Archive
1 July 2009
Vulnerabilities first published on this day (UTC), newest first.
25 results · Feed
-
Unscored —CVE-2008-6840 Public exploit
Multiple PHP remote file inclusion vulnerabilities in V-webmail 1.6.4 allow remote attackers to execute arbitrary PHP c…
-
Unscored —CVE-2008-6841 Public exploit
PHP remote file inclusion vulnerability in the Green Mountain Information Technology and Consulting Database Query (com…
-
Unscored —
Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementatio…
-
Unscored —
The OSCAR protocol implementation in Pidgin before 2.5.8 misinterprets the ICQWebMessage message type as the ICQSMS mes…
-
Unscored —CVE-2009-2276 Public exploit
SQL injection vulnerability in voteforus.php in the Vote For Us extension 1.0.1 and earlier for PunBB allows remote att…
-
Unscored —CVE-2009-2286 Public exploit
Buffer overflow in compface 1.5.2 and earlier allows user-assisted attackers to cause a denial of service (crash) via a…
-
Unscored —CVE-2009-2289 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Arcade Trade Script 1.0 beta allows remote attackers to inject…
-
Unscored —CVE-2009-2269 Public exploit
SQL injection vulnerability in Empire CMS 5.1 allows remote attackers to execute arbitrary SQL commands via the bid par…
-
Unscored —
The kvm_arch_vcpu_ioctl_set_sregs function in the KVM in Linux kernel 2.6 before 2.6.30, when running on x86 systems, d…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Appleple a-News 2.32 allows remote attackers to inject arbitrary web script…
-
Unscored —
Unrestricted file upload vulnerability in member/uploads_edit.php in dedecms 5.3 allows remote attackers to execute arb…
-
Unscored —
statuswml.cgi in Nagios before 3.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in …
-
Unscored —
The Huawei D100 has (1) a certain default administrator password for the web interface, and does not force a password c…
-
Unscored —
The default configuration of the Wi-Fi component on the Huawei D100 does not use encryption, which makes it easier for …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the help jsp scripts in Sun Java Web Console 3.0.2 through 3.0.5…
-
Unscored —CVE-2009-2290 Public exploit
SQL injection vulnerability in the Boy Scout Advancement (com_bsadv) component 0.3 and earlier for Joomla! allows remot…
-
Unscored —CVE-2009-2293 Public exploit
Optimum Web Design Tutorial Share 3.5.0 and earlier allows remote attackers to bypass authentication and obtain adminis…
-
Unscored —
The Huawei D100 allows remote attackers to obtain sensitive information via a direct request to (1) lan_status_adv.asp,…
-
Unscored —CVE-2009-2285 Public exploit
Buffer underflow in the LZWDecodeCompat function in libtiff 3.8.2 allows context-dependent attackers to cause a denial …
-
Unscored —
Unspecified vulnerability in LoginToboggan 6.x-1.x before 6.x-1.5, a module for Drupal, when "Allow users to login usin…
-
Unscored —CVE-2009-2275 Public exploit
Directory traversal vulnerability in frontend/x3/stats/lastvisit.html in cPanel allows remote attackers to read arbitra…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Cross-Domain Controller (CDC) servlet in Sun Java System Access Manager…
-
Unscored —
The Huawei D100 stores the administrator's account name and password in cleartext in a cookie, which allows context-dep…
-
Unscored —
The Virtual Network Terminal Server daemon (vntsd) for Logical Domains (aka LDoms) in Sun Solaris 10, and OpenSolaris s…
-
Unscored —
Cross-site scripting (XSS) vulnerability in phpMyAdmin before 3.2.0.1 allows remote attackers to inject arbitrary web s…