Archive
February 2009
Vulnerabilities first published in this month (UTC), newest first.
685 results · Feed
-
Unscored —CVE-2009-0527 Public exploit
PHP remote file inclusion vulnerability in plugins/rss_importer_functions.php in AdaptCMS Lite 1.4 allows remote attack…
-
Unscored —CVE-2009-0528 Public exploit
SQL injection vulnerability in frame.php in Rhadrix If-CMS 2.07 and earlier allows remote attackers to execute arbitrar…
-
Unscored —CVE-2009-0531 Public exploit
SQL injection vulnerability in gallery/view.asp in A Better Member-Based ASP Photo Gallery before 1.2 allows remote att…
-
Unscored —CVE-2009-0526 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in AdaptCMS Lite 1.4 allow remote attackers to inject …
-
Unscored —CVE-2008-6111 Public exploit
SQL injection vulnerability in blog.php in NetArt Media Vlog System 1.1 allows remote attackers to execute arbitrary SQ…
-
Unscored —
CRLF injection vulnerability in SocialEngine (SE) 2.7 and earlier allows remote attackers to inject arbitrary HTTP head…
-
Unscored —
SQL injection vulnerability in profile_comments.php in SocialEngine (SE) 2.7 and earlier allows remote attackers to exe…
-
Unscored —CVE-2008-6119 Public exploit
Static code injection vulnerability in gooplecms/admin/account/action/editpass.php in Goople CMS 1.7 allows remote atta…
-
Unscored —CVE-2008-6114 Public exploit
SQL injection vulnerability in product_details.php in the Mytipper Zogo-shop 1.15.4 plugin for e107 allows remote attac…
-
Unscored —CVE-2008-6117 Public exploit
SQL injection vulnerability in homepage.php in PG Job Site Pro allows remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2008-6122 Public exploit
The web management interface in Netgear WGR614v9 allows remote attackers to cause a denial of service (crash) via a req…
-
Unscored —CVE-2008-6118 Public exploit
win/content/upload.php in Goople CMS 1.7 allows remote attackers to bypass authentication and gain administrative acces…
-
Unscored —CVE-2008-6116 Public exploit
SQL injection vulnerability in the EXtrovert Software Thyme (com_thyme) 1.0 component for Joomla! allows remote attacke…
-
Unscored —CVE-2008-6115 Public exploit
SQL injection vulnerability in directory.php in Prozilla Hosting Index allows remote attackers to execute arbitrary SQL…
-
Unscored —
Cross-site scripting (XSS) vulnerability in SemanticScuttle before 0.90 allows remote attackers to inject arbitrary web…
-
Unscored —CVE-2008-6112 Public exploit
Multiple directory traversal vulnerabilities in Ez Ringtone Manager allow remote attackers to read arbitrary files via …
-
Unscored —
Unspecified vulnerability in SemanticScuttle before 0.90 has unknown impact and attack vectors related to improper vali…
-
Unscored —
Robin Rawson-Tetley Animal Shelter Manager (ASM) before 2.2.2 does not properly enforce the privileges of user accounts…
-
Unscored —
Eval injection vulnerability in index.php in phpSlash 0.8.1.1 and earlier allows remote attackers to execute arbitrary …
-
Unscored —CVE-2009-0514 Public exploit
Multiple directory traversal vulnerabilities in WebFrame 0.76 allow remote attackers to include and execute arbitrary l…
-
Unscored —CVE-2009-0515 Public exploit
Directory traversal vulnerability in check_lang.php in Yet Another NOCC (YANOCC) 0.1.0 and earlier allows remote attack…
-
Unscored —CVE-2009-0516 Public exploit
SQL injection vulnerability in the classified page (classified.php) in BusinessSpace 1.2 and earlier allows remote atta…
-
Unscored —CVE-2009-0513 Public exploit
Multiple PHP remote file inclusion vulnerabilities in WebFrame 0.76 allow remote attackers to execute arbitrary PHP cod…
-
Unscored —
Integer underflow in the Huffman decoding functionality (pvmp3_huffman_parsing.cpp) in OpenCORE 2.0 and earlier allows …
-
Unscored —CVE-2009-0455 Public exploit
Cross-site scripting (XSS) vulnerability in the anonymous comments feature in lib-comment.php in glFusion 1.1.0, 1.1.1,…
-
Unscored —
CRLF injection vulnerability in the WebContainer component in IBM WebSphere Application Server (WAS) 5.1.1.19 and earli…
-
Unscored —
Open redirect vulnerability in the ibm_security_logout servlet in IBM WebSphere Application Server (WAS) 5.1.1.19 and e…
-
Unscored —
PerfServlet in the PMI/Performance Tools component in IBM WebSphere Application Server (WAS) 6.0.x before 6.0.2.31, 6.1…
-
Unscored —
Unspecified vulnerability in IBM WebSphere Application Server (WAS) 5.1.x before 5.1.1.19, 6.0.x before 6.0.2.29, and 6…
-
Unscored —
Microsoft Internet Explorer 7, when XHTML strict mode is used, allows remote attackers to execute arbitrary code via th…
-
Unscored —CVE-2009-0098 EPSS 25%
Microsoft Exchange 2000 Server SP3, Exchange Server 2003 SP2, and Exchange Server 2007 SP1 do not properly interpret Tr…
-
Unscored —CVE-2009-0095 EPSS 23%
Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 does not properly validate object data in Visio files, which al…
-
Unscored —CVE-2009-0305 EPSS 19%
Multiple stack-based buffer overflows in the Research in Motion RIM AxLoader ActiveX control in AxLoader.ocx and AxLoad…
-
Unscored —
IBM WebSphere Application Server (WAS) 7 before 7.0.0.1 on Windows allows remote attackers to bypass "Authorization che…
-
Unscored —
The Installation Factory installation process for IBM WebSphere Application Server (WAS) 6.0.2 on Windows, when WAS is …
-
Unscored —
Microsoft Internet Explorer 7 does not properly handle errors during attempted access to deleted objects, which allows …
-
Unscored —
The (1) mod_ibm_ssl and (2) mod_cgid modules in IBM HTTP Server 6.0.x before 6.0.2.31 and 6.1.x before 6.1.0.19, as use…
-
Unscored —CVE-2009-0099 EPSS 26%
The Electronic Messaging System Microsoft Data Base (EMSMDB32) provider in Microsoft Exchange 2000 Server SP3 and Excha…
-
Unscored —CVE-2009-0097 EPSS 23%
Microsoft Office Visio 2002 SP2 and 2003 SP3 does not properly validate memory allocation for Visio files, which allows…
-
Unscored —
The installation process for the File Transfer servlet in the System Management/Repository component in IBM WebSphere A…