Archive
April 2009
Vulnerabilities first published in this month (UTC), newest first.
567 results · Feed
-
Unscored —CVE-2009-1313 Public exploit
The nsTextFrame::ClearTextRun function in layout/generic/nsTextFrameThebes.cpp in Mozilla Firefox 3.0.9 allows remote a…
-
Unscored —
Heap-based buffer overflow in the DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module 1.49 for Perl might allow context-depen…
-
Unscored —CVE-2009-1416 Public exploit
lib/gnutls_pk.c in libgnutls in GnuTLS 2.5.0 through 2.6.5 generates RSA keys stored in DSA structures, instead of the …
-
Unscored —
The AV engine before DAT 5600 in McAfee VirusScan, Total Protection, Internet Security, SecurityShield for Microsoft IS…
-
Unscored —
The process_stat function in (1) Memcached before 1.2.8 and (2) MemcacheDB 1.2.0 discloses (a) the contents of /proc/se…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in TWiki before 4.3.1 allows remote authenticated users to hijack the a…
-
Unscored —
Memory leak in the dequote_bytea function in quote.c in the DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module before 2.0.0 …
-
Unscored —
Symantec Reporting Server, as used in Symantec AntiVirus (SAV) Corporate Edition 10.1 before 10.1 MR8 and 10.2 before 1…
-
Unscored —
Apport before 0.108.4 on Ubuntu 8.04 LTS, before 0.119.2 on Ubuntu 8.10, and before 1.0-0ubuntu5.2 on Ubuntu 9.04 does …
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in Foswiki before 1.0.5 allows remote attackers to hijack the authentic…
-
Unscored —
The getAnnots Doc method in the JavaScript API in Adobe Reader and Acrobat 9.1, 8.1.4, 7.1.1, and earlier allows remote…
-
Unscored —
The process_stat function in Memcached 1.2.8 discloses memory-allocation statistics in response to a stats malloc comma…
-
Unscored —CVE-2009-1415 Public exploit
lib/pk-libgcrypt.c in libgnutls in GnuTLS before 2.6.6 does not properly handle invalid DSA signatures, which allows re…
-
Unscored —
Stack-based buffer overflow in TIBCO SmartSockets before 6.8.2, SmartSockets Product Family (aka RTworks) before 4.0.5,…
-
Unscored —
The customDictionaryOpen spell method in the JavaScript API in Adobe Reader 9.1, 8.1.4, 7.1.1, and earlier on Linux and…
-
Unscored —
gnutls-cli in GnuTLS before 2.6.6 does not verify the activation and expiration times of X.509 certificates, which allo…
-
Unscored —CVE-2008-6772 Public exploit
login/register_form.php in YourPlace 1.0.2 and earlier does not check that a username already exists when a new account…
-
Unscored —CVE-2008-6771 Public exploit
YourPlace 1.0.2 and earlier allows remote attackers to obtain sensitive system information via a direct request via a d…
-
Unscored —
internettoolbar/edit.php in YourPlace 1.0.2 and earlier does not end execution when an invalid username is detected, wh…
-
Unscored —CVE-2008-6769 Public exploit
Unrestricted file upload vulnerability in upload.php in YourPlace 1.0.2 and earlier allows remote authenticated users t…
-
Unscored —CVE-2008-6768 Public exploit
Unrestricted file upload vulnerability in admin/editor/images.php in K&S Shopsoftware allows remote attackers to execut…
-
Unscored —CVE-2008-6770 Public exploit
YourPlace 1.0.2 and earlier stores sensitive information under the web root with insufficient access control, which all…
-
Unscored —CVE-2008-6773 Public exploit
Static code injection vulnerability in user/internettoolbar/edit.php in YourPlace 1.0.2 and earlier allows remote authe…
-
Unscored —
The logging feature in eMule Plus before 1.2e allows remote attackers to cause a denial of service (infinite loop) via …
-
Unscored —CVE-2009-1487 Public exploit
SQL injection vulnerability in pages/login.php in FunGamez RC1 allows remote attackers to execute arbitrary SQL command…
-
Medium 6.1
MoinMoin Cross-site Scripting (XSS) vulnerability
Multiple cross-site scripting (XSS) vulnerabilities in action/AttachFile.py in MoinMoin 1.8.2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) an AttachFile sub-action in the error_msg function or (2) multiple vectors related …
-
Unscored —
SQL injection vulnerability in action.asp in PuterJam's Blog (PJBlog3) 3.0.6.170 allows remote attackers to execute arb…
-
Unscored —CVE-2009-1488 Public exploit
Directory traversal vulnerability in admin/load.php in FunGamez RC1 allows remote attackers to include and execute arbi…
-
Unscored —CVE-2009-1480 Public exploit
SQL injection vulnerability in index.php Pragyan CMS 2.6.4 allows remote attackers to execute arbitrary SQL commands vi…
-
Unscored —CVE-2009-1483 Public exploit
Unrestricted file upload vulnerability in upload-file.php in Adam Patterson Studio Lounge Address Book 2.5, as reachabl…
-
Unscored —CVE-2009-1486 Public exploit
Directory traversal vulnerability in pmscript.php in Flatchat 3.0 allows remote attackers to include and execute arbitr…
-
Unscored —CVE-2009-1489 Public exploit
includes/user.php in Fungamez RC1 allows remote attackers to bypass authentication and gain administrative access by se…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the web mail interface feature in AXIGEN Mail Server 6.2.2 allows remote at…
-
Unscored —
Unspecified vulnerability in useradd in HP HP-UX B.11.11, B.11.23, and B.11.31 allows local users to access arbitrary f…
-
Unscored —
The Intel LANDesk Common Base Agent (CBA) in Symantec Alert Management System 2 (AMS2), as used in Symantec System Cent…
-
Unscored —CVE-2009-1478 Public exploit
Multiple unspecified vulnerabilities in the DTrace ioctl handlers in Sun Solaris 10, and OpenSolaris before snv_114, al…
-
Unscored —
Multiple stack-based buffer overflows in IAO.EXE in the Intel Alert Originator Service in Symantec Alert Management Sys…
-
Unscored —
XFR.EXE in the Intel File Transfer service in the console in Symantec Alert Management System 2 (AMS2), as used in Syma…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in ccLgView.exe in the Symantec Log Viewer, as used in Symantec Ant…
-
Unscored —
cart_save.php in ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to cause a denial of service (excessive sho…