Archive
April 2009
Vulnerabilities first published in this month (UTC), newest first.
257 results · Clear filters · Feed
-
Unscored —CVE-2009-1352 Public exploit
Stack-based buffer overflow in Dawningsoft PowerCHM 5.7 allows remote attackers to cause a denial of service (applicati…
-
Unscored —CVE-2009-1356 Public exploit
Stack-based buffer overflow in Elecard AVC HD Player allows remote attackers to execute arbitrary code via a long MP3 f…
-
Unscored —CVE-2009-1349 Public exploit
Cross-site scripting (XSS) vulnerability in C2Net Stronghold 2.3 allows remote attackers to inject arbitrary web script…
-
Unscored —CVE-2008-6731 Public exploit
Unrestricted file upload vulnerability in submitlink.php in FlexPHPLink Pro 0.0.7 allows remote attackers to execute ar…
-
Unscored —CVE-2008-6729 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in password.php in PHPmotion 2.1 and earlier allow remote at…
-
Unscored —CVE-2008-6730 Public exploit
Multiple SQL injection vulnerabilities in admin/usercheck.php in FlexPHPLink Pro 0.0.6 and 0.0.7, when magic_quotes_gpc…
-
Unscored —CVE-2008-6727 Public exploit
Cross-site scripting (XSS) vulnerability in Ultimate PHP Board (UPB) 2.2.2, 2.2.1, and earlier 2.x versions allows remo…
-
Unscored —CVE-2009-1347 Public exploit
Multiple SQL injection vulnerabilities in stats/index.php in chCounter 3.1.3 allow remote attackers to execute arbitrar…
-
Unscored —CVE-2009-1346 Public exploit
SQL injection vulnerability in publico/ficha.php in NetHoteles 3.0 allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2009-1345 Public exploit
SQL injection vulnerability in document.php in cpCommerce 1.2.8 allows remote attackers to execute arbitrary SQL comman…
-
High —
Apache Geronimo Application Server multiple directory traversal vulnerabilities
Multiple directory traversal vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1 through 2.1.3 on Windows allow remote attackers to upload files to arbitrary directories via directory traversal sequences in the (1) grou…
-
Medium —
Apache Geronimo Application Server multiple cross-site scripting (XSS) vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1 through 2.1.3 allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) ip, (3) username, or (4) descript…
-
Medium —
Apache Geronimo Application Server CSRF vulnerabilities
Multiple cross-site request forgery (CSRF) vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1 through 2.1.3 allow remote attackers to hijack the authentication of administrators for requests that (1) change the web adm…
-
Unscored —
Microsoft Internet Explorer 7 and 8 on Windows XP and Vista allows remote attackers to cause a denial of service (appli…
-
Unscored —
Integer overflow in Microsoft Windows Media Player (WMP) 11.0.5721.5260 allows remote attackers to cause a denial of se…
-
Unscored —
udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to g…
-
Unscored —CVE-2009-1334 Public exploit
Cross-site scripting (XSS) vulnerability in login/FilepathLogin.html in IBM Tivoli Continuous Data Protection (CDP) for…
-
Unscored —CVE-2008-6726 Public exploit
Multiple directory traversal vulnerabilities in CMScout 2.06, when register_globals is enabled, allow remote attackers …
-
Unscored —CVE-2008-6725 Public exploit
Multiple SQL injection vulnerabilities in CMScout 2.06 allow remote authenticated users to execute arbitrary SQL comman…
-
Unscored —CVE-2009-1321 Public exploit
Cross-site scripting (XSS) vulnerability in search.asp in ASP Product Catalog 1.0 allows remote attackers to inject arb…
-
Unscored —CVE-2009-1328 Public exploit
Stack-based buffer overflow in Mini-stream RM-MP3 Converter 3.0.0.7 allows remote attackers to execute arbitrary code v…
-
Unscored —CVE-2009-1316 Public exploit
Multiple SQL injection vulnerabilities in AbleSpace 1.0 allow remote attackers to execute arbitrary SQL commands via th…
-
Unscored —CVE-2009-1322 Public exploit
ASP Product Catalog 1.0 stores sensitive information under the web root with insufficient access control, which allows …
-
Unscored —
Stack-based buffer overflow in Mini-stream ASX to MP3 Converter 3.0.0.7 allows remote attackers to execute arbitrary co…
-
Unscored —CVE-2009-1319 Public exploit
Directory traversal vulnerability in includes/ini.inc.php in GuestCal 2.1 allows remote attackers to include and execut…
-
Unscored —
Stack-based buffer overflow in Easy RM to MP3 Converter allows remote attackers to execute arbitrary code via a long fi…
-
Unscored —CVE-2009-1317 Public exploit
Multiple SQL injection vulnerabilities in Aqua CMS 1.1, when magic_quotes_gpc is disabled, allow remote attackers to ex…
-
Unscored —CVE-2009-1325 Public exploit
Stack-based buffer overflow in Mini-stream Ripper 3.0.1.1 allows remote attackers to execute arbitrary code via a long …
-
Unscored —CVE-2009-1318 Public exploit
Directory traversal vulnerability in index.php in Jamroom 3.1.2, 3.2.3 through 3.2.6, 4.0.2, and possibly other version…
-
Unscored —CVE-2009-1326 Public exploit
Stack-based buffer overflow in Mini-stream RM Downloader 3.0.0.9 allows remote attackers to execute arbitrary code via …
-
Unscored —CVE-2009-1315 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in AbleSpace 1.0 allow remote attackers to inject arbitrary web scr…
-
Unscored —CVE-2009-1329 Public exploit
Stack-based buffer overflow in Mini-stream Shadow Stream Recorder 3.0.1.7 allows remote attackers to execute arbitrary …
-
Unscored —CVE-2009-1323 Public exploit
SQL injection vulnerability in body.asp in Web File Explorer 3.1 allows remote attackers to execute arbitrary SQL comma…
-
Unscored —CVE-2009-1327 Public exploit
Stack-based buffer overflow in Mini-stream WM Downloader 3.0.0.9 allows remote attackers to execute arbitrary code via …
-
Unscored —
body.asp in Web File Explorer 3.1 allows remote attackers to create arbitrary files and execute arbitrary code via the …
-
Unscored —
Insecure method vulnerability in the KWEdit ActiveX control in SAP GUI 6.40 Patch 29 (KWEDIT.DLL 6400.1.1.41) and 7.10 …
-
Unscored —
Static code injection vulnerability in the getConfigFile function in setup/lib/ConfigFile.class.php in phpMyAdmin 3.x b…
-
Unscored —CVE-2009-1294 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in web/guest/home in the Liferay 4.3.0 portal in Novell Teaming 1.0…
-
Unscored —
Multiple stack-based buffer overflows in the Whale Client Components ActiveX control (WhlMgr.dll), as used in Microsoft…
-
Unscored —
Unspecified vulnerability in the Listener component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1…