Archive
March 2009
Vulnerabilities first published in this month (UTC), newest first.
553 results · Feed
-
Unscored —
Ziproxy 2.6.0, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoin…
-
Unscored —
Buffer overflow in pppdial in IBM AIX 5.3 and 6.1 allows local users to gain privileges via a long "input string."
-
Unscored —
The aspath_prepend function in rde_attr.c in bgpd in OpenBSD 4.3 and 4.4 allows remote attackers to cause a denial of s…
-
Unscored —CVE-2009-0761 Public exploit
Cross-site scripting (XSS) vulnerability in online.asp in Team Board 1.x allows remote attackers to inject arbitrary we…
-
Unscored —CVE-2009-0768 Public exploit
SQL injection vulnerability in forumhop.php in YapBB 1.2 and earlier allows remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2009-0763 Public exploit
Cross-site scripting (XSS) vulnerability in default.php in Kipper 2.01 allows remote attackers to inject arbitrary web …
-
Unscored —CVE-2009-0767 Public exploit
Kipper 2.01 stores sensitive information under the web root with insufficient access control, which allows remote attac…
-
Unscored —CVE-2009-0760 Public exploit
Team Board 1.x and 2.x stores sensitive information under the web root with insufficient access control, which allows r…
-
Unscored —CVE-2009-0764 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Kipper 2.01 allow remote attackers to inject arbitrary web scrip…
-
Unscored —
Cross-site scripting (XSS) vulnerability in ScriptsEz Ez PHP Comment allows remote attackers to inject arbitrary web sc…
-
Unscored —CVE-2009-0766 Public exploit
Directory traversal vulnerability in default.php in Kipper 2.01 allows remote attackers to include and execute arbitrar…
-
Unscored —CVE-2009-0769 Public exploit
QIP 2005 build 8082 allows remote attackers to cause a denial of service (CPU consumption and application hang) via a c…
-
Unscored —CVE-2009-0765 Public exploit
Directory traversal vulnerability in index.php in Kipper 2.01 allows remote attackers to include and execute arbitrary …
-
Unscored —
dkim-milter 2.6.0 through 2.8.0 allows remote attackers to cause a denial of service (crash) by signing a message with …
-
Unscored —
PSI Jabber client before 0.12.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbit…
-
Unscored —
The originates_from_local_legacy_unicast_socket function in avahi-core/server.c in avahi-daemon 0.6.23 does not account…
-
Unscored —
Multiple CRLF injection vulnerabilities in webadmin in ZNC before 0.066 allow remote authenticated users to modify the …
-
Unscored —
Multiple buffer overflows in GNU MPFR 2.4.0 allow context-dependent attackers to cause a denial of service (crash) via …
-
Unscored —CVE-2009-0754 Public exploit
PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites host…
-
Unscored —
The JBIG2Stream::readSymbolDictSeg function in Poppler before 0.10.4 allows remote attackers to cause a denial of servi…
-
Unscored —CVE-2009-0753 Public exploit
Absolute path traversal vulnerability in MLDonkey 2.8.4 through 2.9.7 allows remote attackers to read arbitrary files v…
-
Unscored —
The FormWidgetChoice::loadDefaults function in Poppler before 0.10.4 allows remote attackers to cause a denial of servi…
-
Unscored —
Unspecified vulnerability in Movable Type Pro and Community Solution 4.x before 4.24 has unknown impact and attack vect…
-
Unscored —CVE-2009-0750 Public exploit
SQL injection vulnerability in login.php in the smNews example script for txtSQL 2.2 Final allows remote attackers to e…
-
Unscored —
Yaws before 1.80 allows remote attackers to cause a denial of service (memory consumption and crash) via a request with…
-
Unscored —CVE-2009-0368 Public exploit
OpenSC before 0.11.7 allows physically proximate attackers to bypass intended PIN requirements and read private data ob…
-
Unscored —
Use-after-free vulnerability in the GIFReadNextExtension function in lib/pngxtern/gif/gifread.c in OptiPNG 0.6.2 and ea…
-
Unscored —
SQL injection vulnerability in SpeedTech Organization and Resource Manager (Storm) 5.x before 5.x-1.14 and 6.x before 6…
-
Unscored —CVE-2008-6380 Public exploit
SQL injection vulnerability in default.aspx in Active Web Helpdesk 2.0 allows remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2008-6389 Public exploit
SQL injection vulnerability in asadmin/default.asp in Rae Media Contact Management Software SOHO, Standard, and Enterpr…
-
Unscored —CVE-2008-6387 Public exploit
Quick Tree View .NET 3.1 stores sensitive information under the web root with insufficient access control, which allows…
-
Unscored —
JBook stores sensitive information under the web root with insufficient access control, which allows remote attackers t…
-
Unscored —CVE-2008-6376 Public exploit
SQL injection vulnerability in main.asp in Jbook allows remote attackers to execute arbitrary SQL commands via the pass…
-
Unscored —CVE-2008-6367 Public exploit
Unrestricted file upload vulnerability in Photos/create_album.php in Social Groupie allows remote authenticated users t…
-
Unscored —CVE-2008-6390 Public exploit
SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote attackers to execute arbitrary…
-
Unscored —CVE-2008-6374 Public exploit
CodefixerSoftware MailingListPro Free Edition stores sensitive information under the web root with insufficient access …
-
Unscored —CVE-2008-6377 Public exploit
PHP remote file inclusion vulnerability in include/global.php in Multi SEO phpBB 1.1.0 allows remote attackers to execu…
-
Unscored —CVE-2008-6372 Public exploit
SQL injection vulnerability in default.asp in Ocean12 FAQ Manager Pro 1.0 allows remote attackers to execute arbitrary …
-
Unscored —
Unspecified vulnerability in Nagios before 3.0.6 has unspecified impact and remote attack vectors related to CGI progra…
-
Unscored —
SQL injection vulnerability in index.php in Chipmunk Guestbook 1.4m allows remote attackers to execute arbitrary SQL co…