5 June 2009

25 results · Feed

• Unscored —
  CVE-2008-6825 Public exploit EPSS 20%

  Directory traversal vulnerability in user/index.php in Fonality trixbox CE 2.6.1 and earlier allows remote attackers to…

  Jun 5, 2009
• Unscored —
  CVE-2009-1944 Public exploit EPSS 10%

  Stack-based buffer overflow in AIMP 2.51 build 330 allows remote attackers to execute arbitrary code via an MP3 file wi…

  Jun 5, 2009
• Unscored —
  CVE-2009-1947 Public exploit

  SQL injection vulnerability in the UnbDbEncode function in unb_lib/database.lib.php in Unclassified NewsBoard (UNB) 1.6…

  Jun 5, 2009
• Unscored —
  CVE-2009-1945 Public exploit

  SQL injection vulnerability in webCal3_detail.asp in WebCal 3.04 allows remote attackers to execute arbitrary SQL comma…

  Jun 5, 2009
• Unscored —
  CVE-2009-1943 Public exploit EPSS 72%

  Stack-based buffer overflow in the IKE service (ireIke.exe) in SafeNet SoftRemote before 10.8.6 allows remote attackers…

  Jun 5, 2009
• Unscored —
  CVE-2009-1952 Public exploit

  Multiple SQL injection vulnerabilities in the administrative login feature in PropertyMax Pro FREE 0.3, when magic_quot…

  Jun 5, 2009
• Unscored —
  CVE-2009-1948 Public exploit

  Multiple directory traversal vulnerabilities in forum.php in Unclassified NewsBoard (UNB) 1.6.4, when register_globals …

  Jun 5, 2009
• Unscored —
  CVE-2009-1951 Public exploit

  Cross-site scripting (XSS) vulnerability in index.php in PropertyMax Pro FREE 0.3 allows remote attackers to inject arb…

  Jun 5, 2009
• Unscored —
  CVE-2009-1949 Public exploit

  import_wbb1.php in Unclassified NewsBoard (UNB) 1.6.4 allows remote attackers to obtain sensitive information via a dir…

  Jun 5, 2009
• Unscored —
  CVE-2009-1950 Public exploit

  SQL injection vulnerability in yorum.asp in WebEyes Guest Book 3 allows remote attackers to execute arbitrary SQL comma…

  Jun 5, 2009
• Unscored —
  CVE-2009-1946 Public exploit

  PHP remote file inclusion vulnerability in latestposts.php in AdaptBB 1.0, when register_globals is enabled, allows rem…

  Jun 5, 2009
• Unscored —
  CVE-2009-1938 Public exploit

  Cross-site scripting (XSS) vulnerability in Joomla! 1.5.x through 1.5.10 allows remote attackers to inject arbitrary we…

  Jun 5, 2009
• Unscored —
  CVE-2009-1941 Public exploit

  PAD Site Scripts 3.6 stores sensitive information under the web document root with insufficient access control, which a…

  Jun 5, 2009
• Unscored —
  CVE-2009-1937

  Cross-site scripting (XSS) vulnerability in the comment posting feature in LightNEasy 2.2.1 "no database" (aka flat) an…

  Jun 5, 2009
• Critical 9.8
  CVE-2009-1936 Public exploit EPSS 52%

  _functions.php in cpCommerce 1.2.x, possibly including 1.2.9, sends a redirect but does not exit when it is called dire…

  Jun 5, 2009
• Unscored —
  CVE-2009-1939

  Cross-site scripting (XSS) vulnerability in the JA_Purity template for Joomla! 1.5.x through 1.5.10 allows remote attac…

  Jun 5, 2009
• Unscored —
  CVE-2009-1940

  Cross-site scripting (XSS) vulnerability in the administrator panel in the com_users core component for Joomla! 1.5.x t…

  Jun 5, 2009
• Unscored —
  CVE-2009-1942

  Cross-site scripting (XSS) vulnerability in the Quiz module 5.x, 6.x-2.x before 6.x-2.2, and 6.x-3.x before 6.x-3.0, a …

  Web / CMS
  Jun 5, 2009
• Medium —
  CVE-2009-0033 EPSS 10%

  Apache Tomcat Denial of Service via Malformed Request Headers

  Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when the Java AJP connector and mod_jk load balancing are used, allows remote attackers to cause a denial of service (application outage) via a crafted request with invalid he…

  org.apache.tomcat:tomcat Maven
  Jun 5, 2009
• Medium 4.2
  CVE-2009-0783

  Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat

  Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 permits web applications to replace an XML parser used for other web applications, which allows local users to read or modify the (1) web.xml, (2) context.xml, or (3) tld files…

  org.apache.tomcat:tomcat Maven
  Jun 5, 2009
• Medium —
  CVE-2009-0580 Public exploit EPSS 94%

  Exposure of Sensitive Information in Apache Tomcat

  Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when FORM authentication is used, allows remote attackers to enumerate valid usernames via requests to /j_security_check with malformed URL encoding of passwords, related to i…

  org.apache.tomcat:tomcat Maven
  Jun 5, 2009
• Unscored —
  CVE-2009-1717

  Integer overflow in Terminal in Apple Mac OS X 10.5 before 10.5.7 allows remote attackers to execute arbitrary code or …

  Jun 5, 2009
• Unscored —
  CVE-2009-1933

  Kerberos in Sun Solaris 8, 9, and 10, and OpenSolaris before snv_117, does not properly manage credential caches, which…

  Jun 5, 2009
• Unscored —
  CVE-2009-1934

  Cross-site scripting (XSS) vulnerability in the Reverse Proxy Plug-in in Sun Java System Web Server 6.1 before SP11 all…

  Jun 5, 2009
• Unscored —
  CVE-2009-1162

  Cross-site scripting (XSS) vulnerability in the Spam Quarantine login page in Cisco IronPort AsyncOS before 6.5.2 on Se…

  Jun 5, 2009