21 April 2009

26 results · Feed

• Unscored —
  CVE-2009-1358

  apt-get in apt before 0.7.21 does not check for the correct error code from gpgv, which causes apt to treat a repositor…

  apt Debian
  Apr 21, 2009
• Unscored —
  CVE-2008-6739 Public exploit

  Todd Woolums ASP Download management script 1.03 does not require authentication for setupdownload.asp, which allows re…

  Apr 21, 2009
• Unscored —
  CVE-2008-6738 Public exploit

  MyShoutPro 1.2 allows remote attackers to bypass authentication and gain administrative access by setting the admin_acc…

  Apr 21, 2009
• Unscored —
  CVE-2008-6740 Public exploit

  PHP remote file inclusion vulnerability in html/admin/modules/plugin_admin.php in HoMaP-CMS 0.1 allows remote attackers…

  Apr 21, 2009
• Unscored —
  CVE-2008-6742 Public exploit

  Foxy P2P software allows remote attackers to cause a denial of service (memory consumption) via a foxy URI with a downl…

  Apr 21, 2009
• Unscored —
  CVE-2008-6734 Public exploit

  Directory traversal vulnerability in Public/index.php in Keller Web Admin CMS 0.94 Pro allows remote attackers to inclu…

  Apr 21, 2009
• Unscored —
  CVE-2008-6741 Public exploit

  SQL injection vulnerability in Load.php in Simple Machines Forum (SMF) 1.1.4 and earlier allows remote attackers to exe…

  Apr 21, 2009
• Unscored —
  CVE-2008-6733

  Cross-site scripting (XSS) vulnerability in the error handling page in DotNetNuke 4.6.2 through 4.8.3 allows remote att…

  Apr 21, 2009
• Unscored —
  CVE-2008-6736 Public exploit

  Flat Calendar 1.1 does not properly restrict access to administrative functions, which allows remote attackers to (1) a…

  Apr 21, 2009
• Unscored —
  CVE-2008-6735 Public exploit

  Directory traversal vulnerability in qc/index.php in ThaiQuickCart 3 allows remote attackers to read arbitrary files vi…

  Apr 21, 2009
• Unscored —
  CVE-2008-6732

  Cross-site scripting (XSS) vulnerability in the Language skin object in DotNetNuke before 4.8.4 allows remote attackers…

  Apr 21, 2009
• Unscored —
  CVE-2008-6737 Public exploit

  Crysis 1.21 and earlier allows remote attackers to obtain sensitive player information such as real IP addresses by sen…

  Apr 21, 2009
• Unscored —
  CVE-2006-7238

  Cross-site scripting (XSS) vulnerability in MyShoutPro before 1.2 allows remote attackers to inject arbitrary web scrip…

  Apr 21, 2009
• Unscored —
  CVE-2009-1351 Public exploit

  Heap-based buffer overflow in Apollo 37zz allows remote attackers to cause a denial of service (application crash) and …

  Apr 21, 2009
• Unscored —
  CVE-2009-1350 Public exploit EPSS 66%

  Unspecified vulnerability in xtagent.exe in Novell NetIdentity Client before 1.2.4 allows remote attackers to execute a…

  Apr 21, 2009
• Unscored —
  CVE-2009-1354 Public exploit

  Directory traversal vulnerability in Mongoose 2.4 allows remote attackers to read arbitrary files via a .. (dot dot) in…

  Apr 21, 2009
• Unscored —
  CVE-2009-1353 Public exploit

  Buffer overflow in the http_parse_hex function in libz/misc.c in Zervit Webserver 0.02 allows remote attackers to cause…

  Apr 21, 2009
• Unscored —
  CVE-2009-1355

  Stack-based buffer overflow in muxatmd in IBM AIX 5.2, 5.3, and 6.1 allows local users to gain privileges via a long fi…

  Apr 21, 2009
• Unscored —
  CVE-2009-1352 Public exploit

  Stack-based buffer overflow in Dawningsoft PowerCHM 5.7 allows remote attackers to cause a denial of service (applicati…

  Apr 21, 2009
• Unscored —
  CVE-2009-1356 Public exploit

  Stack-based buffer overflow in Elecard AVC HD Player allows remote attackers to execute arbitrary code via a long MP3 f…

  Apr 21, 2009
• Unscored —
  CVE-2009-0717

  Unspecified vulnerability in HP StorageWorks Storage Mirroring 5 before 5.1.1.1090.15 allows remote attackers to cause …

  Apr 21, 2009
• Unscored —
  CVE-2009-0716

  Unspecified vulnerability in HP StorageWorks Storage Mirroring 5 before 5.1.1.1090.15 allows remote attackers to cause …

  Apr 21, 2009
• Unscored —
  CVE-2009-0715

  Unspecified vulnerability in Secure NaviCLI in HP Storage Essentials 6.0.2 through 6.0.4 allows remote authenticated us…

  Apr 21, 2009
• Unscored —
  CVE-2009-0718

  Unspecified vulnerability in HP StorageWorks Storage Mirroring 5 before 5.1.1.1090.15 allows remote attackers to execut…

  Apr 21, 2009
• Unscored —
  CVE-2009-1349 Public exploit

  Cross-site scripting (XSS) vulnerability in C2Net Stronghold 2.3 allows remote attackers to inject arbitrary web script…

  Apr 21, 2009
• Unscored —
  CVE-2009-1266

  Unspecified vulnerability in Wireshark before 1.0.7 has unknown impact and attack vectors.

  Apr 21, 2009