Archive
January 2009
Vulnerabilities first published in this month (UTC), newest first.
466 results · Feed
-
Unscored —CVE-2008-5895 Public exploit
SQL injection vulnerability in connection.php in Mediatheka 4.2 and earlier allows remote attackers to execute arbitrar…
-
Unscored —CVE-2008-5884 Public exploit
AyeView 2.20 allows user-assisted attackers to cause a denial of service (application crash) via a GIF file with a malf…
-
Unscored —CVE-2008-5899 Public exploit
CodeAvalanche FreeForAll stores sensitive information under the web root with insufficient access control, which allows…
-
Unscored —CVE-2008-5893 Public exploit
Cross-site scripting (XSS) vulnerability in admin_dblayers.asp in ClickAndEmail allows remote attackers to inject arbit…
-
Unscored —CVE-2008-5887 EPSS 11%
phplist before 2.10.8 allows remote attackers to include files via unknown vectors, related to a "local file include vu…
-
Unscored —
SQL injection vulnerability in login.asp in Citrix Application Gateway - Broadcast Server (BCS) before 6.1, as used by …
-
Unscored —CVE-2008-5881 Public exploit
Multiple directory traversal vulnerabilities in playSMS 0.9.3 allow remote attackers to include and execute arbitrary l…
-
Unscored —CVE-2009-0106 Public exploit
SQL injection vulnerability in profile.php in PHPAuctions (aka PHPAuctionSystem) allows remote attackers to execute arb…
-
Unscored —CVE-2009-0105 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in EZpack 4.2b2 allows remote attackers to inject arbitrary web s…
-
Unscored —CVE-2009-0113 Public exploit
Directory traversal vulnerability in attachmentlibrary.php in the XStandard component for Joomla! 1.5.8 and earlier all…
-
Unscored —CVE-2009-0110 Public exploit
SQL injection vulnerability in read.php in RiotPix 0.61 and earlier allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2009-0107 Public exploit
Cross-site scripting (XSS) vulnerability in profile.php in PHPAuctions (aka PHPAuctionSystem) allows remote attackers t…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in admin/agent_edit.asp in PollPro 3.0 allows remote attackers to creat…
-
Unscored —CVE-2009-0108 Public exploit
PHPAuctions (aka PHPAuctionSystem) allows remote attackers to bypass authentication and gain administrative access via …
-
Unscored —CVE-2009-0109 Public exploit
SQL injection vulnerability in index.php in RiotPix 0.61 and earlier allows remote attackers to execute arbitrary SQL c…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in playSMS 0.9.3 allow remote attackers to execute arbitrary PHP cod…
-
Unscored —CVE-2009-0104 Public exploit
SQL injection vulnerability in index.php in EZpack 4.2b2 allows remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2009-0111 Public exploit
SQL injection vulnerability in frontpage.php in Goople CMS 1.8.2 and earlier allows remote attackers to execute arbitra…
-
Unscored —
Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote at…
-
Unscored —
Multiple heap-based buffer overflows in the AddTab method in the (1) Tab and (2) CTab ActiveX controls in c1sizer.ocx a…
-
Unscored —
dnsserver in Cisco Application Control Engine Global Site Selector (GSS) before 3.0(1) allows remote attackers to cause…
-
Unscored —CVE-2008-5880 Public exploit
admin/auth.php in Gobbl CMS 1.0 allows remote attackers to bypass authentication and gain administrative access by sett…
-
Unscored —CVE-2008-5875 Public exploit
SQL injection vulnerability in the com_lowcosthotels component in the Hotel Booking Reservation System (aka HBS) for Jo…
-
Unscored —CVE-2008-5874 Public exploit
Multiple SQL injection vulnerabilities in the Hotel Booking Reservation System (aka HBS) for Joomla! allow remote attac…
-
Unscored —
Buffer overflow in Irrlicht before 1.5 allows remote attackers to cause a denial of service (crash) and possibly execut…
-
Unscored —CVE-2008-5877 Public exploit
Multiple SQL injection vulnerabilities in Phpclanwebsite (aka PCW) 1.23.3 Fix Pack 5 and earlier, when magic_quotes_gpc…
-
Unscored —CVE-2008-5878 Public exploit
Multiple directory traversal vulnerabilities in Phpclanwebsite (aka PCW) 1.23.3 Fix Pack 5 and earlier, when magic_quot…
-
Unscored —CVE-2008-5879 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Phpclanwebsite (aka PCW) 1.23.3 Fix Pack 5 and earlier, allows…
-
Unscored —CVE-2009-0071 Public exploit
Mozilla Firefox 3.0.5 and earlier 3.0.x versions, when designMode is enabled, allows remote attackers to cause a denial…
-
Unscored —CVE-2009-0070 Public exploit
Integer signedness error in Apple Safari allows remote attackers to read the contents of arbitrary memory locations, ca…
-
Unscored —
The smmsnmpd service in CA Service Metric Analysis r11.0 through r11.1 SP1 and Service Level Management 3.5 does not pr…
-
Unscored —
Microsoft Internet Explorer 6.0 through 8.0 beta2 allows remote attackers to cause a denial of service (application cra…
-
Unscored —
Multiple unspecified vulnerabilities in the UNIStim File Transfer Protocol (UFTP) processing in IP Client Manager (IPCM…
-
Unscored —CVE-2008-5873 Public exploit
Yerba SACphp 6.3 and earlier allows remote attackers to bypass authentication and gain administrative access via a gall…
-
Unscored —CVE-2008-5868 Public exploit
Stack-based buffer overflow in IntelliTamper 2.07 and 2.08 allows user-assisted attackers to execute arbitrary code via…
-
Unscored —CVE-2008-5870 Public exploit
FastStone Image Viewer 3.6 allows user-assisted attackers to cause a denial of service (application crash) via a malfor…
-
Unscored —CVE-2008-5869 Public exploit
Cross-site scripting (XSS) vulnerability in the Proxim Wireless Tsunami MP.11 2411 with firmware 3.0.3 allows remote au…
-
Unscored —
Nortel Multimedia Communication Server (MSC) 5100 3.0.13 does not verify credentials during call placement, which allow…
-
Unscored —
Directory traversal vulnerability in Yerba SACphp 6.3 allows remote attackers to read arbitrary files, and possibly hav…
-
Unscored —
The Proxim Wireless Tsunami MP.11 2411 with firmware 3.0.3 has public as its default SNMP read/write community, which m…