Archive
26 February 2009
Vulnerabilities first published on this day (UTC), newest first.
43 results · Feed
-
Low —
Apache Tomcat information disclosure vulnerability
The doRead method in Apache Tomcat 4.1.32 through 4.1.34 and 5.5.10 through 5.5.20 does not return a -1 to indicate when a certain error condition has occurred, which can cause Tomcat to send POST content from one request to a different request.
-
Unscored —
SQL injection vulnerability in xt:Commerce before 3.0.4 Sp2.1, when magic_quotes_gpc is enabled and the SEO URLs are ac…
-
Unscored —CVE-2008-6306 Public exploit
Cross-site scripting (XSS) vulnerability in signinform.php in Softbiz Classifieds Script allows remote attackers to inj…
-
Unscored —CVE-2008-6302 Public exploit
TurnkeyForms Local Classifieds allows remote attackers to bypass authentication and gain administrative access via a di…
-
Unscored —CVE-2008-6305 Public exploit
PHP remote file inclusion vulnerability in init.php in Free Directory Script 1.1.1, when register_globals is enabled, a…
-
Unscored —CVE-2008-6303 Public exploit
SQL injection vulnerability in tourview.php in ToursManager allows remote attackers to execute arbitrary SQL commands v…
-
Unscored —CVE-2008-6307 Public exploit
E-topbiz Link Back Checker 1 allows remote attackers to bypass authentication and gain administrative access by setting…
-
Unscored —
Unspecified vulnerability in HP Virtual Rooms Client before 7.0.1, when running on Windows, allows remote attackers to …
-
Unscored —
Unspecified vulnerability in sISAPILocation before 1.0.2.2 allows remote attackers to bypass intended access restrictio…
-
Unscored —CVE-2008-6294 Public exploit
admin/Index.php in Acc Statistics 1.1 allows remote attackers to bypass authentication and gain administrative access b…
-
Unscored —CVE-2008-6297 Public exploit
Cross-site scripting (XSS) vulnerability in order.php in DHCart allows remote attackers to inject arbitrary web script …
-
Unscored —CVE-2008-6293 Public exploit
admin/Index.php in Acc Real Estate 4.0 allows remote attackers to bypass authentication and gain administrative access …
-
Unscored —CVE-2008-6289 Public exploit
SQL injection vulnerability in cityview.php in Tours Manager 1.0 allows remote attackers to execute arbitrary SQL comma…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Joomla! 1.5.7 and earlier allow remote authenticated users with …
-
Unscored —CVE-2008-6300 Public exploit
Galatolo WebManager 1.3a allows remote attackers to bypass authentication and gain administrative access by setting the…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Camera Life 2.6.2b8 allow remote attackers to inject arbitrary w…
-
Unscored —CVE-2008-6292 Public exploit
Acc Autos 4.0 allows remote attackers to bypass authentication and gain administrative access by setting the (1) userna…
-
Unscored —CVE-2008-6296 Public exploit
admin.php in Maran PHP Shop allows remote attackers to bypass authentication and gain administrative access by setting …
-
Unscored —CVE-2008-6301 Public exploit
SQL injection vulnerability in shoutbox_view.php in the Small ShoutBox module 1.4 for phpBB allows remote attackers to …
-
Unscored —CVE-2008-6290 Public exploit
Directory traversal vulnerability in includefile.php in nicLOR Sito, when register_globals is enabled or magic_quotes_g…
-
Unscored —CVE-2008-6291 Public exploit
Acc PHP eMail 1.1 allows remote attackers to bypass authentication and gain administrative access by setting the NEWSLE…
-
Unscored —
Multiple stack-based buffer overflows in the mt_codec::getHdrHead function in kernel/kls_hdr/fmt_codec_hdr.cpp in ksqui…
-
Unscored —
Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 does not properly remove references to destroyed obj…
-
Unscored —
Cisco ACE 4710 Application Control Engine Appliance before A1(8a) uses default (1) usernames and (2) passwords for (a) …
-
Unscored —
Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 on Windows allows remote attackers to trick a user i…
-
Unscored —
Unspecified vulnerability in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers be…
-
Unscored —
Unspecified vulnerability in the Settings Manager in Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87…
-
Unscored —
Cisco Application Networking Manager (ANM) before 2.0 uses a default MySQL root password, which makes it easier for rem…
-
Unscored —
Stack-based buffer overflow in Orbit Downloader 2.8.2 and 2.8.3, and possibly other versions before 2.8.5, allows remot…
-
Unscored —
Untrusted search path vulnerability in Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 on Linux allo…
-
Unscored —
Unspecified vulnerability in the Web Server in Cisco Unified MeetingPlace Web Conferencing 6.0 before 6.0(517.0) (aka 6…
-
Unscored —
Unspecified vulnerability in the Java agent in Cisco Application Networking Manager (ANM) before 2.0 Update A allows re…
-
Unscored —
IBM WebSphere Process Server (WPS) 6.1.2 before 6.1.2.3 and 6.2 before 6.2.0.1 does not properly restrict configuration…
-
Unscored —
Unspecified vulnerability in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers be…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Adobe RoboHelp 6 and 7, and RoboHelp Server 6 and 7, allows remote attacker…
-
Unscored —
Unspecified vulnerability in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers be…
-
Unscored —CVE-2009-0519 EPSS 15%
Unspecified vulnerability in Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 allows remote attackers…
-
Unscored —
The username command in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers and Cis…
-
Unscored —
Cisco Application Networking Manager (ANM) before 2.0 uses default usernames and passwords, which makes it easier for r…
-
Unscored —
Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers before A2(1.1) uses default (1)…