Archive
January 2009
Vulnerabilities first published in this month (UTC), newest first.
234 results · Clear filters · Feed
-
Unscored —CVE-2008-5947 Public exploit
PHP remote file inclusion vulnerability in include/class_yapbbcooker.php in YapBB 1.2.Beta 2 allows remote attackers to…
-
Unscored —CVE-2008-5946 Public exploit
SQL injection vulnerability in readmore.php in PHP-Fusion 4.01 allows remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2008-5945 Public exploit
Nukeviet 2.0 Beta allows remote attackers to bypass authentication and gain administrative access by setting the admf c…
-
Unscored —CVE-2008-5936 Public exploit
front-end/edit.php in mini-pub 0.3 and earlier allows remote attackers to read files and obtain PHP source code via a f…
-
Unscored —CVE-2008-5937 Public exploit
AyeView 2.20 allows user-assisted attackers to cause a denial of service (memory consumption or application crash) via …
-
Medium —
Apache Jackrabbit contains Cross-site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Apache Jackrabbit before 1.5.2 allow remote attackers to inject arbitrary web script or HTML via the q parameter to (1) search.jsp or (2) swr.jsp.
-
Unscored —CVE-2008-5921 Public exploit
SQL injection vulnerability in albums.php in Umer Inc Songs Portal allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2008-5922 Public exploit
Multiple PHP remote file inclusion vulnerabilities in themes/default/index.php in Cant Find A Gaming CMS (CFAGCMS) 1 al…
-
Unscored —CVE-2008-5931 Public exploit
The Net Guys ASPired2Blog stores sensitive information under the web root with insufficient access control, which allow…
-
Unscored —CVE-2008-5934 Public exploit
SQL injection vulnerability in index.php in CMS ISWEB 3.0 allows remote attackers to execute arbitrary SQL commands via…
-
Unscored —CVE-2008-5928 Public exploit
SQL injection vulnerability in redir.php in Free Links Directory Script (FLDS) 1.2a allows remote attackers to execute …
-
Unscored —CVE-2008-5930 Public exploit
SQL injection vulnerability in admin/blog_comments.asp in The Net Guys ASPired2Blog allows remote attackers to execute …
-
Unscored —CVE-2008-5932 Public exploit
CodeAvalanche FreeForum stores sensitive information under the web root with insufficient access control, which allows …
-
Unscored —CVE-2008-5929 Public exploit
VP-ASP Shopping Cart 6.50 stores sensitive information under the web root with insufficient access control, which allow…
-
Unscored —CVE-2008-5927 Public exploit
Multiple SQL injection vulnerabilities in admin/usercheck.php in FlexPHPNews 0.0.6 allow remote attackers to execute ar…
-
Unscored —CVE-2008-5933 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in CMS ISWEB 3.0 allow remote attackers to inject arbi…
-
Unscored —CVE-2008-5926 Public exploit
Multiple SQL injection vulnerabilities in login.asp in ASP-DEv Internal E-Mail System allow remote attackers to execute…
-
Unscored —CVE-2008-5923 Public exploit
SQL injection vulnerability in default.asp in ASP-DEv XM Events Diary allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2009-0241 Public exploit
Stack-based buffer overflow in the process_path function in gmetad/server.c in Ganglia 3.1.1 allows remote attackers to…
-
Unscored —CVE-2008-5919 Public exploit
Directory traversal vulnerability in rss.php in WebSVN 2.0 and earlier, when magic_quotes_gpc is disabled, allows remot…
-
Unscored —CVE-2008-5920 Public exploit
The create_anchors function in utils.inc in WebSVN 1.x allows remote attackers to execute arbitrary PHP code via a craf…
-
Unscored —CVE-2008-5918 Public exploit
Cross-site scripting (XSS) vulnerability in the getParameterisedSelfUrl function in index.php in WebSVN 2.0 and earlier…
-
Unscored —
The LaunchObj ActiveX control before 5.2.2.865 in launcher.dll in Symantec AppStream Client 5.2.x before 5.2.2 SP3 MP1 …
-
Unscored —
Buffer overflow in VUPlayer 2.49 and earlier allows user-assisted attackers to execute arbitrary code via a long URL in…
-
Unscored —CVE-2009-0175 Public exploit
Heap-based buffer overflow in Heathco Software MP3 TrackMaker 1.5 allows remote attackers to cause a denial of service …
-
Unscored —CVE-2009-0177 Public exploit
vmwarebase.dll, as used in the vmware-authd service (aka vmware-authd.exe), in VMware Workstation 6.5.1 build 126130, 6…
-
Unscored —
Stack-based buffer overflow in VUPlayer 2.49 allows remote attackers to execute arbitrary code via a long .asf URI in t…
-
Unscored —CVE-2008-3821 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in the HTTP server in Cisco IOS 11.0 through 12.4 allow remote atta…
-
Unscored —CVE-2009-0172 Public exploit
Unspecified vulnerability in IBM DB2 8 before FP17a, 9.1 before FP6a, and 9.5 before FP3a allows remote attackers to ca…
-
Unscored —CVE-2009-0134 Public exploit
Insecure method vulnerability in the EasyGrid.SGCtrl.32 ActiveX control in EasyGrid.ocx 1.0.0.1 in AAA EasyGrid ActiveX…
-
Unscored —CVE-2008-5904 Public exploit
The rdp_rdp_process_color_pointer_pdu function in rdp/rdp_rdp.c in xrdp 0.4.1 and earlier allows remote RDP servers to …
-
Unscored —
Buffer overflow in Microsoft HTML Help Workshop 4.74 and earlier allows context-dependent attackers to execute arbitrar…
-
Unscored —CVE-2009-0120 Public exploit
The IBM WebSphere DataPower XML Security Gateway XS40 with firmware 3.6.1.5 allows remote attackers to cause a denial o…
-
Unscored —CVE-2009-0121 Public exploit
SQL injection vulnerability in frontpage.php in Goople CMS 1.8.2 allows remote attackers to execute arbitrary SQL comma…
-
Unscored —
Microsoft Internet Information Services (IIS) 5.0 does not log requests that use the TRACK method, which allows remote …
-
Unscored —
Buffer overflow in Microsoft Windows XP SP3 allows remote attackers to cause a denial of service (memory corruption and…
-
Unscored —
Unspecified vulnerability in the Oracle BEA WebLogic Server Plugins for Apache, Sun and IIS web servers component in BE…
-
Unscored —
Unspecified vulnerability in the Oracle Spatial component in Oracle Database 10.1.0.5 and 10.2.0.2 allows remote authen…
-
Unscored —
Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attacker…
-
Unscored —
Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attacker…