Archive
July 2009
Vulnerabilities first published in this month (UTC), newest first.
206 results · Clear filters · Feed
-
Unscored —CVE-2008-6884 Public exploit
Multiple directory traversal vulnerabilities in XOOPS 2.3.1, when register_globals is enabled, allow remote attackers t…
-
Unscored —
Heap-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.…
-
Unscored —
Integer overflow in the ActionScript Virtual Machine 2 (AVM2) abcFile parser in Adobe Flash Player before 9.0.246.0 and…
-
Unscored —CVE-2008-6883 Public exploit
SQL injection vulnerability in the Live Chat (com_livechat) component 1.0 for Joomla! allows remote attackers to execut…
-
Unscored —CVE-2008-6882 Public exploit
Live Chat (com_livechat) component 1.0 for Joomla! allows remote attackers to use the xmlhttp.php script as an open HTT…
-
Unscored —CVE-2008-6881 Public exploit
Multiple SQL injection vulnerabilities in the Live Chat (com_livechat) component 1.0 for Joomla! allow remote attackers…
-
Unscored —CVE-2008-6880 Public exploit
SQL injection vulnerability in joke.php in EasySiteNetwork Free Jokes Website allows remote attackers to execute arbitr…
-
Unscored —
Heap-based buffer overflow in Sorcerer Software MultiMedia Jukebox 4.0 Build 020124 allows remote attackers to cause a …
-
Unscored —CVE-2009-2649 Public exploit
The IATA (ata) driver in FreeBSD 6.0 and 8.0, when read access to /dev is available, allows local users to cause a deni…
-
Unscored —
The dns_db_findrdataset function in db.c in named in ISC BIND 9.4 before 9.4.3-P3, 9.5 before 9.5.1-P3, and 9.6 before …
-
Unscored —CVE-2009-2620 Public exploit
src/remote/server.cpp in fbserver.exe in Firebird SQL 1.5 before 1.5.6, 2.0 before 2.0.6, 2.1 before 2.1.3, and 2.5 bef…
-
Unscored —CVE-2009-2635 Public exploit
PHP remote file inclusion vulnerability in toolbar_ext.php in the RealEstateManager (com_realestatemanager) component 1…
-
Unscored —CVE-2009-2637 Public exploit
PHP remote file inclusion vulnerability in toolbar_ext.php in the BookLibrary (com_booklibrary) component 1.5.2.4 Basic…
-
Unscored —CVE-2009-2642 Public exploit
index.php in Desi Short URL Script 1.0 allows remote attackers to bypass authentication by setting the logged cookie to…
-
Unscored —CVE-2009-2633 Public exploit
PHP remote file inclusion vulnerability in toolbar_ext.php in the VehicleManager (com_vehiclemanager) component 1.0 Bas…
-
Unscored —CVE-2009-2639 Public exploit
SQL injection vulnerability in admin.php in MRCGIGUY The Ticket System 2.0 allows remote attackers to execute arbitrary…
-
Unscored —CVE-2009-2640 Public exploit
Multiple SQL injection vulnerabilities in cgi/admin.cgi in Interlogy Profile Manager Basic allow remote attackers to ex…
-
Unscored —CVE-2009-2638 Public exploit
SQL injection vulnerability in the AkoBook (com_akobook) component 2.3 for Joomla! allows remote attackers to execute a…
-
Unscored —CVE-2009-2634 Public exploit
PHP remote file inclusion vulnerability in toolbar_ext.php in the MediaLibrary (com_media_library) component 1.5.3 Basi…
-
Unscored —CVE-2009-2641 Public exploit
PHP remote file inclusion vulnerability in app_and_readme/navigator/index.php in School Data Navigator allows remote at…
-
Unscored —CVE-2009-2611 Public exploit
Directory traversal vulnerability in infusions/last_seen_users_panel/last_seen_users_panel.php in MyFusion (aka MyF) 6 …
-
Unscored —CVE-2009-2608 Public exploit
Multiple SQL injection vulnerabilities in PHP Address Book 4.0.x allow remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2009-2614 Public exploit
SQL injection vulnerability in z_admin_login.asp in DataCheck Solutions LinkPal 1.x allows remote attackers to execute …
-
Unscored —CVE-2009-2618 Public exploit
SQL injection vulnerability in the Surveys (aka NS-Polls) module in MDPro (MD-Pro) 1.083.x allows remote attackers to e…
-
Unscored —CVE-2009-2619 Public exploit
SQL injection vulnerability in login.asp in DataCheck Solutions V-SpacePal allows remote attackers to execute arbitrary…
-
Unscored —CVE-2009-2607 Public exploit
SQL injection vulnerability in the com_pinboard component for Joomla! allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2009-2609 Public exploit
SQL injection vulnerability in the amoCourse (com_amocourse) component for Joomla! allows remote attackers to execute a…
-
Unscored —CVE-2009-2617 Public exploit
Stack-based buffer overflow in medialib.dll in BaoFeng Storm 3.9.62 allows remote attackers to execute arbitrary code v…
-
Unscored —CVE-2009-2598 Public exploit
Multiple SQL injection vulnerabilities in Online Grades & Attendance 3.2.6 and earlier allow (1) remote attackers to ex…
-
Unscored —CVE-2009-2601 Public exploit
SQL injection vulnerability in the Joomlaequipment (aka JUser or com_juser) component 2.0.4 for Joomla! allows remote a…
-
Unscored —CVE-2009-2606 Public exploit
ASP Football Pool 2.3 stores sensitive information under the web root with insufficient access control, which allows re…
-
Unscored —CVE-2009-2600 Public exploit
Multiple directory traversal vulnerabilities in view.php in Webboard 2.90 beta and earlier allow remote attackers to re…
-
Unscored —CVE-2009-2604 Public exploit
Multiple SQL injection vulnerabilities in adminlogin.asp in Zen Help Desk 2.1 allow remote attackers to execute arbitra…
-
Unscored —CVE-2009-2605 Public exploit
Multiple SQL injection vulnerabilities in adminquery.php in Traidnt Up 2.0 allow remote attackers to execute arbitrary …
-
Unscored —CVE-2009-2603 Public exploit
Multiple SQL injection vulnerabilities in index.php in Escon SupportPortal Pro 3.0 allow remote attackers to execute ar…
-
Unscored —CVE-2009-2602 Public exploit
R2 Newsletter Lite, Pro, and Stats stores sensitive information under the web root with insufficient access control, wh…
-
Unscored —CVE-2009-2599 Public exploit
SQL injection vulnerability in index.php in RadCLASSIFIEDS Gold 2.0 allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2008-6875 Public exploit
SQL injection vulnerability in default.asp in ASP Product Catalog allows remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2008-6874 Public exploit
Multiple SQL injection vulnerabilities in ASP SiteWare autoDealer 1 and 2 allow remote attackers to execute arbitrary S…
-
Unscored —CVE-2009-2587 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in DragDropCart allow remote attackers to inject arbitrary web scri…