Archive
February 2009
Vulnerabilities first published in this month (UTC), newest first.
685 results · Feed
-
Unscored —
The HTTP interface in Swann DVR4-SecuraNet has a certain default administrative username and password, which makes it e…
-
Unscored —CVE-2008-6164 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in DreamCost HostAdmin 3.1.1 allows remote attackers to inject ar…
-
Unscored —CVE-2008-6163 Public exploit
SQL injection vulnerability in www/delivery/ac.php in OpenX 2.6.1 allows remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2008-6162 Public exploit
Bux.to Clone script allows remote attackers to bypass authentication and gain administrative access by setting the logg…
-
Unscored —CVE-2009-0641 Public exploit
sys_term.c in telnetd in FreeBSD 7.0-RELEASE and other 7.x versions deletes dangerous environment variables with a meth…
-
Unscored —
ext/openssl/ossl_ocsp.c in Ruby 1.8 and 1.9 does not properly check the return value from the OCSP_basic_verify functio…
-
Unscored —CVE-2009-0640 Public exploit
Directory traversal vulnerability in the administrative web server in Swann DVR4-SecuraNet allows remote attackers to r…
-
Unscored —CVE-2009-0643 Public exploit
Static code injection vulnerability in post.php in Simple PHP News 1.0 final allows remote attackers to inject arbitrar…
-
Unscored —
Semantically-Interconnected Online Communities (SIOC) 5.x before 5.x-1.2 and 6.x before 6.x-1.1, a module for Drupal, d…
-
Unscored —
Content Management Made Easy (CMME) 1.19 allows remote attackers to obtain system information via a direct request to i…
-
Unscored —
Cross-site scripting (XSS) vulnerability in WOW Raid Manager (WRM) before 3.5.1 allows remote attackers to inject arbit…
-
Unscored —CVE-2009-0639 Public exploit
PHP remote file inclusion vulnerability in moduli/libri/index.php in phpyabs 0.1.2 allows remote attackers to execute a…
-
Unscored —
Buffer overflow in SUSE blinux (aka sbl) in SUSE openSUSE 10.3 through 11.0 has unknown impact and attack vectors relat…
-
Unscored —
Unspecified vulnerability in the Performance Monitoring Infrastructure (PMI) feature in the Servlet Engine/Web Containe…
-
Unscored —CVE-2008-6157 Public exploit
SepCity Classified Ads stores the admin password in cleartext in data/classifieds.mdb, which allows context-dependent a…
-
Unscored —CVE-2008-6158 Public exploit
Multiple unspecified vulnerabilities in the admin backend in w3b>cms (aka w3blabor CMS) before 3.2.0 have unknown impac…
-
Unscored —CVE-2009-0611 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in qfsearch/AdminServlet in QuickFinder Server in Novell Open Enter…
-
Unscored —CVE-2009-0610 Public exploit
Multiple static code injection vulnerabilities in post.php in Simple PHP News 1.0 final allow remote attackers to injec…
-
Unscored —
Multiple buffer overflows in (a) BarnOwl before 1.0.5 and (b) owl 2.1.11 allow remote attackers to execute arbitrary co…
-
Unscored —
Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 3.x and InterScan Web Security Suite (IWSS) 3.x, when basi…
-
Unscored —
Sun Java System Directory Proxy Server in Sun Java System Directory Server Enterprise Edition 6.0 through 6.3, when a J…
-
Unscored —
Multiple integer overflows in malloc_leak.c in Bionic in Open Handset Alliance Android 1.0 have unknown impact and atta…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Samizdat before 0.6.2 allow remote authenticated users to inject…
-
Unscored —
The link_image function in linker/linker.c in the dynamic linker in Bionic in Open Handset Alliance Android 1.0 on the …
-
Unscored —
WSPolicy in the Web Services component in IBM WebSphere Application Server (WAS) 7.0.x before 7.0.0.1 does not properly…
-
Unscored —
Integer overflow in the showLog function in fake_log_device.c in liblog in Open Handset Alliance Android 1.0 allows att…
-
Unscored —
Trend Micro InterScan Web Security Suite (IWSS) 3.1 before build 1237 allows remote authenticated Auditor and Report On…
-
Unscored —
Stack consumption vulnerability in the do_page_fault function in arch/x86/mm/fault.c in the Linux kernel before 2.6.28.…
-
Unscored —
Wireshark 0.99.6 through 1.0.5 allows user-assisted remote attackers to cause a denial of service (application crash) v…
-
Unscored —CVE-2009-0602 Public exploit
Unrestricted file upload vulnerability in upload.php in WikkiTikkiTavi 1.11 allows remote attackers to execute arbitrar…
-
Unscored —CVE-2009-0604 Public exploit
SQL injection vulnerability in index.php in PHP Director 0.21 and earlier allows remote attackers to execute arbitrary …
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in the Link module 5.x-2.5 for Drupal 5.10 allows remote authenti…
-
Unscored —
Format string vulnerability in Wireshark 0.99.8 through 1.0.5 on non-Windows platforms allows local users to cause a de…
-
Unscored —
Buffer overflow in wiretap/netscreen.c in Wireshark 0.99.7 through 1.0.5 allows user-assisted remote attackers to cause…
-
Unscored —CVE-2008-6155 Public exploit
SQL injection vulnerability in index.php in Hispah Text Links Ads 1.1 allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2008-6156 Public exploit
SQL injection vulnerability in editCampaign.php in AdMan 1.1.20070907 allows remote authenticated users to execute arbi…
-
Unscored —CVE-2008-6154 Public exploit
SQL injection vulnerability in index.php in Hispah Text Links Ads 1.1 allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2008-6149 Public exploit
SQL injection vulnerability in the mDigg (com_mdigg) component 2.2.8 for Joomla! allows remote attackers to execute arb…
-
Unscored —CVE-2008-6152 Public exploit
SQL injection vulnerability in deptdisplay.asp in SepCity Faculty Portal allows remote attackers to execute arbitrary S…
-
Unscored —CVE-2008-6153 Public exploit
SQL injection vulnerability in Photo.asp in Jay Patel Pixel8 Web Photo Album 3.0 allows remote attackers to execute arb…