3 April 2009

25 results · Feed

• Unscored —
  CVE-2008-6586 Public exploit

  Cross-site request forgery (CSRF) vulnerability in gui/index.php in µTorrent (uTorrent) WebUI 0.315 allows remote attac…

  Apr 3, 2009
• Unscored —
  CVE-2008-6585 Public exploit

  Cross-site request forgery (CSRF) vulnerability in html/admin.php in TorrentFlux 2.3 allows remote attackers to hijack …

  Apr 3, 2009
• Unscored —
  CVE-2008-6594

  SQL injection vulnerability in the cm_rdfexport extension for TYPO3 allows remote attackers to execute arbitrary SQL co…

  Apr 3, 2009
• Unscored —
  CVE-2008-6590 Public exploit

  Multiple directory traversal vulnerabilities in LightNEasy "no database" (aka flat) version 1.2.2, and possibly SQLite …

  Apr 3, 2009
• Unscored —
  CVE-2008-6589

  Multiple cross-site scripting (XSS) vulnerabilities in LightNEasy "no database" (aka flat) version 1.2.2, and possibly …

  Apr 3, 2009
• Unscored —
  CVE-2008-6599

  cookiecheck.php in CookieCheck 1.0 stores tmp/cc_sessions under the web root with insufficient access control, which al…

  Apr 3, 2009
• High 7.5
  CVE-2008-6603

  MoinMoin Access Restrictions Bypassed due to improper ACL enforcement

  MoinMoin 1.6.2 and 1.7 does not properly enforce ACL checks when acl_hierarchic is set to True, which might allow remote attackers to bypass intended access restrictions, a different vulnerability than CVE-2008-1937.

  moin PyPI
  Apr 3, 2009
• Unscored —
  CVE-2008-6602

  Unspecified vulnerability in Download Center Lite before 2.1 has unknown impact and attack vectors related to "A minor …

  Apr 3, 2009
• Unscored —
  CVE-2008-6600

  Cross-site scripting (XSS) vulnerability in the search feature in XMLPortal 3.0 allows remote attackers to inject arbit…

  Apr 3, 2009
• Unscored —
  CVE-2008-6596 Public exploit

  SQL injection vulnerability in admin/index.php in PHCDownload 1.1 allows remote attackers to execute arbitrary SQL comm…

  Apr 3, 2009
• Unscored —
  CVE-2008-6587

  Cross-site request forgery (CSRF) vulnerability in index.tmpl in Vuze (formerly Azureus HTML WebUI), probably 0.7.6, al…

  Apr 3, 2009
• Unscored —
  CVE-2008-6598

  Multiple race conditions in WANPIPE before 3.3.6 have unknown impact and attack vectors related to "bri restart logic."

  Apr 3, 2009
• Unscored —
  CVE-2008-6595

  SQL injection vulnerability in the pmk_rssnewsexport extension for TYPO3 allows remote attackers to execute arbitrary S…

  Apr 3, 2009
• Unscored —
  CVE-2008-6597 Public exploit

  Cross-site scripting (XSS) vulnerability in upload/install/index.php in PHCDownload 1.1 allows remote attackers to inje…

  Apr 3, 2009
• Unscored —
  CVE-2008-6588

  Aztech ADSL2/2+ 4-port router has a default "isp" account with a default "isp" password, which allows remote attackers …

  Apr 3, 2009
• Unscored —
  CVE-2008-6584

  html/index.php in TorrentFlux 2.3 allows remote authenticated users to execute arbitrary code via a URL with a file con…

  Apr 3, 2009
• Unscored —
  CVE-2008-6601

  Unspecified vulnerability in Epona 1.5rc3 allows remote attackers to obtain the real IP address of users via unknown ve…

  Apr 3, 2009
• Unscored —
  CVE-2008-6591

  LightNEasy "no database" (aka flat) version 1.2.2, and possibly SQLite version 1.2.2, allows remote attackers to create…

  Apr 3, 2009
• Unscored —
  CVE-2008-6592 Public exploit

  thumbsup.php in Thumbs-Up 1.12, as used in LightNEasy "no database" (aka flat) and SQLite 1.2.2 and earlier, allows rem…

  Apr 3, 2009
• Unscored —
  CVE-2008-6583 Public exploit

  Buffer overflow in BS.player 2.27 build 959 allows remote attackers to cause a denial of service (crash) and possibly e…

  Apr 3, 2009
• Unscored —
  CVE-2008-6593 Public exploit

  SQL injection vulnerability in LightNEasy/lightneasy.php in LightNEasy SQLite 1.2.2 and earlier allows remote attackers…

  Apr 3, 2009
• High 8.8
  CVE-2009-0556 Exploited EPSS 67%

  Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3, and PowerPoint in Microsoft Office 2004 for Mac, allows r…

  Apr 3, 2009

  KEV Jan 7, 2026
• Unscored —
  CVE-2009-1240

  Unspecified vulnerability in the IBM Proventia engine 4.9.0.0.44 20081231, as used in IBM Proventia Network Mail Securi…

  Apr 3, 2009
• Unscored —
  CVE-2009-1239

  IBM DB2 9.1 before FP7 returns incorrect query results in certain situations related to the order of application of an …

  Apr 3, 2009
• Unscored —
  CVE-2009-1241

  Unspecified vulnerability in ClamAV before 0.95 allows remote attackers to bypass detection of malware via a modified R…

  clamav Debian
  Apr 3, 2009