Archive
June 2009
Vulnerabilities first published in this month (UTC), newest first.
450 results · Feed
-
Unscored —CVE-2009-1913 Public exploit
SQL injection vulnerability in manager.php in LuxBum 0.5.5, when magic_quotes_gpc is disabled and dotclear authenticati…
-
Unscored —
The db2fmp process in IBM DB2 8 before FP17, 9.1 before FP5, and 9.5 before FP2 on Windows runs with "OS privilege," wh…
-
Unscored —
Buffer overflow in the DAS server in IBM DB2 8 before FP17, 9.1 before FP5, and 9.5 before FP2 might allow attackers to…
-
Unscored —
IBM DB2 8 before FP17, 9.1 before FP5, and 9.5 before FP2 provides an INSTALL_JAR (aka sqlj.install_jar) procedure, whi…
-
Unscored —
The Common Code Infrastructure component in IBM DB2 8 before FP17, 9.1 before FP7, and 9.5 before FP4, when LDAP securi…
-
Unscored —
The DRDA Services component in IBM DB2 9.1 before FP7 and 9.5 before FP4 allows remote attackers to cause a denial of s…
-
Unscored —
IBM WebSphere Application Server (WAS) 6.1 through 6.1.0.24 and 7.0 through 7.0.0.4, IBM WebSphere Portal Server 5.1 th…
-
Unscored —
Buffer overflow in the queue manager in IBM WebSphere MQ 6.x before 6.0.2.7 and 7.x before 7.0.1.0 allows remote attack…
-
Unscored —
The multipart processor in ModSecurity before 2.5.9 allows remote attackers to cause a denial of service (crash) via a …
-
Unscored —
The secure login page in the Administrative Console component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.…
-
Unscored —
The Configservice APIs in the Administrative Console component in IBM WebSphere Application Server (WAS) 6.0.2 before 6…
-
Unscored —
Unspecified vulnerability in the Administrative Configservice API in the System Management/Repository component in IBM …
-
Unscored —
The Security component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35 permits "non-standard http metho…
-
Unscored —
The PDF XSS protection feature in ModSecurity before 2.5.8 allows remote attackers to cause a denial of service (Apache…
-
Unscored —
Apple QuickTime before 7.6.2 does not properly initialize memory before use in handling movie files, which allows remot…
-
Unscored —
Heap-based buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a…
-
Unscored —
Multiple heap-based buffer overflows in xvidcore/src/decoder.c in the xvidcore library in Xvid before 1.2.2, as used by…
-
Unscored —
Heap-based buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a…
-
Unscored —
Heap-based buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a…
-
Unscored —
Heap-based buffer overflow in Apple QuickTime before 7.6.2 on Windows allows remote attackers to execute arbitrary code…
-
Unscored —CVE-2009-0955 Public exploit
Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (applicatio…
-
Unscored —
Stack-based buffer overflow in Apple iTunes before 8.2 allows remote attackers to execute arbitrary code or cause a den…
-
Unscored —
Buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of …
-
Unscored —
Heap-based buffer overflow in the decoder_create function in the initialization functionality in xvidcore/src/decoder.c…
-
Unscored —
Heap-based buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a…
-
Unscored —
Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory cor…
-
Unscored —
Cross-site scripting (XSS) vulnerability in MT312 REP-BBS allows remote attackers to inject arbitrary web script or HTM…
-
Unscored —
Integer overflow in the XMakeImage function in magick/xwindow.c in ImageMagick 6.5.2-8, and GraphicsMagick, allows remo…
-
Unscored —
Cross-site scripting (XSS) vulnerability in MT312 IMG-BBS allows remote attackers to inject arbitrary web script or HTM…
-
Unscored —
Sun SDK and Java Runtime Environment (JRE) 1.4.2 through 1.4.2_04, 1.4.1 through 1.4.1_07, and 1.4.0 through 1.4.0_04 a…
-
Unscored —
The default configuration of Sun ONE/iPlanet Web Server 4.1 SP1 through SP12 and 6.0 SP1 through SP5 responds to the HT…
-
Unscored —
The PointBase 4.6 database component in the J2EE 1.4 reference implementation (J2EE/RI) allows remote attackers to exec…
-
Unscored —
Sun Java Media Framework (JMF) 2.1.1 through 2.1.1c allows unsigned applets to cause a denial of service (JVM crash) an…
-
Unscored —
win32k.sys in Microsoft Windows Server 2003 and Vista allows local users to cause a denial of service (system crash) vi…
-
Unscored —CVE-2009-1850 Public exploit
SQL injection vulnerability in index.php in phpBugTracker 1.0.3 allows remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2009-1847 Public exploit
Directory traversal vulnerability in index.php in Easy PX 41 CMS 9.0 B1 allows remote attackers to include and execute …
-
Unscored —CVE-2009-1854 Public exploit
Million Dollar Text Links 1.0 allows remote attackers to bypass authentication and gain administrative access by settin…
-
Unscored —
Unspecified vulnerability in the VMware Descheduled Time Accounting driver in VMware Workstation 6.5.1 and earlier, VMw…
-
Unscored —CVE-2009-1852 Public exploit
Multiple SQL injection vulnerabilities in Graphiks MyForum 1.3 allow remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2009-1845 Public exploit
Cross-site scripting (XSS) vulnerability in ajax/updatecheck.php in Lussumo Vanilla 1.1.5 and 1.1.7 allows remote attac…