Archive
16 March 2009
Vulnerabilities first published on this day (UTC), newest first.
17 results · Feed
-
Unscored —CVE-2008-6478 Public exploit
Cross-site request forgery (CSRF) vulnerability in the file manager in the VZPP web interface for Parallels Virtuozzo 3…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in engine/modules/imagepreview.php in Datalife Engine 6.7 allows remote…
-
Unscored —CVE-2008-6479 Public exploit
Cross-site request forgery (CSRF) vulnerability in the "change password" feature in the VZPP web interface for Parallel…
-
Unscored —
Multiple unspecified vulnerabilities in DFLabs PTK 1.0.0 through 1.0.4 allow remote attackers to execute arbitrary comm…
-
Unscored —
Opera before 9.64 allows remote attackers to execute arbitrary code via a crafted JPEG image that triggers memory corru…
-
Unscored —
Cross-site scripting (XSS) vulnerability in DFLabs PTK 1.0.0 through 1.0.4 allows remote attackers to inject arbitrary …
-
Unscored —
Unspecified vulnerability in Opera before 9.64 has unknown impact and attack vectors, related to a "moderately severe i…
-
Unscored —CVE-2009-0919 EPSS 11%
XAMPP installs multiple packages with insecure default passwords, which makes it easier for remote attackers to obtain …
-
Unscored —
Opera before 9.64 allows remote attackers to conduct cross-domain scripting attacks via unspecified vectors related to …
-
Unscored —
The Servlet Engine/Web Container and JSP components in IBM WebSphere Application Server (WAS) 5.1.0, 5.1.1.19, 6.0.2 be…
-
Unscored —
Unspecified vulnerability in the keysock kernel module in Solaris 10 and OpenSolaris builds snv_01 through snv_108 allo…
-
Unscored —
perl-MDK-Common 1.1.11 and 1.1.24, 1.2.9 through 1.2.14, and possibly other versions, in Mandriva Linux does not proper…
-
Unscored —CVE-2008-6477 Public exploit
SQL injection vulnerability in Mumbo Jumbo Media OP4 allows remote attackers to execute arbitrary SQL commands via the …
-
Unscored —CVE-2008-6475 Public exploit
SQL injection vulnerability in the guestbook component (components/guestbook/guestbook.php) in Drake CMS 0.4.11 and ear…
-
Unscored —CVE-2008-6473 Public exploit
_blogadata/include/init_pass2.php in Blogator-script 0.95 allows remote attackers to change the password for arbitrary …
-
Unscored —
The management interface in F5 BIG-IP 9.4.3 allows remote authenticated users with Resource Manager privileges to injec…
-
Unscored —CVE-2008-6476 Public exploit
Cross-site scripting (XSS) vulnerability in blog/search.aspx in BlogEngine.NET allows remote attackers to inject arbitr…