Archive
March 2009
Vulnerabilities first published in this month (UTC), newest first.
553 results · Feed
-
Unscored —
Piwik 0.2.32 and earlier stores sensitive information under the web root with insufficient access control, which allows…
-
Unscored —CVE-2009-1087 Public exploit
Multiple argument injection vulnerabilities in PPLive.exe in PPLive 1.9.21 and earlier allow remote attackers to execut…
-
Unscored —
Hannon Hill Cascade Server 5.7 and other versions allows remote authenticated users to execute arbitrary programs or Ja…
-
Unscored —
Directory traversal vulnerability in upload.php in Rapidleech rev.36 and earlier allows remote attackers to include and…
-
Unscored —
Heap-based buffer overflow in the ldns_rr_new_frm_str_internal function in ldns 1.4.x allows remote attackers to cause …
-
Unscored —CVE-2009-1092 Public exploit
Use-after-free vulnerability in the LIVEAUDIO.LiveAudioCtrl.1 ActiveX control in LIVEAU~1.OCX 7.0 for GeoVision DVR sys…
-
Unscored —
Cross-site scripting (XSS) vulnerability in upload.php in Rapidleech rev.36 and earlier allows remote attackers to inje…
-
Unscored —
Stack-based buffer overflow in the GetXMLValue method in the IBM Access Support ActiveX control in IbmEgath.dll, as dis…
-
Unscored —
Sun Java System Identity Manager (IdM) 7.0 through 8.0 responds differently to failed use of the end-user question-base…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager (IdM) 7.0 through 8.0 allow rem…
-
Unscored —
Sun Java System Identity Manager (IdM) 7.0 through 8.0 allows remote authenticated users to gain privileges by submitti…
-
Unscored —
Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not use SSL in all expected circumstances, which makes it e…
-
Unscored —
Sun Java System Identity Manager (IdM) 7.0 through 8.0 responds differently to failed use of the Forgot Password featur…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager (IdM) 7.0 through 8.0 allow rem…
-
Unscored —
Sun Java System Identity Manager (IdM) 7.0 through 8.0 on Linux, AIX, Solaris, and HP-UX permits "control characters" i…
-
Unscored —
Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not enforce the expected privilege requirements for (1) del…
-
Unscored —
Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not properly restrict access to the System Configuration ob…
-
Unscored —
The Change My Password implementation in the admin interface in Sun Java System Identity Manager (IdM) 7.0 through 8.0 …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager (IdM) 7.0 through 8.0 allow rem…
-
Unscored —CVE-2009-0921 EPSS 13%
Multiple heap-based buffer overflows in OvCgi/Toolbar.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and …
-
Unscored —
Unspecified vulnerability in HP-UX B.11.11 running VERITAS Oracle Disk Manager (VRTSodm) 3.5, B.11.23 running VRTSodm 4…
-
Unscored —
Heap-based buffer overflow in Adobe Acrobat Reader 9 before 9.1, 8 before 8.1.4, and 7 before 7.1.1 allows remote attac…
-
Unscored —CVE-2009-0928 EPSS 10%
Heap-based buffer overflow in Adobe Acrobat Reader and Acrobat Professional 7.1.0, 8.1.3, 9.0.0, and other versions all…
-
Unscored —
Stack-based buffer overflow in OvCgi/Toolbar.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allo…
-
Unscored —
The ecryptfs_write_metadata_to_contents function in the eCryptfs functionality in the Linux kernel 2.6.28 before 2.6.28…
-
Unscored —
The Web Services Security component in IBM WebSphere Application Server 7.0 before Fix Pack 1 (7.0.0.1), 6.1 before Fix…
-
Unscored —
nfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD capability before handling a user request in a thr…
-
Unscored —CVE-2009-1061 EPSS 11%
Unspecified vulnerability in Adobe Acrobat Reader 9 before 9.1, 8 before 8.1.4, and 7 before 7.1.1 might allow remote a…
-
Unscored —
Adobe Acrobat Reader 9 before 9.1, 8 before 8.1.4, and 7 before 7.1.1 might allow remote attackers to trigger memory co…
-
Unscored —
Format string vulnerability in the mini_calendar component in Citadel.org WebCit 7.22, and other versions before 7.39, …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the node edit form feature in Drupal Content Construction Kit (C…
-
Unscored —CVE-2009-1064 Public exploit
Argument injection vulnerability in orbitmxt.dll 2.1.0.2 in the Orbit Downloader 2.8.7 and earlier ActiveX control allo…
-
Unscored —CVE-2009-1067 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Pixie CMS 1.01a allows remote attackers to inject arbitrary we…
-
Unscored —CVE-2009-1063 Public exploit
Buffer overflow in eXeScope 6.50 allows user-assisted remote attackers to execute arbitrary code via a crafted executab…
-
Unscored —CVE-2009-1070 Public exploit
Cross-site scripting (XSS) vulnerability in system/index.php in ExpressionEngine 1.6.4 through 1.6.6, and possibly earl…
-
Unscored —
SQL injection vulnerability in index.php in Pixie CMS 1.01a allows remote attackers to execute arbitrary SQL commands v…
-
Unscored —CVE-2009-1041 Public exploit
The ktimer feature (sys/kern/kern_time.c) in FreeBSD 7.0, 7.1, and 7.2 allows local users to overwrite arbitrary kernel…
-
Unscored —CVE-2009-1066 Public exploit
SQL injection vulnerability in the referral function in admin/lib/lib_logs.php in Pixie CMS 1.01a allows remote attacke…
-
Unscored —CVE-2009-1071 Public exploit
Stack-based buffer overflow in Icarus 2.0 allows remote attackers to cause a denial of service (application crash) or e…
-
Unscored —
Stack-based buffer overflow in BS.Player (bsplayer) 2.32 Build 975 Free and 2.34 Build 980 PRO and earlier allows remot…