Archive
June 2009
Vulnerabilities first published in this month (UTC), newest first.
186 results · Clear filters · Feed
-
Medium —
Exposure of Sensitive Information in Apache Tomcat
Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when FORM authentication is used, allows remote attackers to enumerate valid usernames via requests to /j_security_check with malformed URL encoding of passwords, related to i…
-
Unscored —
dig.php in GScripts.net DNS Tools allows remote attackers to execute arbitrary commands via shell metacharacters in the…
-
Unscored —CVE-2009-1915 Public exploit
Stack-based buffer overflow in the URL Search Hook (ICQToolBar.dll) in ICQ 6.5 allows remote attackers to cause a denia…
-
Unscored —CVE-2008-6824 Public exploit
The management interface on the A-LINK WL54AP3 and WL54AP2 access points has a blank default password for the admin acc…
-
Unscored —CVE-2008-6822 Public exploit
Unrestricted file upload vulnerability in uploadp.php in New Earth Programming Team (NEPT) imgupload (aka Image Uploade…
-
Unscored —CVE-2008-6823 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in the management interface on the A-LINK WL54AP3 and WL54AP…
-
Unscored —CVE-2009-1914 Public exploit
The pci_register_iommu_region function in arch/sparc/kernel/pci_common.c in the Linux kernel before 2.6.29 on the sparc…
-
Unscored —CVE-2009-1911 Public exploit
Directory traversal vulnerability in .include/init.php (aka admin/_include/init.php) in QuiXplorer 2.3.2 and earlier, a…
-
Unscored —CVE-2009-1910 Public exploit
SQL injection vulnerability in index.php in RTWebalbum 1.0.462 allows remote attackers to execute arbitrary SQL command…
-
Unscored —
ssl/s3_pkt.c in OpenSSL before 0.9.8i allows remote attackers to cause a denial of service (NULL pointer dereference an…
-
Unscored —CVE-2009-1912 Public exploit
Directory traversal vulnerability in src/func/language.php in webSPELL 4.2.0e and earlier allows remote attackers to in…
-
Unscored —CVE-2009-1907 Public exploit
Cross-site scripting (XSS) vulnerability in claroline/linker/notfound.php in Claroline 1.8.11 allows remote attackers t…
-
Unscored —CVE-2009-1913 Public exploit
SQL injection vulnerability in manager.php in LuxBum 0.5.5, when magic_quotes_gpc is disabled and dotclear authenticati…
-
Unscored —
The multipart processor in ModSecurity before 2.5.9 allows remote attackers to cause a denial of service (crash) via a …
-
Unscored —CVE-2009-0955 Public exploit
Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (applicatio…
-
Unscored —
Stack-based buffer overflow in Apple iTunes before 8.2 allows remote attackers to execute arbitrary code or cause a den…
-
Unscored —CVE-2009-1850 Public exploit
SQL injection vulnerability in index.php in phpBugTracker 1.0.3 allows remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2009-1847 Public exploit
Directory traversal vulnerability in index.php in Easy PX 41 CMS 9.0 B1 allows remote attackers to include and execute …
-
Unscored —CVE-2009-1854 Public exploit
Million Dollar Text Links 1.0 allows remote attackers to bypass authentication and gain administrative access by settin…
-
Unscored —CVE-2009-1852 Public exploit
Multiple SQL injection vulnerabilities in Graphiks MyForum 1.3 allow remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2009-1845 Public exploit
Cross-site scripting (XSS) vulnerability in ajax/updatecheck.php in Lussumo Vanilla 1.1.5 and 1.1.7 allows remote attac…
-
Unscored —CVE-2009-1848 Public exploit
SQL injection vulnerability in the JoomlaMe AgoraGroups (aka AG or com_agoragroup) component 0.3.5.3 for Joomla! allows…
-
Unscored —CVE-2009-1846 Public exploit
Multiple directory traversal vulnerabilities in SiteX 0.7.4 Build 418 and earlier allow remote attackers to include and…
-
Unscored —CVE-2009-1853 Public exploit
Multiple SQL injection vulnerabilities in index.php in Kensei Board 2.0 BETA (aka 2.0.0b) and earlier allow remote atta…
-
Unscored —CVE-2009-1842 Public exploit
SQL injection vulnerability in main/tracking/userLog.php in Francisco Burzi PHP-Nuke 8.0 allows remote attackers to exe…
-
Unscored —CVE-2009-1843 Public exploit
Multiple SQL injection vulnerabilities in Flash Quiz Beta 2 allow remote attackers to execute arbitrary SQL commands vi…