8 April 2009

25 results · Feed

• Unscored —
  CVE-2009-1273

  pam_ssh 1.92 and possibly other versions, as used when PAM is compiled with USE=ssh, generates different error messages…

  libpam-ssh Debian
  Apr 8, 2009
• Unscored —
  CVE-2009-1271

  The JSON_parser function (ext/json/JSON_parser.c) in PHP 5.2.x before 5.2.9 allows remote attackers to cause a denial o…

  Apr 8, 2009
• Unscored —
  CVE-2009-1272

  The php_zip_make_relative_path function in php_zip.c in PHP 5.2.x before 5.2.9 allows context-dependent attackers to ca…

  Apr 8, 2009
• Unscored —
  CVE-2009-1274

  Integer overflow in the qt_error parse_trak_atom function in demuxers/demux_qt.c in xine-lib 1.1.16.2 and earlier allow…

  Apr 8, 2009
• Unscored —
  CVE-2008-6679

  Buffer overflow in the BaseFont writer module in Ghostscript 8.62, and possibly other versions, allows remote attackers…

  ghostscript Debian
  Apr 8, 2009
• Unscored —
  CVE-2008-6680

  libclamav/pe.c in ClamAV before 0.95 allows remote attackers to cause a denial of service (crash) via a crafted EXE fil…

  clamav Debian
  Apr 8, 2009
• Unscored —
  CVE-2009-1270

  libclamav/untar.c in ClamAV before 0.95 allows remote attackers to cause a denial of service (infinite loop) via a craf…

  clamav Debian
  Apr 8, 2009
• Unscored —
  CVE-2007-6725

  The CCITTFax decoding filter in Ghostscript 8.60, 8.61, and possibly other versions, allows remote attackers to cause a…

  ghostscript Debian
  Apr 8, 2009
• Unscored —
  CVE-2008-6672

  Vertex4 SunAge 1.08.1 and earlier allows remote attackers to cause a denial of service ("runtime error") via a crafted …

  Apr 8, 2009
• Unscored —
  CVE-2008-6670 Public exploit

  Integer overflow in Vertex4 SunAge 1.08.1 and earlier allows remote attackers to cause a denial of service (crash) via …

  Apr 8, 2009
• Unscored —
  CVE-2008-6666

  Multiple cross-site scripting (XSS) vulnerabilities in Kronos webTA allow remote attackers to inject arbitrary web scri…

  Apr 8, 2009
• Unscored —
  CVE-2008-6664 Public exploit

  action.php in SH-News 3.0 allows remote attackers to bypass authentication and gain administrator privileges by setting…

  Apr 8, 2009
• Unscored —
  CVE-2008-6674 Public exploit

  mailPage.asp in QuickerSite 1.8.5 allows remote attackers to flood e-mail accounts with messages via a large number of …

  Apr 8, 2009
• Unscored —
  CVE-2008-6675 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in QuickerSite 1.8.5 allow remote attackers to inject arbitrary web…

  Apr 8, 2009
• Unscored —
  CVE-2008-6676 Public exploit

  QuickerSite 1.8.5 allows remote attackers to obtain sensitive information via a request to showThumb.aspx without any p…

  Apr 8, 2009
• Unscored —
  CVE-2008-6678 Public exploit

  SQL injection vulnerability in asp/includes/contact.asp in QuickerSite 1.8.5 allows remote attackers to execute arbitra…

  Apr 8, 2009
• Unscored —
  CVE-2008-6673 Public exploit

  asp/bs_login.asp in QuickerSite 1.8.5 does not properly restrict access to administrative functionality, which allows r…

  Apr 8, 2009
• Unscored —
  CVE-2008-6671

  Vertex4 SunAge 1.08.1 and earlier allows remote attackers to cause a denial of service (infinite loop and hang) via a c…

  Apr 8, 2009
• Unscored —
  CVE-2008-6669 Public exploit

  viewrq.php in nweb2fax 0.2.7 and earlier allows remote attackers to execute arbitrary code via shell metacharacters in …

  Apr 8, 2009
• Unscored —
  CVE-2008-6668 Public exploit Scanner template EPSS 14%

  Multiple directory traversal vulnerabilities in nweb2fax 0.2.7 and earlier allow remote attackers to read arbitrary fil…

  Apr 8, 2009
• Unscored —
  CVE-2008-6663 Public exploit

  SQL injection vulnerability in profile.php in PHPAuctions.info PHPAuctions (aka PHPAuctionSystem) allows remote attacke…

  Apr 8, 2009
• Unscored —
  CVE-2008-6677 Public exploit

  Unrestricted file upload vulnerability in fckeditor251/editor/filemanager/connectors/asp/upload.asp in QuickerSite 1.8.…

  Apr 8, 2009
• Unscored —
  CVE-2008-6665 Public exploit

  change.php in Ananta CMS 1.0b5, with magic_quotes_gpc disabled, allows remote attackers to gain administrator privilege…

  Apr 8, 2009
• Unscored —
  CVE-2008-6667 Public exploit

  A+ PHP Scripts News Management System (NMS) allows remote attackers to bypass authentication and gain administrator pri…

  Apr 8, 2009
• Unscored —
  CVE-2009-1265

  Integer overflow in rose_sendmsg (sys/net/af_rose.c) in the Linux kernel 2.6.24.4, and other versions before 2.6.30-rc1…

  Apr 8, 2009