Archive

5 March 2009

Vulnerabilities first published on this day (UTC), newest first.

← February 2009 2009 / March /5 April 2009 →

All Critical High Medium Low Exploited only Public exploit

32 results · Feed

Unscored —

CVE-2008-6399

Unspecified vulnerability in DotNetNuke 4.5.2 through 4.9 allows remote attackers to "add additional roles to their use…

Mar 5, 2009
Unscored —

CVE-2008-6400

Cross-site scripting (XSS) vulnerability in refbase before 0.9.5 allows remote attackers to inject arbitrary web script…

Mar 5, 2009
Unscored —

CVE-2009-0828 Public exploit

QuoteBook stores quotes.inc under the web root with insufficient access control, which allows remote attackers to obtai…

Mar 5, 2009
Unscored —

CVE-2009-0833 Public exploit

Heap-based buffer overflow in gen_msn.dll in the gen_msn plugin 0.31 for Winamp 5.541 allows remote attackers to execut…

Mar 5, 2009
Unscored —

CVE-2009-0832 Public exploit

SQL injection vulnerability in items.php in the E-Cart module 1.3 for PHP-Fusion allows remote attackers to execute arb…

Mar 5, 2009
Unscored —

CVE-2009-0831 Public exploit

SQL injection vulnerability in members.php in the Members CV (job) module 1.0 for PHP-Fusion, when magic_quotes_gpc is …

Mar 5, 2009
Unscored —

CVE-2009-0826 Public exploit

BlogHelper stores common_db.inc under the web root with insufficient access control, which allows remote attackers to d…

Mar 5, 2009
Unscored —

CVE-2009-0830

Cross-site scripting (XSS) vulnerability in QuoteBook allows remote attackers to inject arbitrary web script or HTML vi…

Mar 5, 2009
Unscored —

CVE-2009-0827 Public exploit

PollHelper stores poll.inc under the web root with insufficient access control, which allows remote attackers to downlo…

Mar 5, 2009
Unscored —

CVE-2009-0829 Public exploit

Multiple SQL injection vulnerabilities in QuoteBook allow remote attackers to execute arbitrary SQL commands via the (1…

Mar 5, 2009
Unscored —

CVE-2009-0186

Integer overflow in libsndfile 1.0.18, as used in Winamp and other products, allows context-dependent attackers to exec…

libsndfile Debian

Mar 5, 2009
Unscored —

CVE-2009-0817

Cross-site scripting (XSS) vulnerability in the Protected Node module 5.x before 5.x-1.4 and 6.x before 6.x-1.5, a modu…

Web / CMS

Mar 5, 2009
Unscored —

CVE-2009-0771

The layout engine in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows remote atta…

Mar 5, 2009
Unscored —

CVE-2009-0365

nm-applet.conf in GNOME NetworkManager before 0.7.0.99 contains an incorrect deny setting, which allows local users to …

network-manager network-manager-applet Debian

Mar 5, 2009
Unscored —

CVE-2009-0774

The layout engine in Mozilla Firefox 2 and 3 before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows rem…

Mar 5, 2009
Unscored —

CVE-2009-0819 Public exploit EPSS 10%

sql/item_xmlfunc.cc in MySQL 5.1 before 5.1.32 and 6.0 before 6.0.10 allows remote authenticated users to cause a denia…

Mar 5, 2009
Unscored —

CVE-2009-0773

The JavaScript engine in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows remote …

Mar 5, 2009
Unscored —

CVE-2009-0814 Public exploit

Cross-site scripting (XSS) vulnerability in Widgets.aspx in Blogsa 1.0 Beta 3 and earlier allows remote attackers to in…

Mar 5, 2009
Unscored —

CVE-2009-0772

The layout engine in Mozilla Firefox 2 and 3 before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows rem…

Mar 5, 2009
Medium —

CVE-2009-0816

Typo3 Backend XSS Vulnerability

Multiple cross-site scripting (XSS) vulnerabilities in the backend user interface in TYPO3 3.3.x through 3.8.x, 4.0 before 4.0.12, 4.1 before 4.1.10, 4.2 before 4.2.6, and 4.3alpha1 allow remote attackers to inject arbitrary web script or HTML via unspecified…

typo3/cms Packagist

Mar 5, 2009
Unscored —

CVE-2009-0776

nsIRDFService in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allows remote a…

Mar 5, 2009
Medium —

CVE-2009-0815 Public exploit EPSS 42%

TYPO3 leaks a hash secret in an error message

The jumpUrl mechanism in class.tslib_fe.php in TYPO3 3.3.x through 3.8.x, 4.0 before 4.0.12, 4.1 before 4.1.10, 4.2 before 4.2.6, and 4.3alpha1 leaks a hash secret (juHash) in an error message, which allows remote attackers to read arbitrary files by includin…

typo3/cms Packagist

Mar 5, 2009
Unscored —

CVE-2009-0367 Public exploit EPSS 11%

The Python AI module in Wesnoth 1.4.x and 1.5 before 1.5.11 allows remote attackers to escape the sandbox and execute a…

Mar 5, 2009
Unscored —

CVE-2009-0578

GNOME NetworkManager before 0.7.0.99 does not properly verify privileges for dbus (1) modify and (2) delete requests, w…

network-manager-applet Debian

Mar 5, 2009
Unscored —

CVE-2009-0777

Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 decode invisible characters when…

Mar 5, 2009
Unscored —

CVE-2009-0037 Public exploit

The redirect implementation in curl and libcurl 5.11 through 7.19.3, when CURLOPT_FOLLOWLOCATION is enabled, accepts ar…

curl Debian

Mar 5, 2009
Unscored —

CVE-2009-0619

Unspecified vulnerability in the Session Border Controller (SBC) before 3.0(2) for Cisco 7600 series routers allows rem…

Mar 5, 2009
Unscored —

CVE-2009-0775

Double free vulnerability in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 all…

Mar 5, 2009
Unscored —

CVE-2009-0813 Public exploit

Insecure method vulnerability in the ImeraIEPlugin ActiveX control (ImeraIEPlugin.dll 1.0.2.54) in Imera TeamLinks Clie…

Mar 5, 2009
Unscored —

CVE-2009-0820 Public exploit

Multiple eval injection vulnerabilities in phpScheduleIt before 1.2.11 allow remote attackers to execute arbitrary code…

Mar 5, 2009
Unscored —

CVE-2009-0821 Public exploit

Mozilla Firefox 2.0.0.20 and earlier allows remote attackers to cause a denial of service (application crash) via neste…

Mar 5, 2009
Unscored —

CVE-2009-0818

Cross-site scripting (XSS) vulnerability in the taxonomy_theme_admin_table_builder function (taxonomy_theme_admin.inc) …

Web / CMS

Mar 5, 2009