Archive
April 2009
Vulnerabilities first published in this month (UTC), newest first.
257 results · Clear filters · Feed
-
Unscored —CVE-2009-1313 Public exploit
The nsTextFrame::ClearTextRun function in layout/generic/nsTextFrameThebes.cpp in Mozilla Firefox 3.0.9 allows remote a…
-
Unscored —CVE-2009-1416 Public exploit
lib/gnutls_pk.c in libgnutls in GnuTLS 2.5.0 through 2.6.5 generates RSA keys stored in DSA structures, instead of the …
-
Unscored —
The getAnnots Doc method in the JavaScript API in Adobe Reader and Acrobat 9.1, 8.1.4, 7.1.1, and earlier allows remote…
-
Unscored —CVE-2009-1415 Public exploit
lib/pk-libgcrypt.c in libgnutls in GnuTLS before 2.6.6 does not properly handle invalid DSA signatures, which allows re…
-
Unscored —
The customDictionaryOpen spell method in the JavaScript API in Adobe Reader 9.1, 8.1.4, 7.1.1, and earlier on Linux and…
-
Unscored —CVE-2008-6772 Public exploit
login/register_form.php in YourPlace 1.0.2 and earlier does not check that a username already exists when a new account…
-
Unscored —CVE-2008-6771 Public exploit
YourPlace 1.0.2 and earlier allows remote attackers to obtain sensitive system information via a direct request via a d…
-
Unscored —CVE-2008-6769 Public exploit
Unrestricted file upload vulnerability in upload.php in YourPlace 1.0.2 and earlier allows remote authenticated users t…
-
Unscored —CVE-2008-6768 Public exploit
Unrestricted file upload vulnerability in admin/editor/images.php in K&S Shopsoftware allows remote attackers to execut…
-
Unscored —CVE-2008-6770 Public exploit
YourPlace 1.0.2 and earlier stores sensitive information under the web root with insufficient access control, which all…
-
Unscored —CVE-2008-6773 Public exploit
Static code injection vulnerability in user/internettoolbar/edit.php in YourPlace 1.0.2 and earlier allows remote authe…
-
Unscored —CVE-2009-1487 Public exploit
SQL injection vulnerability in pages/login.php in FunGamez RC1 allows remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2009-1488 Public exploit
Directory traversal vulnerability in admin/load.php in FunGamez RC1 allows remote attackers to include and execute arbi…
-
Unscored —CVE-2009-1480 Public exploit
SQL injection vulnerability in index.php Pragyan CMS 2.6.4 allows remote attackers to execute arbitrary SQL commands vi…
-
Unscored —CVE-2009-1483 Public exploit
Unrestricted file upload vulnerability in upload-file.php in Adam Patterson Studio Lounge Address Book 2.5, as reachabl…
-
Unscored —CVE-2009-1486 Public exploit
Directory traversal vulnerability in pmscript.php in Flatchat 3.0 allows remote attackers to include and execute arbitr…
-
Unscored —CVE-2009-1489 Public exploit
includes/user.php in Fungamez RC1 allows remote attackers to bypass authentication and gain administrative access by se…
-
Unscored —
The Intel LANDesk Common Base Agent (CBA) in Symantec Alert Management System 2 (AMS2), as used in Symantec System Cent…
-
Unscored —CVE-2009-1478 Public exploit
Multiple unspecified vulnerabilities in the DTrace ioctl handlers in Sun Solaris 10, and OpenSolaris before snv_114, al…
-
Unscored —
Multiple stack-based buffer overflows in IAO.EXE in the Intel Alert Originator Service in Symantec Alert Management Sys…
-
Unscored —CVE-2008-6764 Public exploit
Cross-site scripting (XSS) vulnerability in login.php in Silentum LoginSys 1.0.0 allows remote attackers to inject arbi…
-
Unscored —CVE-2008-6758 Public exploit
Cross-site request forgery (CSRF) vulnerability in cart_save.php in ViArt Shop (aka Shopping Cart) 3.5 allows remote at…
-
Unscored —CVE-2008-6761 Public exploit
Static code injection vulnerability in admin/install.php in Flexcustomer 0.0.6 might allow remote attackers to inject a…
-
Unscored —CVE-2008-6763 Public exploit
login2.php in Silentum LoginSys 1.0.0 allows remote attackers to bypass authentication and obtain access to an arbitrar…
-
Unscored —CVE-2008-6765 Public exploit
ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to access the contents of an arbitrary shopping cart via a m…
-
Unscored —CVE-2008-6757 Public exploit
Cross-site scripting (XSS) vulnerability in manuals_search.php in ViArt Shop (aka Shopping Cart) 3.5 allows remote atta…
-
Unscored —CVE-2009-1458 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in admin/index.php in razorCMS before 0.4 allow remote attackers to…
-
Unscored —CVE-2009-1452 Public exploit
Multiple PHP remote file inclusion vulnerabilities in theme/format.php in SMA-DB 0.3.13 allow remote attackers to execu…
-
Unscored —CVE-2009-1453 Public exploit
SQL injection vulnerability in class.eport.php in Tiny Blogr 1.0.0 rc4, when magic_quotes_gpc is disabled, allows remot…
-
Unscored —CVE-2009-1456 Public exploit
Directory traversal vulnerability in admin.php in Malleo 1.2.3 allows remote authenticated administrators to include an…
-
Unscored —CVE-2009-1451 Public exploit
Cross-site scripting (XSS) vulnerability in startpage.php in SMA-DB 0.3.12 allows remote attackers to inject arbitrary …
-
Unscored —CVE-2009-1450 Public exploit
PHP remote file inclusion vulnerability in format.php in SMA-DB 0.3.12 allows remote attackers to execute arbitrary PHP…
-
Unscored —CVE-2009-1449 Public exploit
Stack-based buffer overflow in PortableApps CoolPlayer Portable (aka CoolPlayer+ Portable) 2.19.1 allows remote attacke…
-
Unscored —CVE-2009-1443 Public exploit
Multiple unspecified vulnerabilities in the Server component in OCS Inventory NG before 1.02 have unknown impact and at…
-
Unscored —CVE-2009-1446 Public exploit
Unrestricted file upload vulnerability in upload.php in Elkagroup Image Gallery 1.0 allows remote authenticated users t…
-
Unscored —CVE-2009-1445 Public exploit
Multiple directory traversal vulnerabilities in WebPortal CMS 0.8-beta allow remote attackers to (1) read arbitrary fil…
-
Unscored —CVE-2009-1447 Public exploit
Unrestricted file upload vulnerability in admin/editor/image.php in e-cart.biz Free Shopping Cart allows remote attacke…
-
Unscored —CVE-2009-1444 Public exploit
PHP remote file inclusion vulnerability in indexk.php in WebPortal CMS 0.8-beta allows remote attackers to execute arbi…
-
Unscored —CVE-2009-1436 Public exploit
The db interface in libc in FreeBSD 6.3, 6.4, 7.0, 7.1, and 7.2-PRERELEASE does not properly initialize memory for Berk…
-
Unscored —CVE-2009-1435 Public exploit
NTRtScan.exe in Trend Micro OfficeScan Client 8.0 SP1 and 8.0 SP1 Patch 1 allows local users to cause a denial of servi…