Archive
18 February 2009
Vulnerabilities first published on this day (UTC), newest first.
16 results · Feed
-
Unscored —CVE-2009-0645 Public exploit
Directory traversal vulnerability in index.php in Jaws 0.8.8 allows remote authenticated users to read arbitrary files …
-
Unscored —CVE-2009-0646 Public exploit
Multiple SQL injection vulnerabilities in 4Site CMS 2.6 and earlier allow remote attackers to execute arbitrary SQL com…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in (1) acid_qry_main.php in Analysis Console for Intrusion Database…
-
Unscored —
The HTTP interface in Swann DVR4-SecuraNet has a certain default administrative username and password, which makes it e…
-
Unscored —CVE-2008-6164 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in DreamCost HostAdmin 3.1.1 allows remote attackers to inject ar…
-
Unscored —CVE-2008-6163 Public exploit
SQL injection vulnerability in www/delivery/ac.php in OpenX 2.6.1 allows remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2008-6162 Public exploit
Bux.to Clone script allows remote attackers to bypass authentication and gain administrative access by setting the logg…
-
Unscored —CVE-2009-0641 Public exploit
sys_term.c in telnetd in FreeBSD 7.0-RELEASE and other 7.x versions deletes dangerous environment variables with a meth…
-
Unscored —
ext/openssl/ossl_ocsp.c in Ruby 1.8 and 1.9 does not properly check the return value from the OCSP_basic_verify functio…
-
Unscored —CVE-2009-0640 Public exploit
Directory traversal vulnerability in the administrative web server in Swann DVR4-SecuraNet allows remote attackers to r…
-
Unscored —CVE-2009-0643 Public exploit
Static code injection vulnerability in post.php in Simple PHP News 1.0 final allows remote attackers to inject arbitrar…
-
Unscored —
Semantically-Interconnected Online Communities (SIOC) 5.x before 5.x-1.2 and 6.x before 6.x-1.1, a module for Drupal, d…
-
Unscored —
Content Management Made Easy (CMME) 1.19 allows remote attackers to obtain system information via a direct request to i…
-
Unscored —
Cross-site scripting (XSS) vulnerability in WOW Raid Manager (WRM) before 3.5.1 allows remote attackers to inject arbit…
-
Unscored —CVE-2009-0639 Public exploit
PHP remote file inclusion vulnerability in moduli/libri/index.php in phpyabs 0.1.2 allows remote attackers to execute a…
-
Unscored —
Buffer overflow in SUSE blinux (aka sbl) in SUSE openSUSE 10.3 through 11.0 has unknown impact and attack vectors relat…