Archive
2 April 2009
Vulnerabilities first published on this day (UTC), newest first.
19 results · Clear filters · Feed
-
Unscored —CVE-2009-1236 Public exploit
Heap-based buffer overflow in the AppleTalk networking stack in XNU 1228.3.13 and earlier on Apple Mac OS X 10.5.6 and …
-
Unscored —CVE-2009-1237 Public exploit
Multiple memory leaks in XNU 1228.3.13 and earlier on Apple Mac OS X 10.5.6 and earlier allow local users to cause a de…
-
Unscored —CVE-2009-1233 Public exploit
Apple Safari 3.2.2 and 4 Beta on Windows allows remote attackers to cause a denial of service (application crash) via a…
-
Unscored —CVE-2009-1235 Public exploit
XNU 1228.9.59 and earlier on Apple Mac OS X 10.5.6 and earlier does not properly restrict interaction between user spac…
-
Unscored —CVE-2009-1238 Public exploit
Race condition in the HFS vfs sysctl interface in XNU 1228.8.20 and earlier on Apple Mac OS X 10.5.6 and earlier allows…
-
Unscored —CVE-2009-1234 Public exploit
Opera 9.64 allows remote attackers to cause a denial of service (application crash) via an XML document containing a lo…
-
Unscored —CVE-2009-1232 Public exploit
Mozilla Firefox 3.0.8 and earlier 3.0.x versions allows remote attackers to cause a denial of service (memory corruptio…
-
Unscored —CVE-2008-6580 Public exploit
The Red_Reservations script for ColdFusion stores sensitive information under the web root with insufficient access con…
-
Unscored —CVE-2008-6581 Public exploit
login.php in PhpAddEdit 1.3 allows remote attackers to bypass authentication and gain administrative access by setting …
-
Unscored —CVE-2008-6582 Public exploit
SQL injection vulnerability in index.php in Miniweb 2.0 allows remote attackers to execute arbitrary SQL commands via t…
-
Unscored —CVE-2009-1229 Public exploit
SQL injection vulnerability in Arcadwy Arcade Script allows remote attackers to execute arbitrary SQL commands via the …
-
Unscored —CVE-2009-1226 Public exploit
core/admin/delete.php in Podcast Generator 1.1 and earlier does not properly restrict access to administrative function…
-
Unscored —CVE-2009-1227 Public exploit
NOTE: this issue has been disputed by the vendor. Buffer overflow in the PKI Web Service in Check Point Firewall-1 PKI …
-
Unscored —CVE-2009-1224 Public exploit
SQL injection vulnerability in vsp-core/pub/themes/bismarck/gamestat.php in vsp stats processor 0.45 allows remote atta…
-
Unscored —CVE-2009-1222 Public exploit
Directory traversal vulnerability in index.php in webEdition 6.0.0.4 and earlier, when register_globals is enabled and …
-
Unscored —CVE-2009-1228 Public exploit
Cross-site scripting (XSS) vulnerability in register.php in Arcadwy Arcade Script CMS allows remote attackers to inject…
-
Unscored —CVE-2009-1230 Public exploit
Static code injection vulnerability in index.php in Podcast Generator 1.1 and earlier allows remote authenticated admin…
-
Unscored —CVE-2009-1225 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Turnkey Ebook Store 1.1 allows remote attackers to inject arbi…
-
Unscored —CVE-2003-1571 Public exploit
Web Wiz Guestbook 6.0 stores sensitive information under the web root with insufficient access control, which allows re…