Archive
6 February 2009
Vulnerabilities first published on this day (UTC), newest first.
50 results · Feed
-
Unscored —CVE-2008-6087 Public exploit
Cross-site scripting (XSS) vulnerability in topic.php in Camera Life 2.6.2b4 allows remote attackers to inject arbitrar…
-
Unscored —CVE-2008-6088 Public exploit
SQL injection vulnerability in the Joomtracker (com_joomtracker) 1.01 module for Joomla! allows remote attackers to exe…
-
Unscored —CVE-2008-6090 Public exploit
Directory traversal vulnerability in members.php in ScriptsEz Mini Hosting Panel allows remote attackers to read arbitr…
-
Unscored —CVE-2008-6086 Public exploit
SQL injection vulnerability in album.php in Camera Life 2.6.2b4 allows remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2008-6089 Public exploit
Directory traversal vulnerability in main.php in ScriptsEz Easy Image Downloader allows remote attackers to read arbitr…
-
Unscored —
webs.c in GoAhead WebServer before 2.1.4 allows remote attackers to cause a denial of service (NULL pointer dereference…
-
Unscored —
Unspecified vulnerability in GoAhead WebServer before 2.1.4 allows remote attackers to cause "incorrect behavior" via u…
-
Unscored —
GoAhead WebServer before 2.1.1 allows remote attackers to cause a denial of service (CPU consumption) by performing a s…
-
Unscored —
webs.c in GoAhead WebServer before 2.1.4 allows remote attackers to cause a denial of service (daemon crash) via an HTT…
-
Unscored —
The security handler in GoAhead WebServer before 2.1.1 allows remote attackers to bypass authentication and obtain acce…
-
Unscored —
The web interface in the Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge Module allows remote attackers…
-
Unscored —
Open redirect vulnerability in the web interface in the Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the web interface in the Rockwell Automation ControlLogix 1756-E…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the HTTP server in Cisco IOS 12.4(23) allows remote attackers to exe…
-
Unscored —CVE-2009-0470 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in the HTTP server in Cisco IOS 12.4(23) allow remote attackers to …
-
Unscored —
GoAhead WebServer before 2.1.6 allows remote attackers to cause a denial of service (NULL pointer dereference and daemo…
-
Unscored —
GoAhead WebServer before 2.1.5 on Windows 95, 98, and ME allows remote attackers to cause a denial of service (daemon c…
-
Unscored —CVE-2008-6075 Public exploit
SQL injection vulnerability in aspkat.asp in Bahar Download Script 2.0 allows remote attackers to execute arbitrary SQL…
-
Unscored —
Titan FTP Server 6.26 build 630 allows remote attackers to cause a denial of service (CPU consumption) via the SITE WHO…
-
Unscored —CVE-2008-6074 Public exploit
Directory traversal vulnerability in frame.php in phpcrs 2.06 and earlier, when magic_quotes_gpc is disabled, allows re…
-
Unscored —CVE-2008-6083 Public exploit
Directory traversal vulnerability in header.php in TXTshop beta 1.0 allows remote attackers to include and execute arbi…
-
Unscored —
imlib2 before 1.4.2 allows context-dependent attackers to have an unspecified impact via a crafted (1) ARGB, (2) BMP, (…
-
Unscored —CVE-2008-6078 Public exploit
SQL injection vulnerability in open.php in the Private Messaging (com_privmsg) component for Limbo CMS allows remote at…
-
Unscored —CVE-2008-6084 Public exploit
Unrestricted file upload vulnerability in pages/download.php in Iamma Simple Gallery 1.0 and 2.0 allows remote attacker…
-
Unscored —CVE-2008-6081 Public exploit
SQL injection vulnerability in contact.php in Simple Customer 1.2 allows remote attackers to execute arbitrary SQL comm…
-
Unscored —
Integer overflow in multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 20…
-
Unscored —CVE-2008-6077 Public exploit
SQL injection vulnerability in loudblog/ajax.php in LoudBlog 0.8.0a and earlier allows remote authenticated users to ex…
-
Unscored —
Directory traversal vulnerability in download.php in the ionFiles (com_ionfiles) 4.4.2 component for Joomla! allows rem…
-
Unscored —CVE-2008-6076 Public exploit
SQL injection vulnerability in the Daily Message (com_dailymessage) 1.0.3 component for Joomla! allows remote attackers…
-
Unscored —
Multiple unspecified vulnerabilities in GraphicsMagick before 1.1.14, and 1.2.x before 1.2.3, allow remote attackers to…
-
Unscored —
StorageCrypt 2.0.1 does not properly encrypt disks, which allows local users to obtain sensitive information via unspec…
-
Unscored —
SQL injection vulnerability in e107chat.php in the eChat plugin 4.2 for e107, when magic_quotes_gpc is disabled, allows…
-
Unscored —
Heap-based buffer overflow in the DecodeImage function in coders/pict.c in GraphicsMagick before 1.1.14, and 1.2.x befo…
-
Unscored —CVE-2008-6068 Public exploit
SQL injection vulnerability in the JoomlaDate (com_joomladate) component 1.2 for Joomla! allows remote attackers to exe…
-
Unscored —
Multiple heap-based buffer underflows in the ReadPALMImage function in coders/palm.c in GraphicsMagick before 1.2.3 all…
-
Unscored —CVE-2009-0461 Public exploit
Whole Hog Password Protect: Enhanced 1.x allows remote attackers to bypass authentication and obtain administrative acc…
-
Unscored —CVE-2009-0467 Public exploit
Cross-site scripting (XSS) vulnerability in proxy.html in Profense Web Application Firewall 2.6.2 and 2.6.3 allows remo…
-
Unscored —CVE-2009-0464 Public exploit
PHP remote file inclusion vulnerability in includes/header.php in Groone GBook 2.0 allows remote attackers to execute a…
-
Unscored —CVE-2009-0462 Public exploit
Multiple SQL injection vulnerabilities in customer_login_check.asp in ClickTech ClickCart 6.0 allow remote attackers to…
-
Unscored —CVE-2009-0459 Public exploit
Multiple SQL injection vulnerabilities in admin/login_submit.php in Whole Hog Password Protect: Enhanced 1.x allow remo…