27 April 2009

19 results · Feed

• Unscored —
  CVE-2008-6755

  ZoneMinder 1.23.3 on Fedora 10 sets the ownership of /etc/zm.conf to the apache user account, and sets the permissions …

  zoneminder Debian
  Apr 27, 2009
• Unscored —
  CVE-2008-6756

  ZoneMinder 1.23.3 on Gentoo Linux uses 0644 permissions for /etc/zm.conf, which allows local users to obtain the databa…

  zoneminder Debian
  Apr 27, 2009
• Unscored —
  CVE-2009-1448

  Cross-site scripting (XSS) vulnerability in apricot.php in LovPop.net APRICOT, probably 1.20, allows remote attackers t…

  Apr 27, 2009
• Medium —
  CVE-2009-1190

  Spring Framework Inefficient Regular Expression Complexity

  Algorithmic complexity vulnerability in the java.util.regex.Pattern.compile method in Sun Java Development Kit (JDK) before 1.6, when used with spring.jar in SpringSource Spring Framework 1.1.0 through 2.5.6 and 3.0.0.M1 through 3.0.0.M2 and dm Server 1.0.0 t…

  org.springframework:spring-core Maven
  Apr 27, 2009
• Unscored —
  CVE-2009-1449 Public exploit

  Stack-based buffer overflow in PortableApps CoolPlayer Portable (aka CoolPlayer+ Portable) 2.19.1 allows remote attacke…

  Apr 27, 2009
• Unscored —
  CVE-2008-6754

  The Personal Sticky Threads addon 1.0.3c for vBulletin allows remote authenticated users to read the title, author, and…

  Apr 27, 2009
• Unscored —
  CVE-2009-1443 Public exploit

  Multiple unspecified vulnerabilities in the Server component in OCS Inventory NG before 1.02 have unknown impact and at…

  ocsinventory-server Debian
  Apr 27, 2009
• Unscored —
  CVE-2009-1446 Public exploit

  Unrestricted file upload vulnerability in upload.php in Elkagroup Image Gallery 1.0 allows remote authenticated users t…

  Apr 27, 2009
• Unscored —
  CVE-2009-1445 Public exploit

  Multiple directory traversal vulnerabilities in WebPortal CMS 0.8-beta allow remote attackers to (1) read arbitrary fil…

  Apr 27, 2009
• Unscored —
  CVE-2009-1447 Public exploit

  Unrestricted file upload vulnerability in admin/editor/image.php in e-cart.biz Free Shopping Cart allows remote attacke…

  Apr 27, 2009
• Unscored —
  CVE-2009-1444 Public exploit

  PHP remote file inclusion vulnerability in indexk.php in WebPortal CMS 0.8-beta allows remote attackers to execute arbi…

  Apr 27, 2009
• Unscored —
  CVE-2008-6753

  SQL injection vulnerability in SilverStripe before 2.2.2 allows remote attackers to execute arbitrary SQL commands via …

  Apr 27, 2009
• Unscored —
  CVE-2009-1440

  Incomplete blacklist vulnerability in DownloadListCtrl.cpp in amule 2.2.4 allows remote attackers to conduct argument i…

  amule Debian
  Apr 27, 2009
• Unscored —
  CVE-2009-1436 Public exploit

  The db interface in libc in FreeBSD 6.3, 6.4, 7.0, 7.1, and 7.2-PRERELEASE does not properly initialize memory for Berk…

  Apr 27, 2009
• Unscored —
  CVE-2009-1439

  Buffer overflow in fs/cifs/connect.c in CIFS in the Linux kernel 2.6.29 and earlier allows remote attackers to cause a …

  Apr 27, 2009
• Unscored —
  CVE-2009-1438

  Integer overflow in the CSoundFile::ReadMed function (src/load_med.cpp) in libmodplug before 0.8.6, as used in gstreame…

  libmodplug Debian
  Apr 27, 2009
• Unscored —
  CVE-2009-1435 Public exploit

  NTRtScan.exe in Trend Micro OfficeScan Client 8.0 SP1 and 8.0 SP1 Patch 1 allows local users to cause a denial of servi…

  Apr 27, 2009
• Unscored —
  CVE-2009-1189

  The _dbus_validate_signature_with_reason function (dbus-marshal-validate.c) in D-Bus (aka DBus) before 1.2.14 uses inco…

  dbus Debian
  Apr 27, 2009
• Unscored —
  CVE-2009-1437 Public exploit EPSS 14%

  Stack-based buffer overflow in PortableApps CoolPlayer Portable (aka CoolPlayer+ Portable) 2.19.6 and earlier allows re…

  Apr 27, 2009