Archive
4 June 2009
Vulnerabilities first published on this day (UTC), newest first.
12 results · Clear filters · Feed
-
Unscored —
dig.php in GScripts.net DNS Tools allows remote attackers to execute arbitrary commands via shell metacharacters in the…
-
Unscored —CVE-2009-1915 Public exploit
Stack-based buffer overflow in the URL Search Hook (ICQToolBar.dll) in ICQ 6.5 allows remote attackers to cause a denia…
-
Unscored —CVE-2008-6824 Public exploit
The management interface on the A-LINK WL54AP3 and WL54AP2 access points has a blank default password for the admin acc…
-
Unscored —CVE-2008-6822 Public exploit
Unrestricted file upload vulnerability in uploadp.php in New Earth Programming Team (NEPT) imgupload (aka Image Uploade…
-
Unscored —CVE-2008-6823 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in the management interface on the A-LINK WL54AP3 and WL54AP…
-
Unscored —CVE-2009-1914 Public exploit
The pci_register_iommu_region function in arch/sparc/kernel/pci_common.c in the Linux kernel before 2.6.29 on the sparc…
-
Unscored —CVE-2009-1911 Public exploit
Directory traversal vulnerability in .include/init.php (aka admin/_include/init.php) in QuiXplorer 2.3.2 and earlier, a…
-
Unscored —CVE-2009-1910 Public exploit
SQL injection vulnerability in index.php in RTWebalbum 1.0.462 allows remote attackers to execute arbitrary SQL command…
-
Unscored —
ssl/s3_pkt.c in OpenSSL before 0.9.8i allows remote attackers to cause a denial of service (NULL pointer dereference an…
-
Unscored —CVE-2009-1912 Public exploit
Directory traversal vulnerability in src/func/language.php in webSPELL 4.2.0e and earlier allows remote attackers to in…
-
Unscored —CVE-2009-1907 Public exploit
Cross-site scripting (XSS) vulnerability in claroline/linker/notfound.php in Claroline 1.8.11 allows remote attackers t…
-
Unscored —CVE-2009-1913 Public exploit
SQL injection vulnerability in manager.php in LuxBum 0.5.5, when magic_quotes_gpc is disabled and dotclear authenticati…