Archive
10 March 2009
Vulnerabilities first published on this day (UTC), newest first.
19 results · Feed
-
Unscored —
Buffer overflow in the server in OpenTTD 0.6.1 and earlier allows remote authenticated users to cause a denial of servi…
-
Unscored —
Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506, including 3.0.2009.1301, does not properly handle a JBIG2…
-
Unscored —CVE-2009-0085 EPSS 15%
The Secure Channel (aka SChannel) authentication component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 S…
-
Unscored —
Stack-based buffer overflow in Foxit Reader 3.0 before Build 1506, including 1120 and 1301, allows remote attackers to …
-
Unscored —
The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 does not properly handle invalid pointers…
-
Unscored —
Buffer overflow in the client in IBM Tivoli Storage Manager (TSM) HSM 5.3.2.0 through 5.3.5.0, 5.4.0.0 through 5.4.2.5,…
-
Unscored —
Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506, including 1120 and 1301, does not require user confirmati…
-
Unscored —CVE-2009-0081 EPSS 32%
The graphics device interface (GDI) implementation in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server …
-
Unscored —
The NFSv4 Server module in the kernel in Sun Solaris 10, and OpenSolaris before snv_111, allow local users to cause a d…
-
High 7.8
The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 …
-
Unscored —
Cross-site scripting (XSS) vulnerability in the web user interface in the login application in NetMRI 3.0.1 and earlier…
-
Unscored —
CRLF injection vulnerability in the WebLink template in Fujitsu Jasmine2000 Enterprise Edition allows remote attackers …
-
Unscored —CVE-2009-0864 Public exploit
S-Cms 1.1 Stable allows remote attackers to bypass authentication and obtain administrative access via an OK value for …
-
Unscored —
Cross-site scripting (XSS) vulnerability in phpDenora before 1.2.3 allows remote attackers to inject arbitrary web scri…
-
Unscored —CVE-2009-0863 Public exploit
SQL injection vulnerability in admin/delete_page.php in S-Cms 1.1 Stable allows remote attackers to execute arbitrary S…
-
Unscored —
The HRM-S service in Fujitsu Enhanced Support Facility 3.0 and 3.0.1 allows remote attackers to obtain (1) hardware and…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the hook_cntrlr_error_output function in modules/page/hooks/listeners.php i…
-
Unscored —CVE-2009-0865 Public exploit
Directory traversal vulnerability in the SnapShotToFile method in the GeoVision LiveX (aka LiveX_v8200) ActiveX control…
-
Unscored —CVE-2009-0866 Public exploit
pHNews Alpha 1 stores sensitive information under the web root with insufficient access control, which allows remote at…