Archive
June 2009
Vulnerabilities first published in this month (UTC), newest first.
186 results · Clear filters · Feed
-
Unscored —CVE-2009-2122 Public exploit
SQL injection vulnerability in viewimg.php in the Paolo Palmonari Photoracer plugin 1.0 for WordPress allows remote att…
-
Unscored —CVE-2009-2129 Public exploit
Cross-site request forgery (CSRF) vulnerability in login.php in Elvin 1.2.0 allows remote attackers to hijack the authe…
-
Unscored —CVE-2009-2133 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Pivot 1.40.4 and 1.40.7 allow remote attackers to inject arbitra…
-
Unscored —CVE-2009-0961 Public exploit
The Mail component in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 dismisses the ca…
-
Unscored —CVE-2009-2116 Public exploit
Directory traversal vulnerability in admin.php in SkyBlueCanvas 1.1 r237 allows remote authenticated administrators to …
-
Unscored —CVE-2009-2110 Public exploit
Multiple directory traversal vulnerabilities in DB Top Sites 1.0, when magic_quotes_gpc is disabled, allow remote attac…
-
Unscored —CVE-2009-2114 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in admin.php in SkyBlueCanvas 1.1 r237 allow remote attackers to in…
-
Unscored —CVE-2009-2113 Public exploit
Multiple SQL injection vulnerabilities in FretsWeb 1.2 allow remote attackers to execute arbitrary SQL commands via the…
-
Unscored —CVE-2009-2109 Public exploit
Multiple directory traversal vulnerabilities in FretsWeb 1.2 allow remote attackers to read arbitrary files via directo…
-
Unscored —CVE-2009-2112 Public exploit
Directory traversal vulnerability in include/page_bottom.php in phpFK 7.03 allows remote attackers to include and execu…
-
Unscored —CVE-2009-2120 Public exploit
Multiple SQL injection vulnerabilities in TekBase All-in-One 3.1 allow remote authenticated users to execute arbitrary …
-
Unscored —CVE-2009-2111 Public exploit
Static code injection vulnerability in add_reg.php in DB Top Sites 1.0 allows remote attackers to inject arbitrary PHP …
-
Unscored —CVE-2009-2117 Public exploit
uye_paneli.php in phPortal 1.0 allows remote attackers to bypass authentication and obtain administrative access by set…
-
Unscored —CVE-2009-2108 Public exploit
git-daemon in git 1.4.4.5 through 1.6.3 allows remote attackers to cause a denial of service (infinite loop and CPU con…
-
Unscored —CVE-2009-2107 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Webmedia Explorer (webmex) 5.09 and 5.10 allow remo…
-
Unscored —CVE-2009-2098 Public exploit
SQL injection vulnerability in topicler.php in phPortal 1.0 allows remote attackers to execute arbitrary SQL commands v…
-
Unscored —CVE-2009-2099 Public exploit
SQL injection vulnerability in the iJoomla RSS Feeder (com_ijoomla_rss) component for Joomla! allows remote attackers t…
-
Unscored —CVE-2009-2102 Public exploit
SQL injection vulnerability in the Jumi (com_jumi) component 2.0.3 and possibly other versions for Joomla allows remote…
-
Unscored —CVE-2009-2096 Public exploit
SQL injection vulnerability in house/listing_view.php in phpCollegeExchange 0.1.5c allows remote attackers to execute a…
-
Unscored —CVE-2009-2101 Public exploit
Directory traversal vulnerability in archive.php in TorrentVolve 1.4, when register_globals is enabled, allows remote a…
-
Unscored —
Directory traversal vulnerability in the JoomlaPraise Projectfork (com_projectfork) component 2.0.10 for Joomla! allows…
-
Unscored —CVE-2009-2095 Public exploit
PHP remote file inclusion vulnerability in template/simpledefault/admin/_masterlayout.php in Mundi Mail 0.8.2, when reg…
-
Unscored —CVE-2009-1391 Public exploit
Off-by-one error in the inflate function in Zlib.xs in Compress::Raw::Zlib Perl module before 2.017, as used in AMaViS,…
-
Unscored —
Worldweaver DX Studio Player 3.0.29.0, 3.0.22.0, 3.0.12.0, and probably other versions before 3.0.29.1, when used as a …
-
Unscored —CVE-2009-2081 Public exploit
Directory traversal vulnerability in help.php in phpWebThings 1.5.2 and earlier, when magic_quotes_gpc is disabled, all…
-
Unscored —CVE-2009-2080 Public exploit
admin.php in MRCGIGUY The Ticket System 2.0 does not properly restrict access, which allows remote attackers to (1) obt…
-
Unscored —CVE-2009-1834 Public exploit
Visual truncation vulnerability in netwerk/dns/src/nsIDNService.cpp in Mozilla Firefox before 3.0.11 and SeaMonkey befo…
-
Unscored —CVE-2009-1839 Public exploit
Mozilla Firefox 3 before 3.0.11 associates an incorrect principal with a file: URL loaded through the location bar, whi…
-
Unscored —CVE-2009-2044 Public exploit
Mozilla Firefox 3.0.10 and earlier on Linux allows remote attackers to cause a denial of service (application crash) vi…
-
Unscored —CVE-2009-2043 Public exploit
nsViewManager.cpp in Mozilla Firefox 3.0.2 through 3.0.10 allows remote attackers to cause a denial of service (NULL po…
-
Unscored —CVE-2009-2033 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Yogurt 0.3 allows remote attackers to inject arbitrary web scr…
-
Unscored —CVE-2009-2036 Public exploit
SQL injection vulnerability in index.php in Open Biller 0.1 allows remote attackers to execute arbitrary SQL commands v…
-
Unscored —CVE-2009-2040 Public exploit
admin/options.php in Grestul 1.2 does not properly restrict access, which allows remote attackers to bypass authenticat…
-
Unscored —CVE-2009-2037 Public exploit
Multiple directory traversal vulnerabilities in Online Grades & Attendance 3.2.5 and earlier, and possibly 3.2.6, when …
-
Unscored —CVE-2009-2034 Public exploit
SQL injection vulnerability in writemessage.php in Yogurt 0.3, when register_globals is enabled, allows remote authenti…
-
Unscored —
The BigDecimal library in Ruby 1.8.6 before p369 and 1.8.7 before p173 allows context-dependent attackers to cause a de…
-
Unscored —
The WebDAV extension in Microsoft Internet Information Services (IIS) 5.0 on Windows 2000 SP4 does not properly decode …
-
Unscored —
Microsoft Internet Explorer 5.01 SP4; 6 SP1; 6 and 7 for Windows XP SP2 and SP3; 6 and 7 for Server 2003 SP2; 7 for Vis…
-
Unscored —CVE-2009-0229 Public exploit
The Windows Printing Service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, …
-
Unscored —
Buffer overflow in Microsoft Office Word 2000 SP3, 2002 SP3, and 2007 SP1 and SP2; Microsoft Office for Mac 2004 and 20…