Archive
5 February 2009
Vulnerabilities first published on this day (UTC), newest first.
40 results · Feed
-
Unscored —CVE-2009-0453 Public exploit
Online Grades 3.2.4 allows remote attackers to obtain configuration information via a direct request to phpinfo.php, wh…
-
Unscored —CVE-2009-0443 Public exploit
Stack-based buffer overflow in Elecard AVC HD PLAYER 5.5.90116 allows remote attackers to execute arbitrary code via an…
-
Unscored —CVE-2009-0451 Public exploit
SQL injection vulnerability in Skalfa SkaLinks 1.5 allows remote attackers to execute arbitrary SQL commands via the Ad…
-
Unscored —CVE-2009-0452 Public exploit
Multiple SQL injection vulnerabilities in parents/login.php in Online Grades 3.2.4, when magic_quotes_gpc is disabled, …
-
Unscored —CVE-2009-0446 Public exploit
SQL injection vulnerability in photo.php in WEBalbum 2.4b allows remote attackers to execute arbitrary SQL commands via…
-
Unscored —CVE-2009-0449 Public exploit
Buffer overflow in klim5.sys in Kaspersky Anti-Virus for Workstations 6.0 and Anti-Virus 2008 allows local users to gai…
-
Unscored —CVE-2009-0448 Public exploit
Directory traversal vulnerability in admin/modules/aa/preview.php in Syntax Desktop 2.7 allows remote attackers to incl…
-
Unscored —CVE-2009-0441 Public exploit
PHP remote file inclusion vulnerability in skin_shop/standard/2_view_body/body_default.php in TECHNOTE 7.2, when regist…
-
Unscored —
Multiple SQL injection vulnerabilities in DMXReady Online Notebook Manager 1.1 allow remote attackers to execute arbitr…
-
Unscored —CVE-2009-0442 Public exploit
Directory traversal vulnerability in bbcode.php in PHPbbBook 1.3 and 1.3h allows remote attackers to include and execut…
-
Unscored —CVE-2009-0445 Public exploit
SQL injection vulnerability in index.php in Dreampics Gallery Builder allows remote attackers to execute arbitrary SQL …
-
Unscored —
Stack-based buffer overflow in BlazeVideo HDTV Player 3.5 and earlier allows remote attackers to execute arbitrary code…
-
Unscored —CVE-2009-0444 Public exploit
Multiple PHP remote file inclusion vulnerabilities in GRBoard 1.8, when register_globals is enabled and magic_quotes_gp…
-
Unscored —CVE-2009-0447 Public exploit
Multiple SQL injection vulnerabilities in default.asp in MyDesign Sayac 2.0 allow remote attackers to execute arbitrary…
-
Unscored —CVE-2008-6066 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Meet#Web 0.8 allow remote attackers to execute arbitrary PHP code…
-
Unscored —CVE-2008-6065 Public exploit
Oracle Database Server 10.1, 10.2, and 11g grants directory WRITE permissions for arbitrary pathnames that are aliased …
-
Unscored —CVE-2008-6064 Public exploit
Multiple SQL injection vulnerabilities in DomPHP 0.81 allow remote attackers to execute arbitrary SQL commands via the …
-
Unscored —CVE-2008-6061 Public exploit
Cross-site scripting (XSS) vulnerability in ActionScript in arbitrary Shockwave Flash (SWF) controller files created by…
-
Unscored —
Cross-site scripting (XSS) vulnerability in ActionScript in arbitrary Shockwave Flash (SWF) files created by Adobe Drea…
-
Unscored —CVE-2008-6060 Public exploit
Cross-site scripting (XSS) vulnerability in ActionScript in arbitrary Shockwave Flash (SWF) files created by InfoSoft F…
-
Unscored —CVE-2008-6063 EPSS 10%
Microsoft Word 2007, when the "Save as PDF" add-on is enabled, places an absolute pathname in the Subject field during …
-
Unscored —
Directory traversal vulnerability in the HP JetDirect web administration interface in the HP-ChaiSOE 1.0 embedded web s…
-
Unscored —
xml/XMLHttpRequest.cpp in WebCore in WebKit before r38566 does not properly restrict access from web pages to the (1) S…
-
Unscored —
Syslserve 1.058 and earlier, and probably 1.059, allows remote attackers to cause a denial of service (hang) via a craf…
-
Unscored —CVE-2009-0429 Public exploit
Multiple SQL injection vulnerabilities in Active Bids allow remote attackers to execute arbitrary SQL commands via the …
-
Unscored —
Cross-site scripting (XSS) vulnerability in sign1.php in AN Guestbook (ANG) before 0.7.7 allows remote attackers to inj…
-
Unscored —CVE-2009-0431 Public exploit
SQL injection vulnerability in Default.asp in LinksPro Standard Edition allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2009-0422 Public exploit
Dynamic variable evaluation vulnerability in lists/admin.php in phpList 2.10.8 and earlier, when register_globals is di…
-
Unscored —CVE-2009-0425 Public exploit
SQL injection vulnerability in index.php in Blue Eye CMS 1.0.0 and earlier allows remote attackers to execute arbitrary…
-
Unscored —CVE-2009-0426 Public exploit
SQL injection vulnerability in CategoryManager/upload_image_category.asp in DMXReady Classified Listings Manager 1.1 an…
-
Unscored —
Unspecified vulnerability in the Cisco Wireless LAN Controller (WLC), Cisco Catalyst 6500 Wireless Services Module (WiS…
-
Unscored —
Unspecified vulnerability in the Wireless LAN Controller (WLC) TSEC driver in the Cisco 4400 WLC, Cisco Catalyst 6500 a…
-
Unscored —CVE-2009-0423 Public exploit
Directory traversal vulnerability in index.php in Php Photo Album (PHPPA) 0.8 BETA allows remote attackers to include a…
-
Unscored —CVE-2009-0427 Public exploit
SQL injection vulnerability in CategoryManager/upload_image_category.asp in DMXReady Member Directory Manager 1.1 and e…
-
Unscored —
The Cisco Wireless LAN Controller (WLC), Cisco Catalyst 6500 Wireless Services Module (WiSM), and Cisco Catalyst 3750 I…
-
Unscored —CVE-2009-0430 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Active Bids allow remote attackers to inject arbitrary web scrip…
-
Unscored —CVE-2009-0420 Public exploit
SQL injection vulnerability in the RD-Autos (com_rdautos) 1.5.5 Stable component for Joomla! allows remote attackers to…
-
Unscored —CVE-2009-0428 Public exploit
SQL injection vulnerability in CategoryManager/upload_image_category.asp in DMXReady Secure Document Library 1.1 and ea…
-
Unscored —CVE-2009-0421 Public exploit
SQL injection vulnerability in the Eventing (com_eventing) 1.6.x component for Joomla! allows remote attackers to execu…
-
Unscored —
The Cisco Wireless LAN Controller (WLC), Cisco Catalyst 6500 Wireless Services Module (WiSM), and Cisco Catalyst 3750 I…