Archive
January 2009
Vulnerabilities first published in this month (UTC), newest first.
466 results · Feed
-
Unscored —CVE-2009-0337 Public exploit
SQL injection vulnerability in index.asp in Katy Whitton BlogIt! allows remote attackers to execute arbitrary SQL comma…
-
Unscored —CVE-2009-0327 Public exploit
SQL injection vulnerability in readbible.php in Free Bible Search PHP Script 1.0 allows remote attackers to execute arb…
-
Unscored —CVE-2009-0331 Public exploit
Directory traversal vulnerability in gallery/comment.php in Enhanced Simple PHP Gallery (ESPG) 1.72 allows remote attac…
-
Unscored —CVE-2009-0325 Public exploit
Directory traversal vulnerability in entries/index.php in Ninja Blog 4.8, when magic_quotes_gpc is disabled, allows rem…
-
Unscored —CVE-2009-0338 Public exploit
Cross-site scripting (XSS) vulnerability in inc_webblogmanager.asp in DMXReady Blog Manager allows remote attackers to …
-
Unscored —CVE-2009-0326 Public exploit
SQL injection vulnerability in login.php in Dark Age CMS 0.2c beta allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2009-0324 Public exploit
Multiple SQL injection vulnerabilities in BibCiter 1.4 allow remote attackers to execute arbitrary SQL commands via the…
-
Unscored —CVE-2009-0339 Public exploit
SQL injection vulnerability in inc_webblogmanager.asp in DMXReady Blog Manager allows remote attackers to execute arbit…
-
Unscored —
Multiple buffer overflows in the CheckUniqueName function in W3C Amaya Web Browser 10.0.1, and possibly other versions …
-
Unscored —
Multiple stack-based buffer overflows in W3C Amaya Web Browser 10.0 and 11.0 allow remote attackers to execute arbitrar…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Web Dynpro (WD) in the SAP NetWeaver portal, when Internet Explorer 7.0.573…
-
Unscored —
drivers/firmware/dell_rbu.c in the Linux kernel before 2.6.27.13, and 2.6.28.x before 2.6.28.2, allows local users to c…
-
Unscored —
Microsoft Windows XP, Server 2003 and 2008, and Vista exposes I/O activity measurements of all processes, which allows …
-
Unscored —
Unspecified vulnerability in the autofs module in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv_10…
-
Unscored —CVE-2009-0321 Public exploit
Apple Safari 3.2.1 (aka AppVer 3.525.27.1) on Windows allows remote attackers to cause a denial of service (infinite lo…
-
Unscored —
The GDTdiIcpt.sys driver in G DATA AntiVirus 2008, InternetSecurity 2008, and TotalCare 2008 populates kernel registers…
-
Unscored —CVE-2008-6002 Public exploit
Absolute path traversal vulnerability in sendfile.php in web-cp 0.5.7, when register_globals is enabled, allows remote …
-
Unscored —CVE-2008-6003 Public exploit
SQL injection vulnerability in sellers_othersitem.php in AJ Auction Pro Platinum 2 allows remote attackers to execute a…
-
Unscored —CVE-2008-6004 Public exploit
Cross-site scripting (XSS) vulnerability in search.php in AJ Auction Pro Platinum 2 allows remote attackers to inject a…
-
Unscored —CVE-2008-6001 Public exploit
index.php in ADN Forum 1.0b and earlier allows remote attackers to bypass authentication and gain sysop access via a fp…
-
Unscored —CVE-2008-5989 Public exploit
Directory traversal vulnerability in defs.php in PHPcounter 1.3.2 and earlier, when magic_quotes_gpc is disabled, allow…
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in Check Point Connectra NGX R62 HFA_01 allows remote attackers t…
-
Unscored —CVE-2008-5993 Public exploit
Directory traversal vulnerability in image.php in Barcode Generator 1D (barcodegen) 2.0.0 and earlier allows remote att…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Ajax Checklist module 5.x before 5.x-1.1 for Drupal allows remote authe…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the freeCap CAPTCHA (sr_freecap) extension before 1.0.4 for TYPO3 allows re…
-
Unscored —CVE-2008-5988 Public exploit
SQL injection vulnerability in scripts/recruit_details.php in Jadu CMS for Government allows remote attackers to execut…
-
Unscored —CVE-2008-5997 Public exploit
Absolute path traversal vulnerability in admin/fileKontrola/browser.asp in Omnicom Content Platform (OCP) 2.0 allows re…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Simplenews module 5.x before 5.x-1.5 and 6.x before 6.x-1.0-beta4, a mo…
-
Unscored —CVE-2008-5991 Public exploit
Directory traversal vulnerability in docs.php in MailWatch for MailScanner 1.0.4 and earlier allows remote attackers to…
-
Unscored —CVE-2008-5992 Public exploit
Multiple SQL injection vulnerabilities in Jetik Emlak Sistem A (ESA) 2.0 allow remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2008-5990 Public exploit
Directory traversal vulnerability in connect/init.inc in emergecolab 1.0 allows remote attackers to include and execute…
-
Unscored —CVE-2008-5998 Public exploit
Multiple SQL injection vulnerabilities in the ajax_checklist_save function in the Ajax Checklist module 5.x before 5.x-…
-
Unscored —
Untrusted search path vulnerability in the Python interface in Eye of GNOME (eog) 2.22.3, and possibly other versions, …
-
Unscored —
Untrusted search path vulnerability in the Python plugin in Dia 0.96.1, and possibly other versions, allows local users…
-
Unscored —
Untrusted search path vulnerability in the Python interface in Epiphany 2.22.3, and possibly other versions, allows loc…
-
Unscored —
Untrusted search path vulnerability in the (1) "VST plugin with Python scripting" and (2) "VST plugin for writing score…
-
Unscored —
Untrusted search path vulnerability in the Python module in gedit allows local users to execute arbitrary code via a Tr…
-
Unscored —
Untrusted search path vulnerability in the Python language bindings for Nautilus (nautilus-python) allows local users t…
-
Unscored —
Untrusted search path vulnerability in the GObject Python interpreter wrapper in Gnumeric allows local users to execute…
-
Unscored —
Untrusted search path vulnerability in src/if_python.c in the Python interface in Vim before 7.2.045 allows local users…