Archive
July 2009
Vulnerabilities first published in this month (UTC), newest first.
446 results · Feed
-
Unscored —CVE-2008-6852 Public exploit
SQL injection vulnerability in the Ice Gallery (com_ice) component 0.5 beta 2 for Joomla! allows remote attackers to ex…
-
Unscored —CVE-2008-6849 Public exploit
Unrestricted file upload vulnerability in index.php in phpGreetCards 3.7 allows remote attackers to execute arbitrary P…
-
Unscored —CVE-2008-6848 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in phpGreetCards 3.7 allows remote attackers to inject arbitrary …
-
Unscored —CVE-2008-6853 Public exploit
SQL injection vulnerability in modules/poll/index.php in AIST NetCat 3.0 and 3.12 allows remote attackers to execute ar…
-
Unscored —CVE-2008-6851 Public exploit
SQL injection vulnerability in page.php in PHP Link Directory (phpLD) 3.3, when register_globals is enabled and magic_q…
-
Unscored —
Cross-site scripting (XSS) vulnerability in messages.php in PHP-Fusion 6.01.17 and 7.00.3 allows remote attackers to in…
-
Unscored —CVE-2009-2337 Public exploit
SQL injection vulnerability in includes/module/book/index.inc.php in w3b|cms Gaestebuch Guestbook Module 3.0.0, when ma…
-
Unscored —CVE-2009-2338 Public exploit
Directory traversal vulnerability in includes/startmodules.inc.php in FreeWebshop.org 2.2.9 R2, when register_globals i…
-
Unscored —
The IBM Stax XMLStreamWriter in the Web Services component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.2…
-
Unscored —
The ptrace_start function in kernel/ptrace.c in the Linux kernel 2.6.18 does not properly handle simultaneous execution…
-
Unscored —
The YaST2 LDAP module in yast2-ldap-server on SUSE Linux Enterprise Server 11 (aka SLE11) does not enable the firewall …
-
Unscored —CVE-2009-1890 EPSS 16%
The stream_reqbody_cl function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP Server before 2.3.3, when…
-
Unscored —
Race condition in the Sun Lightweight Availability Collection Tool 3.0 on Solaris 7 through 10 allows local users to ov…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in FCKeditor before 2.6.4.1 allow remote attackers to inject arbitr…
-
Unscored —CVE-2009-2329 Public exploit
KerviNet Forum 1.1 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) admi…
-
Unscored —CVE-2009-2331 Public exploit
Multiple static code injection vulnerabilities in CMS Chainuk 1.2 and earlier allow remote attackers to inject arbitrar…
-
Unscored —
Cross-site scripting (XSS) vulnerability in cgi-bin/sysconf.cgi on the Axesstel MV 410R allows remote attackers to inje…
-
Unscored —CVE-2009-2333 Public exploit
Multiple directory traversal vulnerabilities in CMS Chainuk 1.2 and earlier allow remote attackers to include and execu…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in IBM Tivoli Identity Manager (ITIM) 5.0 allow remote attackers to…
-
Unscored —
The default configuration of the Wi-Fi component on the Axesstel MV 410R does not use encryption, which makes it easier…
-
Unscored —CVE-2009-2330 Public exploit
Cross-site scripting (XSS) vulnerability in admin/admin_menu.php in CMS Chainuk 1.2 and earlier allows remote attackers…
-
Unscored —CVE-2009-2332 Public exploit
CMS Chainuk 1.2 and earlier allows remote attackers to obtain sensitive information via (1) a crafted id parameter to i…
-
Unscored —
The Axesstel MV 410R allows remote attackers to cause a denial of service via a flood of SYN packets, a related issue t…
-
Unscored —
Integer overflow in the Png_datainfo_callback function in Dillo 2.1 and earlier allows remote attackers to cause a deni…
-
Unscored —
Multiple directory traversal vulnerabilities in FCKeditor before 2.6.4.1 allow remote attackers to create executable fi…
-
Unscored —CVE-2009-2326 Public exploit
Multiple SQL injection vulnerabilities in KerviNet Forum 1.1 and earlier allow remote attackers to execute arbitrary SQ…
-
Unscored —
Multiple integer overflows in CamlImages 2.2 and earlier might allow context-dependent attackers to execute arbitrary c…
-
Unscored —
The Axesstel MV 410R has a certain default administrator password, and does not force a password change, which makes it…
-
Unscored —CVE-2009-2328 Public exploit
admin/edit_user.php in KerviNet Forum 1.1 and earlier does not require administrative authentication, which allows remo…
-
Unscored —CVE-2009-2327 Public exploit
Cross-site scripting (XSS) vulnerability in add_voting.php in KerviNet Forum 1.1 and earlier allows remote authenticate…
-
Unscored —
cgi-bin/sysconf.cgi on the Axesstel MV 410R allows remote attackers to cause a denial of service (configuration reset) …
-
Unscored —
The web interface on the Axesstel MV 410R redirects users back to the referring page after execution of some CGI script…
-
Unscored —CVE-2009-2325 Public exploit
Directory traversal vulnerability in index.php in Clicknet CMS 2.1 allows remote attackers to read arbitrary files via …
-
Unscored —
The web interface on the Axesstel MV 410R relies on client-side JavaScript code to validate input, which allows remote …
-
Unscored —
Cross-site scripting (XSS) vulnerability in XMB 1.5 allows remote attackers to inject arbitrary web script or HTML via …
-
Unscored —
SQL injection vulnerability in topic.php in KerviNet Forum 1.1 allows remote attackers to execute arbitrary SQL command…
-
Unscored —
The unpack feature in ClamAV 0.93.3 and earlier allows remote attackers to cause a denial of service (segmentation faul…
-
Unscored —CVE-2008-6847 Public exploit
Cross-site scripting (XSS) vulnerability in Employee/emp_login.asp in Pre ASP Job Board allows remote attackers to inje…
-
Unscored —CVE-2008-6843 Public exploit
Directory traversal vulnerability in index.php in Fantastico, as used with cPanel 11.x, allows remote attackers to read…
-
Unscored —
Multiple stack-based buffer overflows in avast! Linux Home Edition 1.0.5, 1.0.5-1, and 1.0.8 allow remote attackers to …