Archive
March 2009
Vulnerabilities first published in this month (UTC), newest first.
259 results · Clear filters · Feed
-
Unscored —CVE-2009-1092 Public exploit
Use-after-free vulnerability in the LIVEAUDIO.LiveAudioCtrl.1 ActiveX control in LIVEAU~1.OCX 7.0 for GeoVision DVR sys…
-
Unscored —
Stack-based buffer overflow in the GetXMLValue method in the IBM Access Support ActiveX control in IbmEgath.dll, as dis…
-
Unscored —
Stack-based buffer overflow in OvCgi/Toolbar.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allo…
-
Unscored —CVE-2009-1064 Public exploit
Argument injection vulnerability in orbitmxt.dll 2.1.0.2 in the Orbit Downloader 2.8.7 and earlier ActiveX control allo…
-
Unscored —CVE-2009-1067 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Pixie CMS 1.01a allows remote attackers to inject arbitrary we…
-
Unscored —CVE-2009-1063 Public exploit
Buffer overflow in eXeScope 6.50 allows user-assisted remote attackers to execute arbitrary code via a crafted executab…
-
Unscored —CVE-2009-1070 Public exploit
Cross-site scripting (XSS) vulnerability in system/index.php in ExpressionEngine 1.6.4 through 1.6.6, and possibly earl…
-
Unscored —CVE-2009-1041 Public exploit
The ktimer feature (sys/kern/kern_time.c) in FreeBSD 7.0, 7.1, and 7.2 allows local users to overwrite arbitrary kernel…
-
Unscored —CVE-2009-1066 Public exploit
SQL injection vulnerability in the referral function in admin/lib/lib_logs.php in Pixie CMS 1.01a allows remote attacke…
-
Unscored —CVE-2009-1071 Public exploit
Stack-based buffer overflow in Icarus 2.0 allows remote attackers to cause a denial of service (application crash) or e…
-
Unscored —
Stack-based buffer overflow in BS.Player (bsplayer) 2.32 Build 975 Free and 2.34 Build 980 PRO and earlier allows remot…
-
Unscored —CVE-2008-6515 Public exploit
Cross-site scripting (XSS) vulnerability in Fritz Berger yet another php photo album - next generation (yappa-ng) allow…
-
Unscored —CVE-2008-6513 Public exploit
Unrestricted file upload vulnerability in saa.php in Andy's PHP Knowledgebase (aphpkb) 0.92.9 allows remote attackers t…
-
Unscored —CVE-2009-1059 Public exploit
Stack-based buffer overflow in Trident PowerZip 7.2 might allow remote attackers to execute arbitrary code via a crafte…
-
Unscored —CVE-2009-1058 Public exploit
Stack-based buffer overflow in ZipGenius might allow remote attackers to execute arbitrary code via a crafted .zip file…
-
Unscored —CVE-2009-1050 Public exploit
Bloginator 1A allows remote attackers to bypass authentication and gain administrative access by setting the identifyYo…
-
Unscored —CVE-2009-1049 Public exploit
SQL injection vulnerability in articleCall.php in Bloginator 1A allows remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2009-1057 Public exploit
MicroSmarts Enterprise ZipItFast! 3.0 allows remote attackers to execute arbitrary code via a crafted .zip file that tr…
-
Unscored —CVE-2008-6510 Public exploit
Cross-site scripting (XSS) vulnerability in login.jsp in the Admin Console in Openfire 3.6.0a and earlier allows remote…
-
Unscored —CVE-2008-6511 Public exploit
Open redirect vulnerability in login.jsp in Openfire 3.6.0a and earlier allows remote attackers to redirect users to ar…
-
Unscored —
Directory traversal vulnerability in the AuthCheck filter in the Admin Console in Openfire 3.6.0a and earlier allows re…
-
Unscored —CVE-2008-6509 Public exploit
SQL injection vulnerability in CallLogDAO in SIP Plugin in Openfire 3.6.0a and earlier allows remote attackers to execu…
-
Unscored —CVE-2009-1046 Public exploit
The console selection feature in the Linux kernel 2.6.28 before 2.6.28.4, 2.6.25, and possibly earlier versions, when t…
-
Unscored —CVE-2009-1045 Public exploit
requests/status.xml in VLC 0.9.8a allows remote attackers to cause a denial of service (stack consumption and crash) vi…
-
Medium —
Apache Struts directory traversal vulnerability
Multiple directory traversal vulnerabilities in Apache Struts 2.0.x before 2.0.12 and 2.1.x before 2.1.3 allow remote attackers to read arbitrary files via a ..%252f (encoded dot dot slash) in a URI with a /struts/ path, related to (1) FilterDispatcher in 2.0…
-
Medium —
Improper Input Validation in OpenSymphony XWork
ParametersInterceptor in OpenSymphony XWork 2.0.x before 2.0.6 and 2.1.x before 2.1.2, as used in Apache Struts and other products, does not properly restrict # (pound sign) references to context objects, which allows remote attackers to execute Object-Graph …
-
Unscored —CVE-2008-6501 Public exploit
Cross-site scripting (XSS) vulnerability in profiles/index.php in Pro Chat Rooms 3.0.2 allows remote attackers to injec…
-
Unscored —CVE-2008-6502 Public exploit
Directory traversal vulnerability in Pro Chat Rooms 3.0.2 allows remote authenticated users to select an arbitrary loca…
-
Unscored —CVE-2008-6503 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in PrestaShop 1.1.0.3 allow remote attackers to inject arbitrary we…
-
Unscored —CVE-2008-6500 Public exploit
Cross-site scripting (XSS) vulnerability in CodeToad ASP Shopping Cart Script allows remote attackers to inject arbitra…
-
Unscored —CVE-2009-1040 Public exploit
Buffer overflow in WinAsm Studio 5.1.5.0 allows user-assisted remote attackers to execute arbitrary code via a crafted …
-
Unscored —CVE-2009-1033 Public exploit
SQL injection vulnerability in misc.php in DeluxeBB 1.3 and earlier allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2009-1038 Public exploit
Multiple SQL injection vulnerabilities in YAP Blog 1.1.1 allow remote attackers to execute arbitrary SQL commands via t…
-
Unscored —CVE-2009-1039 Public exploit
Buffer overflow in CDex 1.70b2 allows remote attackers to execute arbitrary code via a crafted Info header in an Ogg Vo…
-
Unscored —CVE-2009-1032 Public exploit
SQL injection vulnerability in gallery_list.php in YABSoft Advanced Image Hosting (AIH) Script 2.3 allows remote attack…
-
Unscored —CVE-2008-6495 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Fritz Berger yet another php photo album - next generation (ya…
-
Unscored —CVE-2008-6499 Public exploit
security/xamppsecurity.php in XAMPP 1.6.8 performs an extract operation on the SERVER superglobal array, which allows r…
-
Unscored —CVE-2008-6494 Public exploit
ASP User Engine.NET stores sensitive information under the web root with insufficient access control, which allows remo…
-
Unscored —CVE-2008-6496 Public exploit
Insecure method vulnerability in the VSPDFEditorX.VSPDFEdit ActiveX control in VSPDFEditorX.ocx 1.0.200.0 in VISAGESOFT…
-
Unscored —CVE-2008-6492 Public exploit
Unrestricted file upload vulnerability in process.php in Tizag Countdown Creator 3 allows remote attackers to execute a…