Archive
May 2009
Vulnerabilities first published in this month (UTC), newest first.
364 results · Feed
-
Unscored —CVE-2008-6796 Public exploit
SQL injection vulnerability in manager/login.php in Pre Projects Pre Real Estate Listings allows remote attackers to ex…
-
Unscored —
Multiple integer overflows in Skia, as used in Google Chrome 1.x before 1.0.154.64 and 2.x, and possibly Android, might…
-
Unscored —
Heap-based buffer overflow in the ParamTraits<SkBitmap>::Read function in Google Chrome before 1.0.154.64 allows attack…
-
Unscored —
Multiple stack-based buffer overflows in the putstring function in find.c in Cscope before 15.6 allow user-assisted rem…
-
Unscored —
The BGP daemon (bgpd) in Quagga 0.99.11 and earlier allows remote attackers to cause a denial of service (crash) via an…
-
Unscored —
racoon/isakmp_frag.c in ipsec-tools before 0.7.2 allows remote attackers to cause a denial of service (crash) via craft…
-
Unscored —
xvfb-run 1.6.1 in Debian GNU/Linux, Ubuntu, Fedora 10, and possibly other operating systems place the magic cookie (MCO…
-
Unscored —
Unspecified vulnerability in Drupal 5.x before 5.17 and 6.x before 6.11, as used in vbDrupal before 5.17.0, allows user…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Drupal 5.x before 5.17 and 6.x before 6.11, as used in vbDrupal before 5.17…
-
Unscored —
The Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 sends configuration data in response…
-
Unscored —
The Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 stores passwords and wireless-networ…
-
Unscored —CVE-2009-1553 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in the Admin Console in Sun GlassFish Enterprise Server 2.1 allow r…
-
Unscored —CVE-2009-1561 Public exploit
Cross-site request forgery (CSRF) vulnerability in administration.cgi on the Cisco Linksys WRT54GC router with firmware…
-
Unscored —
img/main.cgi on the Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 allows remote authen…
-
Unscored —CVE-2009-1557 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities on the Cisco Linksys WVC54GCA wireless video camera with firmware 1…
-
Unscored —CVE-2009-1554 Public exploit
Cross-site scripting (XSS) vulnerability in ThemeServlet.java in Sun Woodstock 4.2, as used in Sun GlassFish Enterprise…
-
Unscored —
Absolute path traversal vulnerability in adm/file.cgi on the Cisco Linksys WVC54GCA wireless video camera with firmware…
-
Unscored —
Directory traversal vulnerability in adm/file.cgi on the Cisco Linksys WVC54GCA wireless video camera with firmware 1.0…
-
Unscored —
Unspecified vulnerability in the IGMP driver in SCO Unixware Release 7.1.4 Maintenance Pack 4 allows attackers to cause…
-
Unscored —CVE-2009-1550 Public exploit
Zakkis Technology ABC Advertise 1.0 does not properly restrict access to admin.inc.php, which allows remote attackers t…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in Qt quickteam 2 allow remote attackers to execute arbitrary PHP co…
-
Unscored —CVE-2009-1548 Public exploit
SQL injection vulnerability in index.php in BluSky CMS allows remote attackers to execute arbitrary SQL commands via th…
-
Unscored —CVE-2009-1549 Public exploit
AGTC MyShop 3.2b allows remote attackers to bypass authentication and obtain administrative access setting the log_acce…
-
Unscored —
The selinux_ip_postroute_iptables_compat function in security/selinux/hooks.c in the SELinux subsystem in the Linux ker…
-
Unscored —CVE-2009-1526 Public exploit
JBMC Software DirectAdmin before 1.334 allows local users to create or overwrite any file via a symlink attack on an ar…
-
Unscored —
CMD_DB in JBMC Software DirectAdmin before 1.334 allows remote authenticated users to gain privileges via shell metacha…
-
Unscored —CVE-2009-1467 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in IceWarp eMail Server and WebMail Server before 9.4.2 allow remot…
-
Unscored —CVE-2009-1527 Public exploit
Race condition in the ptrace_attach function in kernel/ptrace.c in the Linux kernel before 2.6.30-rc4 allows local user…
-
Unscored —CVE-2009-1468 Public exploit
Multiple SQL injection vulnerabilities in the search form in server/webmail.php in the Groupware component in IceWarp e…
-
Unscored —CVE-2009-1469 Public exploit
CRLF injection vulnerability in the Forgot Password implementation in server/webmail.php in IceWarp eMail Server and We…
-
Unscored —
McAfee GroupShield for Microsoft Exchange on Exchange Server 2000, and possibly other anti-virus or anti-spam products …
-
Unscored —
Heap-based buffer overflow in Sendmail before 8.13.2 allows remote attackers to cause a denial of service (daemon crash…
-
Unscored —
Multiple stack-based buffer overflows in dsmagent.exe in the Remote Agent Service in the IBM Tivoli Storage Manager (TS…
-
Unscored —CVE-2009-0720 EPSS 10%
Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to …
-
Unscored —
Multiple buffer overflows in Cscope before 15.7a allow remote attackers to execute arbitrary code via long strings in i…
-
Unscored —
Buffer overflow in the Web GUI in the IBM Tivoli Storage Manager (TSM) client 5.1.0.0 through 5.1.8.2, 5.2.0.0 through …
-
Unscored —
Unspecified vulnerability in the Java GUI in the IBM Tivoli Storage Manager (TSM) client 5.2.0.0 through 5.2.5.3, 5.3.0…
-
Unscored —
The IBM Tivoli Storage Manager (TSM) client 5.5.0.0 through 5.5.1.17 on AIX and Windows, when SSL is used, allows remot…
-
Medium 5.3
Directory traversal in Mort Bay Jetty
Directory traversal vulnerability in the HTTP server in Mort Bay Jetty 5.1.14, 6.x before 6.1.17, and 7.x through 7.0.0.M2 allows remote attackers to access arbitrary files via directory traversal sequences in the URI.
-
Unscored —
Cross-site scripting (XSS) vulnerability in Mort Bay Jetty before 6.1.17 allows remote attackers to inject arbitrary we…