Archive
May 2009
Vulnerabilities first published in this month (UTC), newest first.
364 results · Feed
-
Unscored —
Launch Services in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows remote attackers to cause a denial of service (…
-
Unscored —
CoreGraphics in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touc…
-
Unscored —
Heap-based buffer overflow in Apple Type Services (ATS) in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows remote …
-
Unscored —
Help Viewer in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 does not verify that HTML pathnames are located in a regis…
-
Unscored —
Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows local users to gain privileges or cause a denial of service (appli…
-
Unscored —
Heap-based buffer overflow in CFNetwork in Apple Mac OS X 10.5 before 10.5.7 allows remote web servers to execute arbit…
-
Unscored —CVE-2009-0224 EPSS 30%
Microsoft Office PowerPoint 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; PowerPoint Viewer 2003 and 2007 SP1 and…
-
Unscored —CVE-2009-0220 EPSS 37%
Multiple stack-based buffer overflows in the PowerPoint 4.0 importer (PP4X32.DLL) in Microsoft Office PowerPoint 2000 S…
-
Unscored —CVE-2009-0227 EPSS 36%
Stack-based buffer overflow in the PowerPoint 4.2 conversion filter (PP4X32.DLL) in Microsoft Office PowerPoint 2000 SP…
-
Unscored —CVE-2009-0222 EPSS 32%
Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via craf…
-
Unscored —CVE-2009-0226 EPSS 35%
Stack-based buffer overflow in the PowerPoint 4.2 conversion filter in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, …
-
Unscored —CVE-2009-0221 EPSS 38%
Integer overflow in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code…
-
Unscored —CVE-2009-0223 EPSS 28%
Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via craf…
-
Unscored —CVE-2009-0225 EPSS 31%
Microsoft Office PowerPoint 2002 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file…
-
Unscored —CVE-2009-1129 EPSS 36%
Multiple stack-based buffer overflows in the PowerPoint 95 importer (PP7X32.DLL) in Microsoft Office PowerPoint 2000 SP…
-
Unscored —CVE-2009-1130 EPSS 39%
Heap-based buffer overflow in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3, and PowerPoint in Microsoft Office 200…
-
Unscored —CVE-2009-1131 EPSS 36%
Multiple stack-based buffer overflows in Microsoft Office PowerPoint 2000 SP3 allow remote attackers to execute arbitra…
-
Unscored —CVE-2009-1128 EPSS 27%
Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via craf…
-
Unscored —CVE-2009-1137 EPSS 32%
Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via craf…
-
Unscored —CVE-2008-6808 Public exploit
SQL injection vulnerability in links.php in Scripts for Sites (SFS) EZ Link Directory allows remote attackers to execut…
-
Unscored —CVE-2008-6806 Public exploit
Unrestricted file upload vulnerability in includes/imageupload.php in 7Shop 1.1 and earlier allows remote attackers to …
-
Unscored —CVE-2008-6807 Public exploit
PHP remote file inclusion vulnerability in ListRecords.php in osprey 1.0a4.1 allows remote attackers to execute arbitra…
-
Unscored —CVE-2009-1620 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in input.php in MataChat allow remote attackers to inject arbitrary…
-
Unscored —CVE-2009-1618 Public exploit
Teraway LiveHelp 2.0 allows remote attackers to bypass authentication and gain administrative access via a pwd=&lvl=1&u…
-
Unscored —CVE-2009-1624 Public exploit
Directory traversal vulnerability in index.php in Dew-NewPHPLinks 2.0 allows remote attackers to read arbitrary files v…
-
Unscored —CVE-2009-1626 Public exploit
SQL injection vulnerability in public/specific.php in EZ-Blog before Beta 2 20090427, when magic_quotes_gpc is disabled…
-
Unscored —CVE-2009-1627 Public exploit
Stack-based buffer overflow in Streaming Download Project (SDP) Downloader 2.3.0 allows remote attackers to execute arb…
-
Unscored —CVE-2009-1619 Public exploit
Teraway FileStream 1.0 allows remote attackers to bypass authentication and gain administrative access by setting the t…
-
Unscored —CVE-2009-1625 Public exploit
Directory traversal vulnerability in index.php in Thickbox Gallery 2 allows remote attackers to include and execute arb…
-
Unscored —CVE-2009-1621 Public exploit
Directory traversal vulnerability in index.php in OpenCart 1.1.8 allows remote attackers to read arbitrary files via a …
-
Unscored —CVE-2009-1617 Public exploit
Teraway LinkTracker 1.0 allows remote attackers to bypass authentication and gain administrative access via a userid=1&…
-
Unscored —CVE-2009-1622 Public exploit
SQL injection vulnerability in user.php in EcShop 2.5.0 allows remote attackers to execute arbitrary SQL commands via t…
-
Unscored —CVE-2009-1623 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Dew-NewPHPLinks 2.0 allows remote attackers to inject arbitrar…
-
Unscored —CVE-2008-6805 Public exploit
Multiple SQL injection vulnerabilities in Mic_Blog 0.0.3, when magic_quotes_gpc is disabled, allow remote attackers to …
-
Unscored —CVE-2008-6804 Public exploit
Tribiq CMS 5.0.9a beta allows remote attackers to bypass authentication and gain administrative access by setting the C…
-
Unscored —CVE-2008-6803 Public exploit
SQL injection vulnerability in diziler.asp in Yigit Aybuga Dizi Portali allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2009-1616 Public exploit
Cross-site scripting (XSS) vulnerability in docs/showdoc.php in Coppermine Photo Gallery (CPG) before 1.4.22 allows rem…
-
Unscored —CVE-2009-1613 Public exploit
Multiple SQL injection vulnerabilities in leap.php in Leap CMS 0.1.4, when magic_quotes_gpc is disabled, allow remote a…
-
Unscored —CVE-2009-1614 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Leap CMS 0.1.4 allow remote attackers to inject arbitrary web sc…
-
Unscored —CVE-2009-1615 Public exploit
Unrestricted file upload vulnerability in Leap CMS 0.1.4 allows remote attackers to execute arbitrary code by uploading…