24 April 2009

23 results · Feed

• Unscored —
  CVE-2009-1433

  SQL injection vulnerability in File::find (filesystem/File.php) in SilverStripe before 2.3.1 allows remote attackers to…

  Apr 24, 2009
• Unscored —
  CVE-2009-0798

  ACPI Event Daemon (acpid) before 1.0.10 allows remote attackers to cause a denial of service (CPU consumption and conne…

  acpid Debian
  Apr 24, 2009
• Unscored —
  CVE-2009-0164

  The web interface for CUPS before 1.3.10 does not validate the HTTP Host header in a client request, which makes it eas…

  cups Debian
  Apr 24, 2009
• Unscored —
  CVE-2009-0064

  Multiple unspecified vulnerabilities in the Control Center in Symantec Brightmail Gateway Appliance before 8.0.1 allow …

  Apr 24, 2009
• Unscored —
  CVE-2009-0063

  Cross-site scripting (XSS) vulnerability in the Control Center in Symantec Brightmail Gateway Appliance before 8.0.1 al…

  Apr 24, 2009
• Unscored —
  CVE-2009-1192

  The (1) agp_generic_alloc_page and (2) agp_generic_alloc_pages functions in drivers/char/agp/generic.c in the agp subsy…

  Apr 24, 2009
• Unscored —
  CVE-2009-1413

  Google Chrome 1.0.x does not cancel timeouts upon a page transition, which makes it easier for attackers to conduct Uni…

  Apr 24, 2009
• Unscored —
  CVE-2009-1412

  Argument injection vulnerability in the chromehtml: protocol handler in Google Chrome before 1.0.154.59, when invoked b…

  Apr 24, 2009
• Unscored —
  CVE-2009-1414

  Google Chrome 2.0.x lets modifications to the global object persist across a page transition, which makes it easier for…

  Apr 24, 2009
• Unscored —
  CVE-2008-6749 Public exploit

  Multiple SQL injection vulnerabilities in admin/usercheck.php in FlexPHPDirectory 0.0.1, when magic_quotes_gpc is disab…

  Apr 24, 2009
• Unscored —
  CVE-2008-6750 Public exploit

  Unrestricted file upload vulnerability in add.php in FlexPHPDirectory 0.0.1 allows remote attackers to execute arbitrar…

  Apr 24, 2009
• Unscored —
  CVE-2008-6748 Public exploit

  Eval injection vulnerability in Megacubo 5.0.7 allows remote attackers to inject and execute arbitrary PHP code via the…

  Apr 24, 2009
• Unscored —
  CVE-2008-6751 Public exploit

  Unrestricted file upload vulnerability in index.php in the Twitter Clone (TClone) plugin for ReVou Micro Blogging allow…

  Apr 24, 2009
• Unscored —
  CVE-2008-6752 Public exploit

  adminlogin/password.php in the Twitter Clone (TClone) plugin for ReVou Micro Blogging does not verify the original pass…

  Apr 24, 2009
• Unscored —
  CVE-2009-1408 Public exploit

  Cross-site scripting (XSS) vulnerability in webSPELL 4.2.0c allows remote attackers to inject arbitrary web script or H…

  Apr 24, 2009
• Unscored —
  CVE-2009-1407 Public exploit

  Directory traversal vulnerability in config.php in NotFTP 1.3.1 allows remote attackers to read arbitrary files via a .…

  Apr 24, 2009
• Unscored —
  CVE-2009-1406 Public exploit

  Directory traversal vulnerability in cms_detect.php in TotalCalendar 2.4 allows remote attackers to include and execute…

  Apr 24, 2009
• Unscored —
  CVE-2009-1404 Public exploit

  SQL injection vulnerability in admin.php in PastelCMS 0.8.0, when magic_quotes_gpc is disabled, allows remote attackers…

  Apr 24, 2009
• Unscored —
  CVE-2009-1411 Public exploit

  SQL injection vulnerability in events/inc/events.inc.php in the Events plugin for Seditio CMS 1.0 allows remote attacke…

  Apr 24, 2009
• Unscored —
  CVE-2009-1403 Public exploit

  SQL injection vulnerability in product_info.php in CRE Loaded 6.2 allows remote attackers to execute arbitrary SQL comm…

  Apr 24, 2009
• Unscored —
  CVE-2009-1410 Public exploit

  SQL injection vulnerability in index.php in Quick.Cms.Lite 0.5 allows remote attackers to execute arbitrary SQL command…

  Apr 24, 2009
• Unscored —
  CVE-2009-1409 Public exploit

  SQL injection vulnerability in usersettings.php in e107 0.7.15 and earlier, when "Extended User Fields" is enabled and …

  Apr 24, 2009
• Unscored —
  CVE-2009-1405 Public exploit

  Directory traversal vulnerability in index.php in PastelCMS 0.8.0, when magic_quotes_gpc is disabled, allows remote att…

  Apr 24, 2009