Archive
22 April 2009
Vulnerabilities first published on this day (UTC), newest first.
25 results · Feed
-
Unscored —CVE-2008-6743 Public exploit
RSMScript 1.21 allows remote attackers to bypass authentication and gain administrative privileges by setting the verif…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Website\admin\Sales\paypalipn.aspx in DotNetNuke (DNN) before 4.9.3 allows …
-
Unscored —CVE-2009-1370 Public exploit
Stack-based buffer overflow in ape_plugin.plg in Xilisoft Video Converter 3.1.53.0704n and 5.1.23.0402 allows remote at…
-
Unscored —CVE-2009-1369 Public exploit
moziloCMS 1.11 allows remote attackers to obtain sensitive information via the (1) gal[] parameter to gallery.php, (2) …
-
Unscored —CVE-2009-1368 Public exploit
Directory traversal vulnerability in index.php in moziloCMS 1.11 allows remote attackers to read arbitrary files via a …
-
Unscored —CVE-2009-1367 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in moziloCMS 1.11 allows remote attackers to inject arbitrary web…
-
Unscored —CVE-2009-0307 Public exploit
Cross-site scripting (XSS) vulnerability in the "Customize Statistics Page" (admin/statistics/ConfigureStatistics) in t…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey allows remote atta…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the MozSearch plugin implementation in Mozilla Firefox before 3.0.9 allows …
-
Unscored —
Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey do not properly implement the Same Origin Policy for (1) XMLHt…
-
Unscored —CVE-2009-1362 Public exploit
SQL injection vulnerability in administration/index.php in chCounter 3.1.3 allows remote attackers to execute arbitrary…
-
Unscored —
The view-source: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey does not properly imple…
-
Unscored —
The JavaScript engine in Mozilla Firefox before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows …
-
Unscored —
Mozilla Firefox before 3.0.9 and SeaMonkey before 1.1.17 allow user-assisted remote attackers to obtain sensitive infor…
-
Unscored —
The browser engine in Mozilla Firefox 3.x before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows…
-
Unscored —CVE-2009-1361 Public exploit
dig.php in GScripts.net DNS Tools allows remote attackers to execute arbitrary commands via shell metacharacters in the…
-
Unscored —
The JavaScript engine in Mozilla Firefox 3.x before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 all…
-
Unscored —CVE-2009-1312 Public exploit
Mozilla Firefox before 3.0.9 and SeaMonkey 1.1.17 do not block javascript: URIs in Refresh headers in HTTP responses, w…
-
Unscored —
The browser engine in Mozilla Firefox before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows rem…
-
Unscored —
The jar: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey does not follow the Content-Dis…
-
Unscored —
The __inet6_check_established function in net/ipv6/inet6_hashtables.c in the Linux kernel before 2.6.29, when Network N…
-
Unscored —
The kill_something_info function in kernel/signal.c in the Linux kernel before 2.6.28 does not consider PID namespaces …
-
Unscored —
fs/nfs/client.c in the Linux kernel before 2.6.23 does not properly initialize a certain structure member that stores t…
-
Unscored —CVE-2009-1337 Public exploit
The exit_notify function in kernel/exit.c in the Linux kernel before 2.6.30-rc1 does not restrict exit signals when the…
-
Unscored —
Unspecified vulnerability in the SCTP sockets implementation in Sun OpenSolaris snv_106 through snv_107 allows local us…