Archive
19 February 2009
Vulnerabilities first published on this day (UTC), newest first.
32 results · Feed
-
Unscored —CVE-2008-6193 Public exploit
Sam Crew MyBlog stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain s…
-
Unscored —CVE-2008-6194 EPSS 11%
Memory leak in the DNS server in Microsoft Windows allows remote attackers to cause a denial of service (memory consump…
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in EEBCMS 0.95 allows remote attackers to inject arbitrary web sc…
-
Unscored —CVE-2008-6180 Public exploit
SQL injection vulnerability in system/nlb_user.class.php in NewLife Blogger 3.0 and earlier, and possibly 3.3.1, allows…
-
Unscored —CVE-2008-6186 Public exploit
Stack-based buffer overflow in RaidenFTPD 2.4 build 3620 allows remote authenticated users to cause a denial of service…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in unspecified Portlets in Sun Java System Portal Server 7.0 and 7.…
-
Unscored —CVE-2008-6181 Public exploit
SQL injection vulnerability in the Mad4Joomla Mailforms (com_mad4joomla) component before 1.1.8.2 for Joomla! allows re…
-
Unscored —CVE-2008-6182 Public exploit
SQL injection vulnerability in the Ignite Gallery (com_ignitegallery) component 0.8.0 through 0.8.3 for Joomla! allows …
-
Unscored —CVE-2008-6179 Public exploit
SQL injection vulnerability in sug_cat.php in IndexScript 3.0 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2008-6188 Public exploit
SQL injection vulnerability in people/editprofile.php in Gforge 4.6 rc1 and earlier allows remote attackers to execute …
-
Unscored —CVE-2008-6187 Public exploit
SQL injection vulnerability in frs/shownotes.php in Gforge 4.5.19 and earlier allows remote attackers to execute arbitr…
-
Unscored —CVE-2008-6185 Public exploit
NoticeWare Email Server NG 5.1.2.2 allows remote attackers to cause a denial of service (crash) via multiple POP3 reque…
-
Unscored —
Conductor.exe in Intrinsic Swimage Encore before 5.0.1.21 contains a hardcoded password, which might allow local users …
-
Unscored —CVE-2008-6189 Public exploit
SQL injection vulnerability in GForge 4.5.19 allows remote attackers to execute arbitrary SQL commands via the offset p…
-
Unscored —CVE-2008-6183 Public exploit
Multiple directory traversal vulnerabilities in index.php in My PHP Indexer 1.0 allow remote attackers to read arbitrar…
-
Unscored —CVE-2008-6184 Public exploit
SQL injection vulnerability in the OwnBiblio (com_ownbiblio) component 1.5.3 for Joomla! allows remote attackers to exe…
-
Unscored —
dnscache in Daniel J. Bernstein djbdns 1.05 does not prevent simultaneous identical outbound DNS queries, which makes i…
-
Unscored —CVE-2008-6173 Public exploit
Cross-site scripting (XSS) vulnerability in fullscreen.php in ClipShare Pro 4.0 allows remote attackers to inject arbit…
-
Unscored —
Directory traversal vulnerability in captcha/captcha_image.php in the RWCards (com_rwcards) 3.0.11 component for Joomla…
-
Unscored —CVE-2008-6174 Public exploit
Cross-site scripting (XSS) vulnerability in admin/postlister/index.php in Jetbox CMS 2.1 allows remote attackers to inj…
-
Unscored —CVE-2008-6178 Public exploit
Unrestricted file upload vulnerability in editor/filemanager/browser/default/connectors/php/connector.php in FCKeditor …
-
Unscored —CVE-2008-6175 Public exploit
SilverSHielD 1.0.2.34 allows remote attackers to cause a denial of service (application crash) via a crafted argument t…
-
Unscored —CVE-2008-6177 Public exploit
Multiple directory traversal vulnerabilities in LightBlog 9.8, when magic_quotes_gpc is disabled, allow remote attacker…
-
Unscored —CVE-2009-0647 EPSS 17%
msnmsgr.exe in Windows Live Messenger (WLM) 2009 build 14.0.8064.206, and other 14.0.8064.x builds, allows remote attac…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in the manage_users handler in admin/index.php in Falt4 CMS …
-
Unscored —
Cross-site scripting (XSS) vulnerability in Drupal 5.x before 5.12 and 6.x before 6.6 allows remote authenticated users…
-
Unscored —CVE-2008-6167 Public exploit
Directory traversal vulnerability in search.php in miniPortail 2.2 and earlier allows remote attackers to include and e…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the Localization client 5.x before 5.x-1.1 and 6.x before 6.x-1.6 an…
-
Unscored —CVE-2008-6168 Public exploit
Cross-site scripting (XSS) vulnerability in search.php in miniPortail 2.2 and earlier allows remote attackers to inject…
-
Unscored —
includes/bootstrap.inc in Drupal 5.x before 5.12 and 6.x before 6.6, when the server is configured for "IP-based virtua…
-
Unscored —CVE-2008-6165 Public exploit
SQL injection vulnerability in gestion.php in CSPartner 0.1, when magic_quotes_gpc is disabled, allows remote attackers…
-
Unscored —CVE-2008-6166 Public exploit
SQL injection vulnerability in the KBase (com_kbase) 1.2 component for Joomla! allows remote attackers to execute arbit…