Archive
May 2009
Vulnerabilities first published in this month (UTC), newest first.
364 results · Feed
-
Unscored —CVE-2009-1767 Public exploit
admin/edituser.php in 2daybiz Template Monster Clone does not require administrative authentication, which allows remot…
-
Unscored —CVE-2009-1764 Public exploit
SQL injection vulnerability in inc/ajax.asp in MaxCMS 2.0 allows remote attackers to execute arbitrary SQL commands via…
-
Unscored —
Directory traversal vulnerability in plugins/ddb/foot.php in Strawberry 1.1.1 allows remote attackers to include and ex…
-
Unscored —
Cross-site scripting (XSS) vulnerability in activeCollab 2.1 Corporate allows remote attackers to inject arbitrary web …
-
Unscored —CVE-2009-1771 Public exploit
index.php in Flyspeck CMS 6.8 does not require administrative authentication for the updateExistingContent action, whic…
-
Unscored —
Unspecified vulnerability in the Solaris Secure Digital slot driver (aka sdhost) in Sun OpenSolaris snv_105 through snv…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the WebAccess login page (aka gw/webacc) in Novell GroupWise 7.x…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the WebAccess component in Novell GroupWise 7.x before 7.03 HP3 …
-
Unscored —
The hypervisor_callback function in Xen, possibly before 3.4.0, as applied to the Linux kernel 2.6.30-rc4, 2.6.18, and …
-
Unscored —
SLiM Simple Login Manager 1.3.0 places the X authority magic cookie (mcookie) on the command line when invoking xauth f…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in Transmission 1.5 before 1.53 and 1.6 before 1.61 allows remote attac…
-
Unscored —
Off-by-one error in the packet_read_query_section function in packet.c in nsd 3.2.1, and process_query_section in query…
-
Unscored —
Stack-based buffer overflow in the btFiles::BuildFromMI function (trunk/btfiles.cpp) in Enhanced CTorrent (aka dTorrent…
-
Unscored —
Coccinelle 0.1.7 allows local users to overwrite arbitrary files via a symlink attack on an unspecified "result file."
-
Unscored —CVE-2008-6812 Public exploit
SQL injection vulnerability in bukutamu.php in phpWebNews 0.2 MySQL Edition allows remote attackers to execute arbitrar…
-
Unscored —CVE-2008-6813 Public exploit
SQL injection vulnerability in index.php in phpWebNews 0.2 MySQL Edition allows remote attackers to execute arbitrary S…
-
Unscored —CVE-2009-1749 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Catviz 0.4.0 beta 1 allow remote attackers to injec…
-
Unscored —CVE-2009-1750 Public exploit
Unrestricted file upload vulnerability in VidSharePro allows remote authenticated users to execute arbitrary code by up…
-
Unscored —CVE-2009-1752 Public exploit
exJune Office Message System 1 does not properly restrict access to (1) configure.asp and (2) addmessage2.asp, which al…
-
Unscored —CVE-2009-1747 Public exploit
SQL injection vulnerability in index.php in 26th Avenue bSpeak 1.10 allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2009-1751 Public exploit
SQL injection vulnerability in list_list.php in Realty Webware Technologies Web-Base 1.0 allows remote attackers to exe…
-
Unscored —CVE-2009-1748 Public exploit
Multiple directory traversal vulnerabilities in index.php in Catviz 0.4.0 Beta 1 allow remote attackers to read arbitra…
-
Unscored —
IBM WebSphere Partner Gateway (WPG) 6.1.0 before 6.1.0.1 and 6.1.1 before 6.1.1.1 allows remote authenticated users to …
-
Unscored —
Armorlogic Profense Web Application Firewall before 2.2.22, and 2.4.x before 2.4.4, has a default root password hash, a…
-
Unscored —CVE-2009-1746 Public exploit
SQL injection vulnerability in berita.php in Dian Gemilang DGNews 3.0 Beta allows remote attackers to execute arbitrary…
-
Unscored —
Armorlogic Profense Web Application Firewall before 2.2.22, and 2.4.x before 2.4.4, does not properly implement the "po…
-
Unscored —CVE-2009-1161 EPSS 17%
Directory traversal vulnerability in the TFTP service in Cisco CiscoWorks Common Services (CWCS) 3.0.x through 3.2.x on…
-
Unscored —CVE-2009-1593 Public exploit
Armorlogic Profense Web Application Firewall before 2.2.22, and 2.4.x before 2.4.4, does not properly implement the "ne…
-
Unscored —CVE-2009-1729 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Communications Express 6 2005Q4 (aka 6.2) and 6.…
-
Unscored —CVE-2009-1744 Public exploit
InstallHFZ.exe 6.5.201.0 in Pinnacle Hollywood Effects 6, a module in Pinnacle Systems Pinnacle Studio 12, allows remot…
-
Unscored —CVE-2009-1743 Public exploit
Directory traversal vulnerability in InstallHFZ.exe 6.5.201.0 in Pinnacle Hollywood Effects 6, a module in Pinnacle Sys…
-
Unscored —
Directory traversal vulnerability in bom.php in MyPic 2.1 allows remote attackers to list files in arbitrary directorie…
-
Unscored —CVE-2009-1742 Public exploit
code.php in PC4Arb Pc4 Uploader 9.0 and earlier makes it easier for remote attackers to conduct SQL injection attacks v…
-
Unscored —CVE-2009-1734 Public exploit
SQL injection vulnerability in listing_video.php in VidSharePro allows remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2009-1735 Public exploit
Cross-site scripting (XSS) vulnerability in search.php in VidSharePro allows remote attackers to inject arbitrary web s…
-
Unscored —
Multiple heap-based buffer overflows in the D-Link MPEG4 Viewer ActiveX Control (csviewer.ocx) 2.11.918.2006 allow remo…
-
Unscored —CVE-2009-1741 Public exploit
Multiple SQL injection vulnerabilities in login.php in DM FileManager 3.9.2, when magic_quotes_gpc is disabled, allow r…
-
Unscored —CVE-2009-1739 Public exploit
PAD Site Scripts 3.6 allows remote attackers to bypass authentication and gain privileges as other users, including adm…
-
Unscored —
Cross-site scripting (XSS) vulnerability in admin/usermanager in IPplan 4.91a allows remote attackers to inject arbitra…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in IPplan 4.91a allows remote attackers to hijack the authentication of…