Archive
May 2009
Vulnerabilities first published in this month (UTC), newest first.
364 results · Feed
-
Unscored —
Cross-site scripting (XSS) vulnerability in Feed Block 6.x-1.x before 6.x-1.1, a module for Drupal, allows remote authe…
-
Unscored —CVE-2009-1736 Public exploit
SQL injection vulnerability in the GridSupport (GS) Ticket System (com_gsticketsystem) component for Joomla! allows rem…
-
Unscored —
Multiple directory traversal vulnerabilities in NetMechanica NetDecision TFTP Server 4.2 allow remote attackers to read…
-
Unscored —
SQL injection vulnerability in panel/index.php in MLFFAT 2.1 allows remote attackers to execute arbitrary SQL commands …
-
Unscored —
Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 3.0.1.73 allows remote attackers…
-
Unscored —
Use-after-free vulnerability in the dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL 1.0.0 Beta 2 …
-
Unscored —CVE-2009-1252 EPSS 21%
Stack-based buffer overflow in the crypto_recv function in ntp_crypto.c in ntpd in NTP before 4.2.4p7 and 4.2.5 before …
-
Unscored —CVE-2009-1378 EPSS 13%
Multiple memory leaks in the dtls1_process_out_of_seq_message function in ssl/d1_both.c in OpenSSL 0.9.8k and earlier 0…
-
Unscored —CVE-2009-1377 EPSS 11%
The dtls1_buffer_record function in ssl/d1_pkt.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allows remote attackers t…
-
Unscored —
Unspecified vulnerability in Easy Login in the Sender module in HP Remote Graphics Software (RGS) 4.0.0 through 5.2.4 a…
-
Unscored —CVE-2009-1668 Public exploit
TYPSoft FTP Server 1.11 allows remote attackers to cause a denial of service (CPU consumption) by sending an ABOR (abor…
-
Unscored —
Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a…
-
Unscored —CVE-2009-1670 Public exploit
user/index.php in TCPDB 3.8 does not require administrative authentication, which allows remote attackers to add admin …
-
Unscored —
The smarty_function_math function in libs/plugins/function.math.php in Smarty 2.6.22 allows context-dependent attackers…
-
Unscored —CVE-2009-1677 Public exploit
Multiple static code injection vulnerabilities in the saveFeed function in rss/feedcreator.class.php in Bitweaver 2.6 a…
-
Unscored —CVE-2009-1674 Public exploit
Stack-based buffer overflow in Microchip MPLAB IDE 8.30 allows user-assisted remote attackers to execute arbitrary code…
-
Unscored —
Stack-based buffer overflow in Mini-stream CastRipper 2.50.70 allows remote attackers to execute arbitrary code via a l…
-
Unscored —
Multiple unspecified vulnerabilities in CycloMedia CycloScopeLite 2.50.3.0 allow remote attackers to execute arbitrary …
-
Unscored —CVE-2009-1672 Public exploit
The Deployment Toolkit ActiveX control in deploytk.dll 6.0.130.3 in Sun Java SE Runtime Environment (aka JRE) 6 Update …
-
Unscored —CVE-2009-1678 Public exploit
Directory traversal vulnerability in the saveFeed function in rss/feedcreator.class.php in Bitweaver 2.6 and earlier al…
-
Unscored —
Multiple buffer overflows in the Deployment Toolkit ActiveX control in deploytk.dll 6.0.130.3 in Sun Java SE Runtime En…
-
Unscored —
The kernel in Sun Solaris 9 allows local users to cause a denial of service (panic) by calling fstat with a first argum…
-
Unscored —CVE-2008-6810 Public exploit
Multiple SQL injection vulnerabilities in admin/checklogin.php in Venalsur Booking Centre Booking System for Hotels Gro…
-
Unscored —CVE-2008-6809 Public exploit
SQL injection vulnerability in hotel_habitaciones.php in Venalsur Booking Centre Booking System for Hotels Group 2.01 a…
-
Unscored —CVE-2008-6811 Public exploit
Unrestricted file upload vulnerability in image_processing.php in the e-Commerce Plugin 3.4 and earlier for Wordpress a…
-
Unscored —CVE-2009-1659 Public exploit
Unrestricted file upload vulnerability in admin/uploadimage.php in eLitius 1.0 allows remote attackers to bypass intend…
-
Unscored —CVE-2009-1664 Public exploit
myaccount.php in Easy Scripts Answer and Question Script does not verify the original password before changing password…
-
Unscored —CVE-2009-1663 Public exploit
Unrestricted file upload vulnerability in myaccount.php in Easy Scripts Answer and Question Script allows remote attack…
-
Unscored —
Multiple SQL injection vulnerabilities in the Starrating plugin before 0.7.7 for b2evolution allow remote attackers to …
-
Unscored —CVE-2009-1658 Public exploit
Multiple SQL injection vulnerabilities in admin/admin.php in Realty Webware Technologies Realty Web-Base 1.0 allow remo…
-
Unscored —CVE-2009-1661 Public exploit
SQL injection vulnerability in admin/utopic.php in uTopic 1.0, when magic_quotes_gpc is disabled, allows remote attacke…
-
Unscored —CVE-2009-1665 Public exploit
myaccount.php in Easy Scripts Answer and Question Script allows remote attackers to remove arbitrary user accounts via …
-
Unscored —CVE-2009-1660 Public exploit
Stack-based buffer overflow in URUWorks ViPlay3 3.0 and earlier allows remote attackers to cause a denial of service (c…
-
Unscored —CVE-2009-1662 Public exploit
Multiple SQL injection vulnerabilities in admin/login.php in Wright Way Services Recipe Script 5 allow remote attackers…
-
Unscored —CVE-2009-1650 Public exploit
Multiple SQL injection vulnerabilities in photos.php in Shutter 0.1.1 allow remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2009-1653 Public exploit
Directory traversal vulnerability in examples/tbs_us_examples_0view.php in TinyButStrong 3.4.0 allows remote attackers …
-
Unscored —CVE-2009-1651 Public exploit
SQL injection vulnerability in admin/member_details.php in 2daybiz Business Community Script allows remote attackers to…
-
Unscored —CVE-2009-1655 Public exploit
Multiple SQL injection vulnerabilities in myaccount.php in Easy Scripts Answer and Question Script allow remote authent…
-
Unscored —CVE-2009-1649 Public exploit
Directory traversal vulnerability in arch.php in beLive 0.2.3 allows remote attackers to read arbitrary files via a .. …
-
Unscored —
Xerox WorkCentre and WorkCentre Pro 232, 238, 245, 255, 265, 275; and WorkCentre 5632, 5638, 5645, 5655, 5665, 5675, 56…