attackers to execute arbitrary code…
-
Unscored —CVE-2009-0292 Public exploit
SQL injection vulnerability in show_cat2.php in SHOP-INET 4 allows remote attackers to execute arbitrary SQL commands v…
-
Unscored —CVE-2009-0299 Public exploit
SQL injection vulnerability in index.php in Groone GLinks 2.1 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2009-0291 Public exploit
Directory traversal vulnerability in fc.php in OpenX 2.6.3 allows remote attackers to include and execute arbitrary fil…
-
Unscored —CVE-2009-0297 Public exploit
SQL injection vulnerability in login_check.asp in ClickAuction allows remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2009-0295 Public exploit
SQL injection vulnerability in index.php in Information Technology Light Poll Information (ITLPoll) 2.7 Stable 2, when …
-
Unscored —CVE-2009-0298 Public exploit
Heap-based buffer overflow in MW6 Technologies Barcode ActiveX control (Barcode.MW6Barcode.1, Barcode.dll) 3.0.0.1 allo…
-
Unscored —CVE-2009-0301 Public exploit
Multiple insecure method vulnerabilities in the FlexCell.Grid ActiveX control (FlexCell.ocx) in FlexCell Grid Control 5…
-
Unscored —CVE-2009-0296 Public exploit
SQL injection vulnerability in shop_display_products.php in Script Toko Online 5.01 allows remote attackers to execute …
-
Unscored —CVE-2009-0302 Public exploit
SQL injection vulnerability in the Downloads module for PHP-Nuke 8.0 8.1.0.3.5b and earlier allows remote authenticated…
-
Unscored —CVE-2009-0304 Public exploit
The kernel in Sun Solaris 10 and 11 snv_101b, and OpenSolaris before snv_108, allows remote attackers to cause a denial…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Web Help Desk before 9.1.18 allows remote attackers to inject arbitrary web…
-
Unscored —CVE-2009-0294 Public exploit
Multiple PHP remote file inclusion vulnerabilities in WB News 2.0.1, when register_globals is enabled, allow remote att…
-
Unscored —
CUPS on Mandriva Linux 2008.0, 2008.1, 2009.0, Corporate Server (CS) 3.0 and 4.0, and Multi Network Firewall (MNF) 2.0 …
-
Unscored —CVE-2009-0293 Public exploit
SQL injection vulnerability in profile_view.php in Wazzum Dating Software, possibly 2.0, allows remote attackers to exe…
-
Unscored —
Directory traversal vulnerability in k23productions TFTPUtil GUI 1.2.0 and 1.3.0 allows remote attackers to read arbitr…
-
Unscored —
k23productions TFTPUtil GUI 1.2.0 and 1.3.0 allows remote attackers to cause a denial of service (service crash) via a …
-
Unscored —CVE-2009-0290 Public exploit
Directory traversal vulnerability in common.php in SIR GNUBoard 4.31.03 allows remote attackers to include and execute …
-
Unscored —CVE-2009-0279 Public exploit
SQL injection vulnerability in comentar.php in Pardal CMS 0.2.0 and earlier allows remote attackers to execute arbitrar…
-
Unscored —CVE-2009-0285 Public exploit
Cross-site scripting (XSS) vulnerability in error.asp in BBSXP 5.13 and earlier allows remote attackers to inject arbit…
-
Unscored —
SQL injection vulnerability in lib/patUser.php in KEEP Toolkit before 2.5.1 allows remote attackers to execute arbitrar…
-
Unscored —
Integer overflow in Ralink Technology USB wireless adapter (RT73) 3.08 for Windows, and other wireless card drivers inc…
-
Unscored —CVE-2009-0280 Public exploit
Asp Project Management 1.0 allows remote attackers to bypass authentication and gain administrative access by setting t…
-
Unscored —CVE-2009-0284 Public exploit
SQL injection vulnerability in category.php in Flax Article Manager 1.1 allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2009-0283 Public exploit
Cross-site scripting (XSS) vulnerability in err.asp in Oblog allows remote attackers to inject arbitrary web script or …
-
Unscored —CVE-2009-0286 Public exploit
Directory traversal vulnerability in upgrade/index.php in OpenGoo 1.1, when register_globals is enabled and magic_quote…
-
Unscored —CVE-2009-0281 Public exploit
SQL injection vulnerability in login.aspx in WarHound Walking Club allows remote attackers to execute arbitrary SQL com…
-
Unscored —
Sun Java System Application Server (AS) 8.1 and 8.2 allows remote attackers to read the Web Application configuration f…
-
Unscored —
Unspecified vulnerability in the kernel in OpenSolaris snv_100 through snv_102 on the Sun UltraSPARC T2 and T2+ sun4v p…
-
Unscored —CVE-2008-5969 Public exploit
SQL injection vulnerability in popupproduct.php in Sunbyte e-Flower allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2008-5971 Public exploit
Cross-site scripting (XSS) vulnerability in profile_social.php in i-Net Solution Orkut Clone allows remote authenticate…
-
Unscored —CVE-2008-5976 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in siteadmin/forgot.php in PHP JOBWEBSITE PRO allow remote attacker…
-
Unscored —CVE-2008-5974 Public exploit
Multiple SQL injection vulnerabilities in login.aspx in Active Price Comparison 4.0 allow remote attackers to execute a…
-
Unscored —CVE-2008-5981 Public exploit
PacPoll 4.0 stores sensitive information under the web root with insufficient access control, which allows remote attac…
-
Unscored —CVE-2008-5979 Public exploit
Cross-site scripting (XSS) vulnerability in default.asp in Ocean12 Mailing List Manager Gold allows remote attackers to…
-
Unscored —CVE-2008-5972 Public exploit
SQL injection vulnerability in default.asp in Active Business Directory 2 allows remote attackers to execute arbitrary …
-
Unscored —CVE-2008-5980 Public exploit
Ocean12 Mailing List Manager Gold stores sensitive data under the web root with insufficient access control, which allo…
-
Unscored —CVE-2008-5970 Public exploit
SQL injection vulnerability in profile_social.php in i-Net Solution Orkut Clone allows remote authenticated users to ex…