Archive
April 2009
Vulnerabilities first published in this month (UTC), newest first.
257 results · Clear filters · Feed
-
Unscored —CVE-2009-0981 Public exploit
Unspecified vulnerability in the Application Express component in Oracle Database 11.1.0.7 allows remote authenticated …
-
Unscored —
Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4 and 11.1.0.6 allows remote aut…
-
Unscored —CVE-2009-0078 Public exploit
The Windows Management Instrumentation (WMI) provider in Microsoft Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vis…
-
Unscored —CVE-2009-0080 Public exploit
The ThreadPool class in Windows Vista Gold and SP1, and Server 2008, does not properly implement isolation among a set …
-
Unscored —CVE-2009-0079 Public exploit
The RPCSS service in Microsoft Windows XP SP2 and SP3 and Server 2003 SP1 and SP2 does not properly implement isolation…
-
Unscored —
Microsoft Internet Explorer 6 SP1, 6 and 7 on Windows XP SP2 and SP3, 6 and 7 on Windows Server 2003 SP1 and SP2, 7 on …
-
Unscored —CVE-2008-6723 Public exploit
TurnkeyForms Entertainment Portal 2.0 allows remote attackers to bypass authentication and gain administrative access b…
-
Unscored —CVE-2008-6721 Public exploit
SQL injection vulnerability in index.php in AJ Square AJ Article allows remote attackers to execute arbitrary SQL comma…
-
Unscored —CVE-2009-1290 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in the web administration interface in the Advanced Manageme…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Cisco Subscriber Edge Services Manager (SESM) allows remote attackers to in…
-
Unscored —CVE-2009-1288 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in the Advanced Management Module (AMM) on the IBM BladeCenter, inc…
-
Unscored —CVE-2009-1244 Public exploit
Unspecified vulnerability in the virtual machine display function in VMware Workstation 6.5.1 and earlier; VMware Playe…
-
Unscored —CVE-2008-6720 Public exploit
SQL injection vulnerability in admin/adm_login.php in DeltaScripts PHP Links 1.3 and earlier allows remote attackers to…
-
Unscored —CVE-2008-6718 Public exploit
U&M Software JustBookIt 1.0 does not require administrative authentication for all scripts in the admin/ directory, whi…
-
Unscored —CVE-2008-6717 Public exploit
U&M Software Signup 1.0 and 1.1 does not require administrative authentication for all scripts in the admin/ directory,…
-
Unscored —CVE-2008-6716 Public exploit
homeadmin/adminhome.php in Pre ADS Portal 2.0 and earlier does not require administrative authentication, which allows …
-
Unscored —CVE-2008-6719 Public exploit
U&M Software Event Lister (aka JustListIt) 1.0 does not require administrative authentication for all scripts in the ad…
-
Unscored —CVE-2008-6715 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Pre ADS Portal 2.0 and earlier allow remote attackers to inject …
-
Unscored —CVE-2008-6700 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Butterfly Organizer 2.0.0 allow remote attackers to inject arbit…
-
Unscored —CVE-2008-6702 Public exploit
S.T.A.L.K.E.R.: Shadow of Chernobyl 1.0006 and earlier allows remote attackers to cause a denial of service (crash) via…
-
Unscored —CVE-2008-6703 Public exploit
Stack-based buffer overflow in the IPureServer::_Recieve function in S.T.A.L.K.E.R.: Shadow of Chernobyl 1.0006 and ear…
-
Unscored —CVE-2008-6683 Public exploit
Cross-site scripting (XSS) vulnerability in listtest.php in Apartment Search Script allows remote attackers to inject a…
-
Unscored —
admin.php in xeCMS 1.0.0 RC2 and earlier allows remote attackers to bypass authentication and access the admin panel by…
-
Unscored —CVE-2008-6712 Public exploit
The HTTP/XML-RPC service in Crysis 1.21 (game version 1.1.1.6156) and earlier allows remote attackers to cause a denial…
-
Unscored —CVE-2008-6713 Public exploit
World in Conflict (WIC) 1.008 and earlier allows remote attackers to cause a denial of service (access violation and cr…
-
Unscored —CVE-2009-1277 Public exploit
SQL injection vulnerability in index.php in Gravity Board X (GBX) 2.0 BETA allows remote attackers to execute arbitrary…
-
Unscored —CVE-2009-1283 Public exploit
glFusion before 1.1.3 performs authentication with a user-provided password hash instead of a password, which allows re…
-
Unscored —
Buffer overflow in BibTeX 0.99 allows context-dependent attackers to cause a denial of service (memory corruption and c…
-
Unscored —CVE-2009-1278 Public exploit
Static code injection vulnerability in forms/ajax/configure.php in Gravity Board X (GBX) 2.0 BETA allows remote attacke…
-
Unscored —CVE-2009-1282 Public exploit
SQL injection vulnerability in private/system/lib-session.php in glFusion 1.1.2 and earlier allows remote attackers to …
-
Unscored —CVE-2009-1281 Public exploit
Cross-site scripting (XSS) vulnerability in glFusion before 1.1.3 allows remote attackers to inject arbitrary web scrip…
-
Unscored —CVE-2008-6670 Public exploit
Integer overflow in Vertex4 SunAge 1.08.1 and earlier allows remote attackers to cause a denial of service (crash) via …
-
Unscored —CVE-2008-6664 Public exploit
action.php in SH-News 3.0 allows remote attackers to bypass authentication and gain administrator privileges by setting…
-
Unscored —CVE-2008-6674 Public exploit
mailPage.asp in QuickerSite 1.8.5 allows remote attackers to flood e-mail accounts with messages via a large number of …
-
Unscored —CVE-2008-6675 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in QuickerSite 1.8.5 allow remote attackers to inject arbitrary web…
-
Unscored —CVE-2008-6676 Public exploit
QuickerSite 1.8.5 allows remote attackers to obtain sensitive information via a request to showThumb.aspx without any p…
-
Unscored —CVE-2008-6678 Public exploit
SQL injection vulnerability in asp/includes/contact.asp in QuickerSite 1.8.5 allows remote attackers to execute arbitra…
-
Unscored —CVE-2008-6673 Public exploit
asp/bs_login.asp in QuickerSite 1.8.5 does not properly restrict access to administrative functionality, which allows r…
-
Unscored —CVE-2008-6669 Public exploit
viewrq.php in nweb2fax 0.2.7 and earlier allows remote attackers to execute arbitrary code via shell metacharacters in …
-
Unscored —
Multiple directory traversal vulnerabilities in nweb2fax 0.2.7 and earlier allow remote attackers to read arbitrary fil…