Archive
June 2009
Vulnerabilities first published in this month (UTC), newest first.
186 results · Clear filters · Feed
-
Unscored —
The XSL stylesheet implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for …
-
Unscored —
The WebDAV extension in Microsoft Internet Information Services (IIS) 5.1 and 6.0 allows remote attackers to bypass URI…
-
Unscored —CVE-2009-1684 Public exploit
Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone …
-
Unscored —CVE-2009-2020 Public exploit
Cross-site scripting (XSS) vulnerability in news_detail.php in Virtue News Manager allows remote attackers to inject ar…
-
Unscored —CVE-2009-2013 Public exploit
SQL injection vulnerability in bin/aps_browse_sources.php in Frontis 3.9.01.24 allows remote attackers to execute arbit…
-
Unscored —CVE-2009-2014 Public exploit
SQL injection vulnerability in the ComSchool (com_school) component 1.4 for Joomla! allows remote attackers to execute …
-
Unscored —CVE-2009-2024 Public exploit
Vlad Titarenko ASP VT Auth 1.0 stores sensitive information under the web root with insufficient access control, which …
-
Unscored —CVE-2009-2022 Public exploit
fipsCMS Light 2.1 stores sensitive information under the web root with insufficient access control, which allows remote…
-
Unscored —CVE-2009-2018 Public exploit
SQL injection vulnerability in admin/index.php in Jared Eckersley MyCars, when magic_quotes_gpc is disabled, allows rem…
-
Unscored —CVE-2009-2017 Public exploit
SQL injection vulnerability in products.php in Virtue Book Store allows remote attackers to execute arbitrary SQL comma…
-
Unscored —CVE-2009-2023 Public exploit
SQL injection vulnerability in index.php in Shop-Script Pro 2.12, when magic_quotes_gpc is disabled, allows remote atta…
-
Unscored —
Directory traversal vulnerability in includes/file_includer.php in the Ideal MooFAQ (com_moofaq) component 1.0 for Joom…
-
Unscored —CVE-2009-2021 Public exploit
SQL injection vulnerability in search.php in Virtue Classifieds allows remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2009-2025 Public exploit
admin/login.php in DM FileManager 3.9.2 allows remote attackers to bypass authentication and gain administrative access…
-
Unscored —CVE-2009-2016 Public exploit
SQL injection vulnerability in products.php in Virtue Shopping Mall allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2009-2019 Public exploit
SQL injection vulnerability in news_detail.php in Virtue News Manager allows remote attackers to execute arbitrary SQL …
-
Unscored —
The ippReadIO function in cups/ipp.c in cupsd in CUPS before 1.3.10 does not properly initialize memory for IPP request…
-
Unscored —
VicFTPS 5.0 allows remote attackers to cause a denial of service (crash) via a LIST command that starts with a "/\/" (f…
-
Unscored —CVE-2008-6827 Public exploit
The ListView control in the Client GUI (AClient.exe) in Symantec Altiris Deployment Solution 6.x before 6.9.355 SP1 all…
-
Unscored —CVE-2008-6826 Public exploit
dhtml.pl in MHF Media Pro allows remote attackers to execute arbitrary commands via shell metacharacters in the page pa…
-
Unscored —CVE-2009-2003 Public exploit
Ascad Networks Password Protector SD 1.3.1 allows remote attackers to bypass authentication and gain administrative acc…
-
Unscored —CVE-2009-2010 Public exploit
Multiple SQL injection vulnerabilities in Haudenschilt Family Connections CMS (FCMS) 1.9 and earlier allow remote authe…
-
Unscored —CVE-2009-1959 Public exploit
Off-by-one error in the event_wallops function in fe-common/irc/fe-events.c in irssi 0.8.13 allows remote IRC servers t…
-
Unscored —
inc/init.php in DokuWiki 2009-02-14, rc2009-02-06, and rc2009-01-30, when register_globals is enabled, allows remote at…
-
Unscored —
The expat XML parser in the apr_xml_* interface in xml/apr_xml.c in Apache APR-util before 1.3.7, as used in the mod_da…
-
Unscored —CVE-2009-1961 Public exploit
The inode double locking code in fs/ocfs2/file.c in the Linux kernel 2.6.30 before 2.6.30-rc3, 2.6.27 before 2.6.27.24,…
-
Unscored —
Directory traversal vulnerability in user/index.php in Fonality trixbox CE 2.6.1 and earlier allows remote attackers to…
-
Unscored —
Stack-based buffer overflow in AIMP 2.51 build 330 allows remote attackers to execute arbitrary code via an MP3 file wi…
-
Unscored —CVE-2009-1947 Public exploit
SQL injection vulnerability in the UnbDbEncode function in unb_lib/database.lib.php in Unclassified NewsBoard (UNB) 1.6…
-
Unscored —CVE-2009-1945 Public exploit
SQL injection vulnerability in webCal3_detail.asp in WebCal 3.04 allows remote attackers to execute arbitrary SQL comma…
-
Unscored —
Stack-based buffer overflow in the IKE service (ireIke.exe) in SafeNet SoftRemote before 10.8.6 allows remote attackers…
-
Unscored —CVE-2009-1952 Public exploit
Multiple SQL injection vulnerabilities in the administrative login feature in PropertyMax Pro FREE 0.3, when magic_quot…
-
Unscored —CVE-2009-1948 Public exploit
Multiple directory traversal vulnerabilities in forum.php in Unclassified NewsBoard (UNB) 1.6.4, when register_globals …
-
Unscored —CVE-2009-1951 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in PropertyMax Pro FREE 0.3 allows remote attackers to inject arb…
-
Unscored —CVE-2009-1949 Public exploit
import_wbb1.php in Unclassified NewsBoard (UNB) 1.6.4 allows remote attackers to obtain sensitive information via a dir…
-
Unscored —CVE-2009-1950 Public exploit
SQL injection vulnerability in yorum.asp in WebEyes Guest Book 3 allows remote attackers to execute arbitrary SQL comma…
-
Unscored —CVE-2009-1946 Public exploit
PHP remote file inclusion vulnerability in latestposts.php in AdaptBB 1.0, when register_globals is enabled, allows rem…
-
Unscored —CVE-2009-1938 Public exploit
Cross-site scripting (XSS) vulnerability in Joomla! 1.5.x through 1.5.10 allows remote attackers to inject arbitrary we…
-
Unscored —CVE-2009-1941 Public exploit
PAD Site Scripts 3.6 stores sensitive information under the web document root with insufficient access control, which a…
-
Critical 9.8
_functions.php in cpCommerce 1.2.x, possibly including 1.2.9, sends a redirect but does not exit when it is called dire…