Archive
May 2009
Vulnerabilities first published in this month (UTC), newest first.
204 results · Clear filters · Feed
-
Unscored —CVE-2009-1830 Public exploit
Stack-based buffer overflow in Soulseek 156 and 157 NS allows remote attackers to execute arbitrary code via a long sea…
-
Unscored —
The Nullsoft Modern Skins Support module (gen_ff.dll) in Nullsoft Winamp before 5.552 allows remote attackers to execut…
-
Unscored —CVE-2009-1826 Public exploit
modules/admuser.php in myGesuad 0.9.14 (aka 0.9) does not require administrative authentication, which allows remote au…
-
Unscored —CVE-2009-1828 Public exploit
Mozilla Firefox 3.0.10 allows remote attackers to cause a denial of service (infinite loop, application hang, and memor…
-
Unscored —CVE-2009-1825 Public exploit
modules/admuser.php in myColex 1.4.2 does not require administrative authentication, which allows remote authenticated …
-
Unscored —CVE-2009-1827 Public exploit
The SVG component in Mozilla Firefox 3.0.4 allows remote attackers to cause a denial of service (application hang) via …
-
Unscored —CVE-2009-1824 Public exploit
The ps_drv.sys kernel driver in ArcaBit ArcaVir 2009 Antivirus Protection 9.4.3201.9 and earlier, ArcaVir 2009 Internet…
-
Unscored —CVE-2009-1809 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in myColex 1.4.2 allow remote attackers to inject arbitrary web scr…
-
Unscored —CVE-2009-1812 Public exploit
Multiple SQL injection vulnerabilities in myGesuad 0.9.14 (aka 0.9) allow remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2009-1820 Public exploit
Cross-site scripting (XSS) vulnerability in product.php in 2daybiz Custom T-shirt Design Script allows remote attackers…
-
Unscored —CVE-2009-1822 Public exploit
Multiple PHP remote file inclusion vulnerabilities in the InterJoomla ArtForms (com_artforms) component 2.1b7 for Jooml…
-
Unscored —CVE-2009-1815 Public exploit
Stack-based buffer overflow in Sonic Spot Audioactive Player 1.93b allows remote attackers to execute arbitrary code vi…
-
Unscored —CVE-2009-1816 Public exploit
SQL injection vulnerability in admin.php in My Game Script 2.0 allows remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2009-1818 Public exploit
SQL injection vulnerability in admin/admin_manager.asp in MaxCMS 2.0 allows remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2009-1813 Public exploit
Multiple SQL injection vulnerabilities in admin/index.php in Submitter Script 2 allow remote attackers to execute arbit…
-
Unscored —CVE-2009-1811 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in myGesuad 0.9.14 (aka 0.9) allow remote attackers to inject arbit…
-
Unscored —CVE-2009-1814 Public exploit
SQL injection vulnerability in mail.php in PHPenpals 1.1 and earlier allows remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2009-1817 Public exploit
Multiple buffer overflows in DigiMode Maya 1.0.2 allow remote attackers to execute arbitrary code via a long string in …
-
Unscored —CVE-2009-1810 Public exploit
Multiple SQL injection vulnerabilities in myColex 1.4.2 allow remote attackers to execute arbitrary SQL commands via (1…
-
Unscored —CVE-2009-1819 Public exploit
SQL injection vulnerability in product.php in 2daybiz Custom T-shirt Design Script allows remote attackers to execute a…
-
Unscored —CVE-2009-1821 Public exploit
DMXReady Registration Manager 1.1 stores sensitive information under the web root with insufficient access control, whi…
-
Unscored —CVE-2009-1807 Public exploit
Unspecified vulnerability in Config.dll in Baofeng products 3.09.04.17 and earlier allows remote attackers to execute a…
-
Unscored —CVE-2009-1808 Public exploit
Microsoft Windows XP SP3 allows local users to cause a denial of service (system crash) by making an SPI_SETDESKWALLPAP…
-
Unscored —CVE-2008-6814 Public exploit
Unrestricted file upload vulnerability in image_upload.php in the SimpleBoard (com_simpleboard) component 1.0.1 and ear…
-
Unscored —CVE-2008-6815 Public exploit
mykdownload.php in MyKtools 2.4 does not require administrative authentication, which allows remote attackers to read a…
-
Unscored —CVE-2009-1804 Public exploit
Multiple SQL injection vulnerabilities in admin/index.php in VideoScript.us YouTube Video Script allow remote attackers…
-
Unscored —CVE-2009-1799 Public exploit
Multiple SQL injection vulnerabilities in the getGalleryImage function in st_admin/gallery_output.php in ST-Gallery 0.1…
-
Unscored —
Stack-based buffer overflow in the Chinagames CGAgent ActiveX control 1.x in CGAgent.dll, as distributed in Chinagames …
-
Unscored —CVE-2009-1789 Public exploit
mod/server.mod/servmsg.c in Eggheads Eggdrop and Windrop 1.6.19 and earlier allows remote attackers to cause a denial o…
-
Unscored —CVE-2009-1787 Public exploit
Multiple SQL injection vulnerabilities in PHP Dir Submit (aka WebsiteSubmitter and Submitter Script) allow remote attac…
-
Unscored —CVE-2009-1634 Public exploit
The WebAccess component in Novell GroupWise 7.x before 7.03 HP3 and 8.x before 8.0 HP2 does not properly implement sess…
-
Unscored —CVE-2009-1786 Public exploit
The malloc subsystem in libc in IBM AIX 5.3 and 6.1 allows local users to create or overwrite arbitrary files via a sym…
-
Unscored —
Multiple integer overflows in the msn_slplink_process_msg functions in the MSN protocol handler in (1) libpurple/protoc…
-
Unscored —CVE-2009-1776 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in FormMail.pl in Matt Wright FormMail 1.92, and possibly earlier, …
-
Unscored —CVE-2009-1778 Public exploit
SQL injection vulnerability in the new user registration feature in BigACE CMS 2.5, when magic_quotes_gpc is disabled, …
-
Unscored —CVE-2009-1779 Public exploit
PHP remote file inclusion vulnerability in admin.php in Frax.dk Php Recommend 1.3 and earlier allows remote attackers t…
-
Unscored —CVE-2009-1777 Public exploit
CRLF injection vulnerability in FormMail.pl in Matt Wright FormMail 1.92, and possibly earlier, allows remote attackers…
-
Unscored —CVE-2009-1780 Public exploit
admin.php in Frax.dk Php Recommend 1.3 and earlier does not require authentication when the user password is changed, w…
-
Unscored —CVE-2009-1781 Public exploit
Static code injection vulnerability in admin.php in Frax.dk Php Recommend 1.3 and earlier allows remote attackers to in…
-
Unscored —CVE-2009-1766 Public exploit
SQL injection vulnerability in index.php in LightOpenCMS 0.1 allows remote attackers to execute arbitrary SQL commands …