Archive
March 2009
Vulnerabilities first published in this month (UTC), newest first.
553 results · Feed
-
Unscored —
The Servlet Engine/Web Container and JSP components in IBM WebSphere Application Server (WAS) 5.1.0, 5.1.1.19, 6.0.2 be…
-
Unscored —
Unspecified vulnerability in the keysock kernel module in Solaris 10 and OpenSolaris builds snv_01 through snv_108 allo…
-
Unscored —
perl-MDK-Common 1.1.11 and 1.1.24, 1.2.9 through 1.2.14, and possibly other versions, in Mandriva Linux does not proper…
-
Unscored —CVE-2008-6477 Public exploit
SQL injection vulnerability in Mumbo Jumbo Media OP4 allows remote attackers to execute arbitrary SQL commands via the …
-
Unscored —CVE-2008-6475 Public exploit
SQL injection vulnerability in the guestbook component (components/guestbook/guestbook.php) in Drake CMS 0.4.11 and ear…
-
Unscored —CVE-2008-6473 Public exploit
_blogadata/include/init_pass2.php in Blogator-script 0.95 allows remote attackers to change the password for arbitrary …
-
Unscored —
The management interface in F5 BIG-IP 9.4.3 allows remote authenticated users with Resource Manager privileges to injec…
-
Unscored —CVE-2008-6476 Public exploit
Cross-site scripting (XSS) vulnerability in blog/search.aspx in BlogEngine.NET allows remote attackers to inject arbitr…
-
Unscored —
Multiple integer overflows in glib/gbase64.c in GLib before 2.20 allow context-dependent attackers to execute arbitrary…
-
Unscored —
The WLCCP dissector in Wireshark 0.99.7 through 1.0.4 allows remote attackers to cause a denial of service (infinite lo…
-
Unscored —
Apple iTunes before 8.1 on Windows allows remote attackers to cause a denial of service (infinite loop) via a Digital A…
-
Unscored —
Integer overflow in the soup_base64_encode function in soup-misc.c in libsoup 2.x.x before 2.2.x, and 2.x before 2.24, …
-
Unscored —CVE-2009-0824 Public exploit
Elaborate Bytes ElbyCDIO.sys 6.0.2.0 and earlier, as distributed in SlySoft AnyDVD before 6.5.2.6, Virtual CloneDrive 5…
-
Unscored —
Multiple integer overflows in Evolution Data Server (aka evolution-data-server) before 2.24.5 allow context-dependent a…
-
Unscored —
Integer overflow in the gst_vorbis_tag_add_coverart function (gst-libs/gst/tag/gstvorbistag.c) in vorbistag in gst-plug…
-
Unscored —
Apple iTunes before 8.1 does not properly inform the user about the origin of an authentication request, which makes it…
-
Unscored —
The ntlm_challenge function in the NTLM SASL authentication mechanism in camel/camel-sasl-ntlm.c in Camel in Evolution …
-
Unscored —
Multiple unspecified vulnerabilities in ClanSphere before 2008.2.1 allow remote attackers to obtain sensitive informati…
-
Unscored —CVE-2008-6452 Public exploit
SQL injection vulnerability in show_vote.php in Oceandir 2.9 and earlier allows remote attackers to execute arbitrary S…
-
Unscored —CVE-2008-6451 Public exploit
SQL injection vulnerability in humor.php in jPORTAL 2 allows remote attackers to execute arbitrary SQL commands via the…
-
Unscored —CVE-2008-6469 Public exploit
SQL injection vulnerability in index.php in PlainCart 1.1.2 allows remote attackers to execute arbitrary SQL commands v…
-
Unscored —
Session fixation vulnerability in Edikon phpShop 0.8.1 allows remote attackers to hijack web sessions via unspecified v…
-
Unscored —
SQL injection vulnerability in the Swigmore institute (cgswigmore) extension before 0.1.2 for TYPO3 allows remote attac…
-
Unscored —CVE-2008-6465 Scanner template
Multiple cross-site scripting (XSS) vulnerabilities in login.php in webshell4 in Parallels H-Sphere 3.0.0 P9 and 3.1 P1…
-
Unscored —
SQL injection vulnerability in the HBook (h_book) extension 2.3.0 and earlier for TYPO3 allows remote attackers to exec…
-
Unscored —CVE-2008-6453 Public exploit
Directory traversal vulnerability in section.php in 6rbScript 3.3, when magic_quotes_gpc is disabled, allows remote att…
-
Unscored —CVE-2008-6468 Public exploit
SQL injection vulnerability in index.php in Diesel Pay allows remote attackers to execute arbitrary SQL commands via th…
-
Unscored —CVE-2008-6466 Public exploit
SQL injection vulnerability in image_gallery.php in the Akira Powered Image Gallery (image_gallery) plugin 0.9.6.2 for …
-
Unscored —
SQL injection vulnerability in the Simple Random Objects (mw_random_objects) extension 1.0.3 and earlier for TYPO3 allo…
-
Unscored —CVE-2008-6464 Public exploit
SQL injection vulnerability in event.php in Mevin Productions Basic PHP Events Lister 1.0 allows remote attackers to ex…
-
Unscored —
SQL injection vulnerability in the FE address edit for tt_address & direct mail (dmaddredit) extension 0.4.0 and earlie…
-
Unscored —CVE-2008-6467 Public exploit
SQL injection vulnerability in jobs/jobseekers/job-info.php in Diesel Job Site allows remote attackers to execute arbit…
-
Unscored —
SQL injection vulnerability in the auto BE User Registration (autobeuser) extension 0.0.2 and earlier for TYPO3 allows …
-
Unscored —CVE-2008-6471 Public exploit
SQL injection vulnerability in detail.php in MountainGrafix easyLink 1.1.0 allows remote attackers to execute arbitrary…
-
Unscored —
SQL injection vulnerability in the My quiz and poll (myquizpoll) extension before 0.1.4 for TYPO3 allows remote attacke…
-
Unscored —
SQL injection vulnerability in the Diocese of Portsmouth Church Search (pd_churchsearch) extension before 0.1.1, and 0.…
-
Unscored —
SQL injection vulnerability in the Random Prayer 2 (ste_prayer2) extension before 0.0.3 for TYPO3 allows remote attacke…
-
Unscored —CVE-2008-6454 Public exploit
SQL injection vulnerability in section.php in 6rbScript 3.3 allows remote attackers to execute arbitrary SQL commands v…
-
Unscored —CVE-2009-0879 Public exploit
The CIM server in IBM Director before 5.20.3 Service Update 2 on Windows allows remote attackers to cause a denial of s…
-
Unscored —
Race condition in the Doors subsystem in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv_94, allows …