Archive
July 2009
Vulnerabilities first published in this month (UTC), newest first.
206 results · Clear filters · Feed
-
Unscored —CVE-2009-2585 Public exploit
SQL injection vulnerability in index.php in Mlffat 2.2 allows remote attackers to execute arbitrary SQL commands via a …
-
Unscored —CVE-2009-2586 Public exploit
Cross-site scripting (XSS) vulnerability in articles.php in EDGEPHP EZArticles allows remote attackers to inject arbitr…
-
Unscored —CVE-2009-2594 Public exploit
Cross-site scripting (XSS) vulnerability in censura.php in Censura 1.16.04 allows remote attackers to inject arbitrary …
-
Unscored —CVE-2009-2595 Public exploit
Cross-site scripting (XSS) vulnerability in productSearch.html in Censura 2.0.4 and 2.1.0 allows remote attackers to in…
-
Unscored —CVE-2009-2588 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Hotscripts Type PHP Clone Script allow remote attackers to injec…
-
Unscored —CVE-2009-2593 Public exploit
SQL injection vulnerability in censura.php in Censura 1.16.04 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2009-2591 Public exploit
SQL injection vulnerability in the MyAnnonces module for E-Xoopport 3.1 allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2008-6871 Public exploit
Merlix Educate Server stores db.mdb under the web root with insufficient access control, which allows remote attackers …
-
Unscored —CVE-2008-6873 Public exploit
SQL injection vulnerability in Active Web Mail 4.0 allows remote attackers to execute arbitrary SQL commands via the Ta…
-
Unscored —CVE-2008-6869 Public exploit
Oramon Oracle Database Monitoring Tool 2.0.1 stores sensitive information under the web root with insufficient access c…
-
Unscored —CVE-2008-6872 Public exploit
ASPThai.NET ASPThai Forums 8.5 stores sensitive information under the web root with insufficient access control, which …
-
Unscored —CVE-2008-6870 Public exploit
Merlix Educate Server allows remote attackers to bypass intended security restrictions and obtain sensitive information…
-
Unscored —
The nsXULTemplateQueryProcessorRDF::CheckIsSeparator function in Mozilla Firefox before 3.0.12, SeaMonkey 2.0a1pre, and…
-
Unscored —CVE-2009-2569 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Verlihub Control Panel (VHCP) 1.7e allow remote attackers to inj…
-
Unscored —CVE-2009-2574 Public exploit
index.php in MiniTwitter 0.2 beta allows remote authenticated users to modify certain options of arbitrary accounts via…
-
Unscored —CVE-2009-2568 Public exploit
Stack-based buffer overflow in Sorinara Streaming Audio Player (SAP) 0.9 allows remote attackers to execute arbitrary c…
-
Unscored —CVE-2009-2571 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in VerliAdmin 0.3.7 and 0.3.8 allow remote attackers t…
-
Unscored —CVE-2009-2567 Public exploit
SQL injection vulnerability in the Almond Classifieds (com_aclassf) component 5.6.2 for Joomla! allows remote attackers…
-
Unscored —CVE-2009-2573 Public exploit
Multiple SQL injection vulnerabilities in MiniTwitter 0.2 beta, when magic_quotes_gpc is disabled, allow remote authent…
-
Unscored —
Stack-based buffer overflow in the Symantec.FaxViewerControl.1 ActiveX control in WinFax\DCCFAXVW.DLL in Symantec WinFa…
-
Unscored —
Stack-based buffer overflow in TFM MMPlayer 2.0, and possibly 2.0.0.30, allows remote attackers to execute arbitrary co…
-
Unscored —CVE-2009-2564 Public exploit
NOS Microsystems getPlus Download Manager, as used in Adobe Reader 1.6.2.36 and possibly other versions, Corel getPlus …
-
Unscored —CVE-2009-2558 Public exploit
system/message.php in Admin News Tools 2.5 does not properly restrict access, which allows remote attackers to post new…
-
Unscored —CVE-2009-2557 Public exploit
Directory traversal vulnerability in system/download.php in Admin News Tools 2.5 allows remote attackers to read arbitr…
-
Unscored —CVE-2009-2553 Public exploit
Multiple SQL injection vulnerabilities in comments.php in Super Simple Blog Script 2.5.4, when magic_quotes_gpc is disa…
-
Unscored —CVE-2009-2554 Public exploit
SQL injection vulnerability in the search method in jobline.class.php in Jobline (com_jobline) 1.1.2.2, 1.3.1, and poss…
-
Unscored —CVE-2009-2552 Public exploit
Multiple directory traversal vulnerabilities in comments.php in Super Simple Blog Script 2.5.4 allow remote attackers t…
-
Unscored —CVE-2009-2551 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in ScriptsEz Easy Image Downloader allow remote attackers to inject…
-
Unscored —CVE-2009-2550 Public exploit
Stack-based buffer overflow in Hamster Audio Player 0.3a allows remote attackers to execute arbitrary code via a long s…
-
Unscored —CVE-2009-2535 Public exploit
Mozilla Firefox before 2.0.0.19 and 3.x before 3.0.5, SeaMonkey, and Thunderbird allow remote attackers to cause a deni…
-
Unscored —CVE-2009-2544 Public exploit
Directory traversal vulnerability in the Marcelo Costa FileServer component 1.0 for Microsoft Windows Live Messenger an…
-
Unscored —CVE-2009-1897 Public exploit
The tun_chr_poll function in drivers/net/tun.c in the tun subsystem in the Linux kernel 2.6.30 and 2.6.30.1, when the -…
-
Unscored —CVE-2009-2533 Public exploit
rmserver in RealNetworks Helix Server and Helix Mobile Server before 13.0.0 allows remote attackers to cause a denial o…
-
Unscored —CVE-2009-2534 Public exploit
RealNetworks Helix Server and Helix Mobile Server before 13.0.0 allow remote attackers to cause a denial of service (da…
-
Unscored —CVE-2009-1894 Public exploit
Race condition in PulseAudio 0.9.9, 0.9.10, and 0.9.14 allows local users to gain privileges via vectors involving crea…
-
Unscored —
Stack-based buffer overflow in the Win32AddConnection function in modules/access/smb.c in VideoLAN VLC media player 0.9…
-
Unscored —
Stack-based buffer overflow in HT-MP3Player 1.0 allows remote attackers to execute arbitrary code via a long string in …
-
Unscored —
Mozilla Firefox 3.0.x, 3.5, and 3.5.1 on Windows allows remote attackers to cause a denial of service (uncaught excepti…
-
Unscored —CVE-2009-2478 Public exploit
Mozilla Firefox 3.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application cras…
-
Unscored —
The Microsoft Office Web Components Spreadsheet ActiveX control (aka OWC10 or OWC11), as distributed in Office XP SP3 a…