Archive
July 2009
Vulnerabilities first published in this month (UTC), newest first.
446 results · Feed
-
Unscored —CVE-2008-6842 Public exploit
Directory traversal vulnerability in data/modules/blog/module_pages_site.php in Pluck 4.6.1 allows remote attackers to …
-
Unscored —CVE-2008-6844 Public exploit
The registration view (/user/register) in eZ Publish 3.5.6 and earlier, and possibly other versions before 3.9.5, 3.10.…
-
Unscored —
Unspecified vulnerability in NFS / ONCplus B.11.31_06 and B.11.31_07 on HP HP-UX B.11.31 allows local users to cause a …
-
Unscored —CVE-2009-2310 Public exploit
SQL injection vulnerability in include/get_read.php in Extensible-BioLawCom CMS (X-BLC) 0.2.0 and earlier allows remote…
-
Unscored —
The Artofdefence Hyperguard Web Application Firewall (WAF) module before 2.5.5-11635, 3.0 before 3.0.3-11636, and 3.1 b…
-
Unscored —
The management interface in the phion airlock Web Application Firewall (WAF) 4.1-10.41 does not properly handle CGI req…
-
Unscored —CVE-2009-2309 Public exploit
SQL injection vulnerability in index.php in Codice CMS 2 allows remote attackers to execute arbitrary SQL commands via …
-
Unscored —
Unspecified vulnerability in the udp subsystem in the kernel in Sun Solaris 10, and OpenSolaris snv_90 through snv_108,…
-
Unscored —
The radware AppWall Web Application Firewall (WAF) 1.0.2.6, with Gateway 4.6.0.2, allows remote attackers to read sourc…
-
Unscored —CVE-2009-2311 Public exploit
SQL injection vulnerability in the rGallery plugin 1.2.3 for WoltLab Burning Board (WBB3) allows remote attackers to ex…
-
Unscored —CVE-2009-2313 Public exploit
Directory traversal vulnerability in index.php in Jinzora Media Jukebox 2.8 and earlier allows remote attackers to incl…
-
Unscored —CVE-2009-2307 Public exploit
SQL injection vulnerability in the CWGuestBook module 2.1 and earlier for MAXdev MDPro (aka MD-Pro) allows remote attac…
-
Unscored —
Stack-based buffer overflow in rping in HP OpenView Network Node Manager (OV NNM) 7.53 on Linux allows remote attackers…
-
Unscored —CVE-2009-2302 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Aardvark Topsites PHP 5.2.0 and earlier allows remote attacker…
-
Unscored —
index.php in Aardvark Topsites PHP 5.2.0 and earlier allows remote attackers to obtain sensitive information via a none…
-
Unscored —CVE-2009-2308 Public exploit
Multiple SQL injection vulnerabilities in affiliates.php in the Affiliation (aka Affiliates) module 1.1.0 and earlier f…
-
Unscored —
index.php in Aardvark Topsites PHP 5.2.1 and earlier allows remote attackers to obtain sensitive information via a nega…
-
Unscored —CVE-2009-2306 Public exploit
The ARD-9808 DVR card security camera stores sensitive information under the web root with insufficient access control,…
-
Unscored —
The NFSv4 server kernel module in Sun Solaris 10, and OpenSolaris before snv_119, does not properly implement the nfs_p…
-
Unscored —
SmartFilter Web Gateway Security 4.2.1.00 stores user credentials in cleartext in config.txt and uses insecure permissi…
-
Unscored —CVE-2009-2305 Public exploit
The ARD-9808 DVR card security camera allows remote attackers to cause a denial of service via a long URI composed of /…
-
Unscored —CVE-2008-6840 Public exploit
Multiple PHP remote file inclusion vulnerabilities in V-webmail 1.6.4 allow remote attackers to execute arbitrary PHP c…
-
Unscored —CVE-2008-6841 Public exploit
PHP remote file inclusion vulnerability in the Green Mountain Information Technology and Consulting Database Query (com…
-
Unscored —
Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementatio…
-
Unscored —
The OSCAR protocol implementation in Pidgin before 2.5.8 misinterprets the ICQWebMessage message type as the ICQSMS mes…
-
Unscored —CVE-2009-2276 Public exploit
SQL injection vulnerability in voteforus.php in the Vote For Us extension 1.0.1 and earlier for PunBB allows remote att…
-
Unscored —CVE-2009-2286 Public exploit
Buffer overflow in compface 1.5.2 and earlier allows user-assisted attackers to cause a denial of service (crash) via a…
-
Unscored —CVE-2009-2289 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Arcade Trade Script 1.0 beta allows remote attackers to inject…
-
Unscored —CVE-2009-2269 Public exploit
SQL injection vulnerability in Empire CMS 5.1 allows remote attackers to execute arbitrary SQL commands via the bid par…
-
Unscored —
The kvm_arch_vcpu_ioctl_set_sregs function in the KVM in Linux kernel 2.6 before 2.6.30, when running on x86 systems, d…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Appleple a-News 2.32 allows remote attackers to inject arbitrary web script…
-
Unscored —
Unrestricted file upload vulnerability in member/uploads_edit.php in dedecms 5.3 allows remote attackers to execute arb…
-
Unscored —
statuswml.cgi in Nagios before 3.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in …
-
Unscored —
The Huawei D100 has (1) a certain default administrator password for the web interface, and does not force a password c…
-
Unscored —
The default configuration of the Wi-Fi component on the Huawei D100 does not use encryption, which makes it easier for …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the help jsp scripts in Sun Java Web Console 3.0.2 through 3.0.5…
-
Unscored —CVE-2009-2290 Public exploit
SQL injection vulnerability in the Boy Scout Advancement (com_bsadv) component 0.3 and earlier for Joomla! allows remot…
-
Unscored —CVE-2009-2293 Public exploit
Optimum Web Design Tutorial Share 3.5.0 and earlier allows remote attackers to bypass authentication and obtain adminis…
-
Unscored —
The Huawei D100 allows remote attackers to obtain sensitive information via a direct request to (1) lan_status_adv.asp,…
-
Unscored —CVE-2009-2285 Public exploit
Buffer underflow in the LZWDecodeCompat function in libtiff 3.8.2 allows context-dependent attackers to cause a denial …