17 April 2009

25 results · Clear filters · Feed

• High —
  CVE-2008-5518 Public exploit EPSS 36%

  Apache Geronimo Application Server multiple directory traversal vulnerabilities

  Multiple directory traversal vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1 through 2.1.3 on Windows allow remote attackers to upload files to arbitrary directories via directory traversal sequences in the (1) grou…

  org.apache.geronimo.plugins:console Maven
  Apr 17, 2009
• Medium —
  CVE-2009-0038 Public exploit EPSS 18%

  Apache Geronimo Application Server multiple cross-site scripting (XSS) vulnerabilities

  Multiple cross-site scripting (XSS) vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1 through 2.1.3 allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) ip, (3) username, or (4) descript…

  org.apache.geronimo.plugins:console Maven
  Apr 17, 2009
• Medium —
  CVE-2009-0039 Public exploit EPSS 11%

  Apache Geronimo Application Server CSRF vulnerabilities

  Multiple cross-site request forgery (CSRF) vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1 through 2.1.3 allow remote attackers to hijack the authentication of administrators for requests that (1) change the web adm…

  org.apache.geronimo.plugins:console Maven
  Apr 17, 2009
• Unscored —
  CVE-2009-1335 Public exploit EPSS 16%

  Microsoft Internet Explorer 7 and 8 on Windows XP and Vista allows remote attackers to cause a denial of service (appli…

  Apr 17, 2009
• Unscored —
  CVE-2009-1331 Public exploit EPSS 18%

  Integer overflow in Microsoft Windows Media Player (WMP) 11.0.5721.5260 allows remote attackers to cause a denial of se…

  Apr 17, 2009
• Unscored —
  CVE-2009-1185 Public exploit EPSS 81%

  udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to g…

  py3-udev py3.14-udev Wolfi
  Apr 17, 2009
• Unscored —
  CVE-2009-1334 Public exploit

  Cross-site scripting (XSS) vulnerability in login/FilepathLogin.html in IBM Tivoli Continuous Data Protection (CDP) for…

  Apr 17, 2009
• Unscored —
  CVE-2008-6726 Public exploit

  Multiple directory traversal vulnerabilities in CMScout 2.06, when register_globals is enabled, allow remote attackers …

  Apr 17, 2009
• Unscored —
  CVE-2008-6725 Public exploit

  Multiple SQL injection vulnerabilities in CMScout 2.06 allow remote authenticated users to execute arbitrary SQL comman…

  Apr 17, 2009
• Unscored —
  CVE-2009-1321 Public exploit

  Cross-site scripting (XSS) vulnerability in search.asp in ASP Product Catalog 1.0 allows remote attackers to inject arb…

  Apr 17, 2009
• Unscored —
  CVE-2009-1328 Public exploit

  Stack-based buffer overflow in Mini-stream RM-MP3 Converter 3.0.0.7 allows remote attackers to execute arbitrary code v…

  Apr 17, 2009
• Unscored —
  CVE-2009-1316 Public exploit

  Multiple SQL injection vulnerabilities in AbleSpace 1.0 allow remote attackers to execute arbitrary SQL commands via th…

  Apr 17, 2009
• Unscored —
  CVE-2009-1322 Public exploit

  ASP Product Catalog 1.0 stores sensitive information under the web root with insufficient access control, which allows …

  Apr 17, 2009
• Unscored —
  CVE-2009-1324 Public exploit EPSS 17%

  Stack-based buffer overflow in Mini-stream ASX to MP3 Converter 3.0.0.7 allows remote attackers to execute arbitrary co…

  Apr 17, 2009
• Unscored —
  CVE-2009-1319 Public exploit

  Directory traversal vulnerability in includes/ini.inc.php in GuestCal 2.1 allows remote attackers to include and execut…

  Apr 17, 2009
• Unscored —
  CVE-2009-1330 Public exploit EPSS 22%

  Stack-based buffer overflow in Easy RM to MP3 Converter allows remote attackers to execute arbitrary code via a long fi…

  Apr 17, 2009
• Unscored —
  CVE-2009-1317 Public exploit

  Multiple SQL injection vulnerabilities in Aqua CMS 1.1, when magic_quotes_gpc is disabled, allow remote attackers to ex…

  Apr 17, 2009
• Unscored —
  CVE-2009-1325 Public exploit

  Stack-based buffer overflow in Mini-stream Ripper 3.0.1.1 allows remote attackers to execute arbitrary code via a long …

  Apr 17, 2009
• Unscored —
  CVE-2009-1318 Public exploit

  Directory traversal vulnerability in index.php in Jamroom 3.1.2, 3.2.3 through 3.2.6, 4.0.2, and possibly other version…

  Apr 17, 2009
• Unscored —
  CVE-2009-1326 Public exploit

  Stack-based buffer overflow in Mini-stream RM Downloader 3.0.0.9 allows remote attackers to execute arbitrary code via …

  Apr 17, 2009
• Unscored —
  CVE-2009-1315 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in AbleSpace 1.0 allow remote attackers to inject arbitrary web scr…

  Apr 17, 2009
• Unscored —
  CVE-2009-1329 Public exploit

  Stack-based buffer overflow in Mini-stream Shadow Stream Recorder 3.0.1.7 allows remote attackers to execute arbitrary …

  Apr 17, 2009
• Unscored —
  CVE-2009-1323 Public exploit

  SQL injection vulnerability in body.asp in Web File Explorer 3.1 allows remote attackers to execute arbitrary SQL comma…

  Apr 17, 2009
• Unscored —
  CVE-2009-1327 Public exploit

  Stack-based buffer overflow in Mini-stream WM Downloader 3.0.0.9 allows remote attackers to execute arbitrary code via …

  Apr 17, 2009
• Unscored —
  CVE-2009-1314 Public exploit EPSS 10%

  body.asp in Web File Explorer 3.1 allows remote attackers to create arbitrary files and execute arbitrary code via the …

  Apr 17, 2009