Archive
May 2009
Vulnerabilities first published in this month (UTC), newest first.
364 results · Feed
-
Unscored —CVE-2009-1652 Public exploit
admin/adminaddeditdetails.php in Business Community Script does not properly restrict access, which allows remote attac…
-
Unscored —CVE-2009-1654 Public exploit
Cross-site scripting (XSS) vulnerability in questiondetail.php in Easy Scripts Answer and Question Script allows remote…
-
Unscored —
Multiple buffer overflows in the CMU Cyrus SASL library before 2.1.23 might allow remote attackers to execute arbitrary…
-
Unscored —CVE-2009-1646 Public exploit
Stack-based buffer overflow in Mini-stream RM Downloader 3.0.0.9 allows remote attackers to execute arbitrary code via …
-
Unscored —CVE-2009-1643 Public exploit
Stack-based buffer overflow in Sorinara Soritong MP3 Player 1.0 allows remote attackers to execute arbitrary code via a…
-
Unscored —
Stack-based buffer overflow in Nucleus Data Recovery Kernel Recovery for Macintosh 4.04 allows user-assisted attackers …
-
Unscored —CVE-2009-1637 Public exploit
profile.php in Simple Customer 1.3 does not require administrative authentication, which allows remote attackers to cha…
-
Unscored —CVE-2009-1642 Public exploit
Multiple stack-based buffer overflows in Mini-stream ASX to MP3 Converter 3.0.0.7 allow remote attackers to execute arb…
-
Unscored —CVE-2009-1647 Public exploit
Heap-based buffer overflow in popcorn.exe in Ultrafunk Popcorn 1.87 allows remote POP3 servers to cause a denial of ser…
-
Unscored —CVE-2009-1638 Public exploit
Techno Dreams Job Career Package 3.0 allows remote attackers to bypass authentication and obtain administrative access …
-
Unscored —
Stack-based buffer overflow in Nucleus Data Recovery Kernel Recovery for Novell 4.03 allows user-assisted attackers to …
-
Unscored —CVE-2009-1645 Public exploit
Multiple stack-based buffer overflows in Mini-stream Easy RM-MP3 Converter 3.0.0.7 allow remote attackers to execute ar…
-
Unscored —
Multiple stack-based buffer overflows in Mini-stream Ripper 3.0.1.1 allow remote attackers to execute arbitrary code vi…
-
Unscored —CVE-2009-1644 Public exploit
Stack-based buffer overflow in Sorinara Streaming Audio Player 0.9 allows remote attackers to execute arbitrary code vi…
-
Unscored —
Unspecified vulnerability in the dpwinsup module (dpwinsup.dll) for dpwingad (dpwingad.exe) in HP Data Protector Expres…
-
Unscored —
Session fixation vulnerability in SquirrelMail before 1.4.18 allows remote attackers to hijack web sessions via a craft…
-
Unscored —
Application Access Server (A-A-S) 2.0.48 has "wildbat" as its default password for the admin account, which makes it ea…
-
Unscored —
The Mailer component in Evolution 2.26.1 and earlier uses world-readable permissions for the .evolution directory, and …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail before 1.4.18 and NaSMail before 1.7 allow remote a…
-
Unscored —
The nfs_permission function in fs/nfs/dir.c in the NFS client implementation in the Linux kernel 2.6.29.3 and earlier, …
-
Unscored —
Application Access Server (A-A-S) 2.0.48 stores (1) passwords and (2) the port keyword in cleartext in aas.ini, which a…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in index.aas in Application Access Server (A-A-S) 2.0.48 all…
-
Unscored —
ajaxterm.js in AjaxTerm 0.10 and earlier generates session IDs with predictable random numbers based on certain JavaScr…
-
Unscored —
functions/mime.php in SquirrelMail before 1.4.18 does not protect the application's content from Cascading Style Sheets…
-
Unscored —
The map_yp_alias function in functions/imap_general.php in SquirrelMail before 1.4.18 and NaSMail before 1.7 allows rem…
-
Unscored —
Multiple memory leaks in Ipsec-tools before 0.7.2 allow remote attackers to cause a denial of service (memory consumpti…
-
Unscored —
Array index error in the insertItemBefore method in WebKit, as used in Apple Safari before 3.2.3 and 4 Public Beta, iPh…
-
Unscored —
Array index error in the xnu (Mach) kernel in Apple Mac OS X 10.5 before 10.5.7 allows local users to gain privileges o…
-
Unscored —
Integer underflow in CoreGraphics in Apple Mac OS X 10.5 before 10.5.7, iPhone OS 1.0 through 2.2.1, and iPhone OS for …
-
Unscored —CVE-2009-0162 Public exploit
Cross-site scripting (XSS) vulnerability in Safari before 3.2.3, and 4 Public Beta, on Apple Mac OS X 10.5 before 10.5.…
-
Unscored —
Stack-based buffer overflow in Apple Mac OS X 10.5 before 10.5.7 allows local users to gain privileges or cause a denia…
-
Unscored —
CFNetwork in Apple Mac OS X 10.5 before 10.5.7 does not properly parse noncompliant Set-Cookie headers, which allows re…
-
Unscored —
Integer underflow in QuickDraw Manager in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7, and Apple QuickTime before 7.6…
-
Unscored —
QuickDraw Manager in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows remote attackers to execute arbitrary code or…
-
Unscored —
Help Viewer in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 does not verify that certain Cascading Style Sheets (CSS) …
-
Unscored —
iChat in Apple Mac OS X 10.5 before 10.5.7 disables SSL for AOL Instant Messenger (AIM) communication in certain circum…
-
Unscored —
The OpenSSL::OCSP module for Ruby in Apple Mac OS X 10.5 before 10.5.7 misinterprets an unspecified invalid response as…
-
Unscored —
International Components for Unicode (ICU) 4.0, 3.6, and other 3.x versions, as used in Apple Mac OS X 10.5 before 10.5…
-
Unscored —
Stack-based buffer overflow in telnet in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows remote attackers to execu…
-
Unscored —
The Microsoft Office Spotlight Importer in Spotlight in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 does not properly…