Archive
May 2009
Vulnerabilities first published in this month (UTC), newest first.
204 results · Clear filters · Feed
-
Unscored —CVE-2009-1549 Public exploit
AGTC MyShop 3.2b allows remote attackers to bypass authentication and obtain administrative access setting the log_acce…
-
Unscored —CVE-2009-1526 Public exploit
JBMC Software DirectAdmin before 1.334 allows local users to create or overwrite any file via a symlink attack on an ar…
-
Unscored —CVE-2009-1467 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in IceWarp eMail Server and WebMail Server before 9.4.2 allow remot…
-
Unscored —CVE-2009-1527 Public exploit
Race condition in the ptrace_attach function in kernel/ptrace.c in the Linux kernel before 2.6.30-rc4 allows local user…
-
Unscored —CVE-2009-1468 Public exploit
Multiple SQL injection vulnerabilities in the search form in server/webmail.php in the Groupware component in IceWarp e…
-
Unscored —CVE-2009-1469 Public exploit
CRLF injection vulnerability in the Forgot Password implementation in server/webmail.php in IceWarp eMail Server and We…
-
Unscored —
Heap-based buffer overflow in Sendmail before 8.13.2 allows remote attackers to cause a denial of service (daemon crash…
-
Unscored —
Multiple stack-based buffer overflows in dsmagent.exe in the Remote Agent Service in the IBM Tivoli Storage Manager (TS…
-
Medium 5.3
Directory traversal in Mort Bay Jetty
Directory traversal vulnerability in the HTTP server in Mort Bay Jetty 5.1.14, 6.x before 6.1.17, and 7.x through 7.0.0.M2 allows remote attackers to access arbitrary files via directory traversal sequences in the URI.
-
Unscored —CVE-2008-6791 Public exploit
PumpKIN TFTP Server 2.7.2.0 allows remote attackers to cause a denial of service via a write request with a long mode f…
-
Unscored —CVE-2008-6790 Public exploit
The admin module in MindDezign Photo Gallery 2.2 allows remote attackers to add administrative users and gain privilege…
-
Unscored —CVE-2008-6788 Public exploit
SQL injection vulnerability in MindDezign Photo Gallery 2.2, when magic_quotes_gpc is disabled, allows remote attackers…
-
Unscored —CVE-2008-6789 Public exploit
SQL injection vulnerability in MindDezign Photo Gallery 2.2 allows remote attackers to execute arbitrary SQL commands v…
-
Unscored —CVE-2009-1519 Public exploit
Directory traversal vulnerability in index.php in Pecio CMS 1.1.5 allows remote attackers to read arbitrary files via a…
-
Unscored —CVE-2009-1517 Public exploit
Multiple insecure method vulnerabilities in the Symantec.EasySetup.1 ActiveX control in EasySetupInt.dll 14.0.4.30167 i…
-
Unscored —CVE-2009-1516 Public exploit
Stack-based buffer overflow in the IceWarpServer.APIObject ActiveX control in api.dll in IceWarp Merak Mail Server 9.4.…
-
Unscored —CVE-2009-1514 Public exploit
Google Chrome 1.0.154.53 allows remote attackers to cause a denial of service (NULL pointer dereference and application…
-
Unscored —CVE-2009-1512 Public exploit
Static code injection vulnerability in X-Forum 0.6.2 allows remote authenticated administrators to inject arbitrary PHP…
-
Unscored —CVE-2008-6787 Public exploit
SQL injection vulnerability in administrator/index.php in Lizardware CMS 0.6.0 and earlier allows remote attackers to e…
-
Unscored —CVE-2008-6785 Public exploit
Unrestricted file upload vulnerability in Mini File Host 1.5 allows remote attackers to execute arbitrary code by uploa…
-
Unscored —
GDI+ in Microsoft Windows XP SP3 allows remote attackers to cause a denial of service (infinite loop) via a PNG file th…
-
Unscored —CVE-2009-1509 Public exploit
SQL injection vulnerability in ajaxp_backend.php in MyioSoft AjaxPortal 3.0 allows remote attackers to execute arbitrar…
-
Unscored —CVE-2009-1510 Public exploit
Multiple directory traversal vulnerabilities in KoschtIT Image Gallery 1.82 allow remote attackers to include and execu…
-
Unscored —CVE-2009-1508 Public exploit
SQL injection vulnerability in the xforum_validateUser function in Common.php in X-Forum 0.6.2 allows remote attackers …
-
Unscored —CVE-2008-6777 Public exploit
Multiple SQL injection vulnerabilities in MyPHP Forum 3.0 and earlier allow remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2008-6779 Public exploit
SQL injection vulnerability in the Sarkilar module for PHP-Nuke allows remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2008-6783 Public exploit
SQL injection vulnerability in directory.php in Sites for Scripts (SFS) EZ Home Business Directory allows remote attack…
-
Unscored —CVE-2008-6776 Public exploit
SQL injection vulnerability in viewcomments.php in Scripts For Sites (SFS) EZ Hot or Not allows remote attackers to exe…
-
Unscored —CVE-2008-6781 Public exploit
SQL injection vulnerability in directory.php in Sites for Scripts (SFS) Gaming Directory allows remote attackers to exe…
-
Unscored —CVE-2008-6784 Public exploit
SQL injection vulnerability in directory.php in Scripts For Sites (SFS) EZ Adult Directory allows remote attackers to e…
-
Unscored —CVE-2008-6780 Public exploit
SQL injection vulnerability in directory.php in Scripts for Sites (SFS) SFS EZ Affiliate allows remote attackers to exe…
-
Unscored —CVE-2008-6778 Public exploit
SQL injection vulnerability in viewfaqs.php in Scripts for Sites (SFS) EZ Auction allows remote attackers to execute ar…
-
Unscored —CVE-2008-6782 Public exploit
SQL injection vulnerability in directory.php in Sites for Scripts (SFS) EZ Hosting Directory allows remote attackers to…
-
Unscored —CVE-2009-1503 Public exploit
Multiple SQL injection vulnerabilities in login.php in Tiger Document Management System (DMS) allow remote attackers to…
-
Unscored —CVE-2009-1504 Public exploit
Absolute Form Processor XE 1.5 allows remote attackers to bypass authentication and gain administrative access by setti…
-
Unscored —CVE-2009-1502 Public exploit
Directory traversal vulnerability in plugin.php in S-Cms 1.1 Stable and 1.5.2 allows remote attackers to include and ex…
-
Unscored —CVE-2009-1500 Public exploit
SQL injection vulnerability in index.php in ProjectCMS 1.0 Beta allows remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2009-1506 Public exploit
SQL injection vulnerability in classes/Xp.php in eLitius 1.0 allows remote attackers to execute arbitrary SQL commands …
-
Unscored —CVE-2008-6775 Public exploit
HTC Touch Pro and HTC Touch Cruise vCard allows remote attackers to cause denial of service (CPU consumption, SMS consu…
-
Unscored —CVE-2009-1498 Public exploit
Directory traversal vulnerability in inc/profilemain.php in Game Maker 2k Internet Discussion Boards (iDB) 0.2.5 Pre-Al…