Archive
10 February 2009
Vulnerabilities first published on this day (UTC), newest first.
40 results · Feed
-
Unscored —
CRLF injection vulnerability in the WebContainer component in IBM WebSphere Application Server (WAS) 5.1.1.19 and earli…
-
Unscored —
Open redirect vulnerability in the ibm_security_logout servlet in IBM WebSphere Application Server (WAS) 5.1.1.19 and e…
-
Unscored —
PerfServlet in the PMI/Performance Tools component in IBM WebSphere Application Server (WAS) 6.0.x before 6.0.2.31, 6.1…
-
Unscored —
Unspecified vulnerability in IBM WebSphere Application Server (WAS) 5.1.x before 5.1.1.19, 6.0.x before 6.0.2.29, and 6…
-
Unscored —
Microsoft Internet Explorer 7, when XHTML strict mode is used, allows remote attackers to execute arbitrary code via th…
-
Unscored —CVE-2009-0098 EPSS 25%
Microsoft Exchange 2000 Server SP3, Exchange Server 2003 SP2, and Exchange Server 2007 SP1 do not properly interpret Tr…
-
Unscored —CVE-2009-0095 EPSS 23%
Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 does not properly validate object data in Visio files, which al…
-
Unscored —CVE-2009-0305 EPSS 19%
Multiple stack-based buffer overflows in the Research in Motion RIM AxLoader ActiveX control in AxLoader.ocx and AxLoad…
-
Unscored —
IBM WebSphere Application Server (WAS) 7 before 7.0.0.1 on Windows allows remote attackers to bypass "Authorization che…
-
Unscored —
The Installation Factory installation process for IBM WebSphere Application Server (WAS) 6.0.2 on Windows, when WAS is …
-
Unscored —
Microsoft Internet Explorer 7 does not properly handle errors during attempted access to deleted objects, which allows …
-
Unscored —
The (1) mod_ibm_ssl and (2) mod_cgid modules in IBM HTTP Server 6.0.x before 6.0.2.31 and 6.1.x before 6.1.0.19, as use…
-
Unscored —CVE-2009-0099 EPSS 26%
The Electronic Messaging System Microsoft Data Base (EMSMDB32) provider in Microsoft Exchange 2000 Server SP3 and Excha…
-
Unscored —CVE-2009-0097 EPSS 23%
Microsoft Office Visio 2002 SP2 and 2003 SP3 does not properly validate memory allocation for Visio files, which allows…
-
Unscored —
The installation process for the File Transfer servlet in the System Management/Repository component in IBM WebSphere A…
-
Unscored —
Unspecified vulnerability in the IBM Asynchronous I/O (aka AIO or libibmaio) library in the Java Message Service (JMS) …
-
Unscored —CVE-2009-0096 EPSS 23%
Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 does not properly perform memory copy operations for object dat…
-
Unscored —
Cross-site scripting (XSS) vulnerability in IBM Workplace for Business Controls and Reporting 2.x and IBM Workplace Web…
-
Unscored —
The (1) sys32_mremap function in arch/sparc64/kernel/sys_sparc32.c, the (2) sparc_mmap_check function in arch/sparc/ker…
-
Unscored —
Cross-site scripting (XSS) vulnerability in result.php in Galatolo WebManager (GWM) 1.0 allows remote attackers to inje…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in IBM Workplace for Business Controls and Reporting 2.x and IBM Workpl…
-
Unscored —CVE-2008-6099 Public exploit
PHP remote file inclusion vulnerability in index.php in RPortal 1.1 and earlier allows remote attackers to execute arbi…
-
Unscored —CVE-2008-6103 Public exploit
PHP remote file inclusion vulnerability in index.php in A4Desk Event Calendar, when magic_quotes_gpc is disabled, allow…
-
Unscored —CVE-2008-6102 Public exploit
SQL injection vulnerability in ratelink.php in Link Trader Script allows remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2008-6101 Public exploit
SQL injection vulnerability in click.php in Adult Banner Exchange Website allows remote attackers to execute arbitrary …
-
Unscored —CVE-2008-6100 Public exploit
Multiple SQL injection vulnerabilities in Discussion Forums 2k 3.3, when magic_quotes_gpc is disabled, allow remote att…
-
Unscored —CVE-2008-6104 Public exploit
SQL injection vulnerability in A4Desk PHP Event Calendar allows remote attackers to execute arbitrary SQL commands via …
-
Unscored —
Cross-site scripting (XSS) vulnerability in blocks/html/block_html.php in Snoopy 1.2.3, as used in Moodle 1.6 before 1.…
-
Unscored —
Unspecified vulnerability in the Calendar export feature in Moodle 1.8 before 1.8.8 and 1.9 before 1.9.4 allows attacke…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the forum code in Moodle 1.7 before 1.7.7, 1.8 before 1.8.8, and 1.9…
-
Unscored —
Cross-site scripting (XSS) vulnerability in course/lib.php in Moodle 1.6 before 1.6.9, 1.7 before 1.7.7, 1.8 before 1.8…
-
Unscored —CVE-2009-0491 Public exploit
Stack-based buffer overflow in Elecard MPEG Player 5.5 build 15884.081218 allows remote attackers to execute arbitrary …
-
Unscored —CVE-2009-0497 Public exploit
Directory traversal vulnerability in log.jsp in Ignite Realtime Openfire 3.6.2 allows remote attackers to read arbitrar…
-
Unscored —
Stack-based buffer overflow in the String_parse::get_nonspace_quoted function in lib-src/allegro/strparse.cpp in Audaci…
-
Unscored —CVE-2009-0496 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Ignite Realtime Openfire 3.6.2 allow remote attackers to inject …
-
Unscored —
Unspecified vulnerability in SimpleIrcBot before 1.0 Stable has unknown impact and attack vectors related to an "auth v…
-
Unscored —CVE-2009-0498 Public exploit
Virtual GuestBook (vgbook) 2.1 stores sensitive information under the web root with insufficient access control, which …
-
Unscored —CVE-2009-0494 Public exploit
SQL injection vulnerability in the Portfol (com_portfol) 1.2 component for Joomla! allows remote attackers to execute a…
-
Unscored —CVE-2009-0493 Public exploit
SQL injection vulnerability in login.php in IT!CMS 2.1a and earlier allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2009-0495 Public exploit
PHP remote file inclusion vulnerability in include/define.php in REALTOR 747 4.11 allows remote attackers to execute ar…