Archive
January 2009
Vulnerabilities first published in this month (UTC), newest first.
466 results · Feed
-
Unscored —CVE-2009-0244 EPSS 30%
Directory traversal vulnerability in the OBEX FTP Service in the Microsoft Bluetooth stack in Windows Mobile 6 Professi…
-
Medium —
Apache Jackrabbit contains Cross-site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Apache Jackrabbit before 1.5.2 allow remote attackers to inject arbitrary web script or HTML via the q parameter to (1) search.jsp or (2) swr.jsp.
-
Unscored —
Microsoft Windows does not properly enforce the Autorun and NoDriveTypeAutoRun registry values, which allows physically…
-
Unscored —
Integer signedness error in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (applicatio…
-
Unscored —
Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (applicat…
-
Unscored —
Buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termina…
-
Unscored —
Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (applicat…
-
Unscored —
Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (applicat…
-
Unscored —
Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (applicat…
-
Unscored —CVE-2008-5921 Public exploit
SQL injection vulnerability in albums.php in Umer Inc Songs Portal allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2008-5922 Public exploit
Multiple PHP remote file inclusion vulnerabilities in themes/default/index.php in Cant Find A Gaming CMS (CFAGCMS) 1 al…
-
Unscored —CVE-2008-5931 Public exploit
The Net Guys ASPired2Blog stores sensitive information under the web root with insufficient access control, which allow…
-
Unscored —CVE-2008-5934 Public exploit
SQL injection vulnerability in index.php in CMS ISWEB 3.0 allows remote attackers to execute arbitrary SQL commands via…
-
Unscored —CVE-2008-5928 Public exploit
SQL injection vulnerability in redir.php in Free Links Directory Script (FLDS) 1.2a allows remote attackers to execute …
-
Unscored —CVE-2008-5930 Public exploit
SQL injection vulnerability in admin/blog_comments.asp in The Net Guys ASPired2Blog allows remote attackers to execute …
-
Unscored —
Facto stores sensitive information under the web root with insufficient access control, which allows remote attackers t…
-
Unscored —CVE-2008-5932 Public exploit
CodeAvalanche FreeForum stores sensitive information under the web root with insufficient access control, which allows …
-
Unscored —
ASP-DEv XM Events Diary stores sensitive information under the web root with insufficient access control, which allows …
-
Unscored —CVE-2008-5929 Public exploit
VP-ASP Shopping Cart 6.50 stores sensitive information under the web root with insufficient access control, which allow…
-
Unscored —
SQL injection vulnerability in diary_viewC.asp in ASP-DEv XM Events Diary allows remote attackers to execute arbitrary …
-
Unscored —CVE-2008-5927 Public exploit
Multiple SQL injection vulnerabilities in admin/usercheck.php in FlexPHPNews 0.0.6 allow remote attackers to execute ar…
-
Unscored —CVE-2008-5933 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in CMS ISWEB 3.0 allow remote attackers to inject arbi…
-
Unscored —CVE-2008-5926 Public exploit
Multiple SQL injection vulnerabilities in login.asp in ASP-DEv Internal E-Mail System allow remote attackers to execute…
-
Unscored —CVE-2008-5923 Public exploit
SQL injection vulnerability in default.asp in ASP-DEv XM Events Diary allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2009-0241 Public exploit
Stack-based buffer overflow in the process_path function in gmetad/server.c in Ganglia 3.1.1 allows remote attackers to…
-
Unscored —CVE-2008-5919 Public exploit
Directory traversal vulnerability in rss.php in WebSVN 2.0 and earlier, when magic_quotes_gpc is disabled, allows remot…
-
Unscored —CVE-2008-5920 Public exploit
The create_anchors function in utils.inc in WebSVN 1.x allows remote attackers to execute arbitrary PHP code via a craf…
-
Unscored —CVE-2008-5918 Public exploit
Cross-site scripting (XSS) vulnerability in the getParameterisedSelfUrl function in index.php in WebSVN 2.0 and earlier…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the XSS filter (framework/Text_Filter/Filter/xss.php) in Horde Application …
-
Unscored —
gitweb/gitweb.perl in gitweb in Git 1.6.x before 1.6.0.6, 1.5.6.x before 1.5.6.6, 1.5.5.x before 1.5.5.6, 1.5.4.x befor…
-
Unscored —
Memory leak in the keyctl_join_session_keyring function (security/keys/keyctl.c) in Linux kernel 2.6.29-rc2 and earlier…
-
Unscored —
listing.php in WebSVN 2.0 and possibly 1.7 beta, when using an SVN authz file, allows remote authenticated users to rea…
-
Unscored —
The PDF distiller in the Attachment Service in Research in Motion (RIM) BlackBerry Enterprise Server (BES) 4.1.3 throug…
-
Unscored —
The LaunchObj ActiveX control before 5.2.2.865 in launcher.dll in Symantec AppStream Client 5.2.x before 5.2.2 SP3 MP1 …
-
Unscored —
Red Hat Certificate System 7.2 stores passwords in cleartext in the UserDirEnrollment log, the RA wizard installer log,…
-
Unscored —
Red Hat Certificate System 7.2 uses world-readable permissions for password.conf and unspecified other configuration fi…
-
Unscored —
An unspecified function in the JavaScript implementation in Apple Safari creates and exposes a "temporary footprint" wh…
-
Unscored —
An unspecified function in the JavaScript implementation in Microsoft Internet Explorer creates and exposes a "temporar…
-
Unscored —
The web interface in git (gitweb) 1.5.x before 1.5.5 allows remote attackers to execute arbitrary commands via shell me…
-
Unscored —
The Math.random function in the JavaScript implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4…