Archive
July 2009
Vulnerabilities first published in this month (UTC), newest first.
446 results · Feed
-
Unscored —
Memory leak on the Cisco Wireless LAN Controller (WLC) platform 4.x before 4.2.205.0, 5.1 before 5.1.163.0, and 5.0 and…
-
Unscored —CVE-2009-2620 Public exploit
src/remote/server.cpp in fbserver.exe in Firebird SQL 1.5 before 1.5.6, 2.0 before 2.0.6, 2.1 before 2.1.3, and 2.5 bef…
-
Unscored —
Race condition in the Solaris Auditing subsystem in Sun Solaris 9 and 10 and OpenSolaris before snv_121, when extended …
-
High 8.8CVE-2009-2493 EPSS 38%
The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP…
-
Medium 6.5CVE-2009-2495 EPSS 34%
The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP…
-
Unscored —CVE-2009-2635 Public exploit
PHP remote file inclusion vulnerability in toolbar_ext.php in the RealEstateManager (com_realestatemanager) component 1…
-
Unscored —CVE-2009-2637 Public exploit
PHP remote file inclusion vulnerability in toolbar_ext.php in the BookLibrary (com_booklibrary) component 1.5.2.4 Basic…
-
Unscored —CVE-2009-2642 Public exploit
index.php in Desi Short URL Script 1.0 allows remote attackers to bypass authentication by setting the logged cookie to…
-
Unscored —CVE-2009-2633 Public exploit
PHP remote file inclusion vulnerability in toolbar_ext.php in the VehicleManager (com_vehiclemanager) component 1.0 Bas…
-
Unscored —
Multiple unspecified vulnerabilities in the PDF distiller in the Attachment Service component in Research In Motion (RI…
-
Unscored —CVE-2009-2639 Public exploit
SQL injection vulnerability in admin.php in MRCGIGUY The Ticket System 2.0 allows remote attackers to execute arbitrary…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Integration page in the WebMail component in Kerio MailServer 6.6.0, 6.…
-
Unscored —CVE-2009-2640 Public exploit
Multiple SQL injection vulnerabilities in cgi/admin.cgi in Interlogy Profile Manager Basic allow remote attackers to ex…
-
Unscored —CVE-2009-2638 Public exploit
SQL injection vulnerability in the AkoBook (com_akobook) component 2.3 for Joomla! allows remote attackers to execute a…
-
Unscored —CVE-2009-2634 Public exploit
PHP remote file inclusion vulnerability in toolbar_ext.php in the MediaLibrary (com_media_library) component 1.5.3 Basi…
-
Unscored —CVE-2009-2641 Public exploit
PHP remote file inclusion vulnerability in app_and_readme/navigator/index.php in School Data Navigator allows remote at…
-
Unscored —CVE-2009-2621 EPSS 23%
Squid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 does not properly enforce "buffer limits and related bound chec…
-
Unscored —CVE-2009-2622 EPSS 57%
Squid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 allows remote attackers to cause a denial of service via malfor…
-
Unscored —CVE-2009-2611 Public exploit
Directory traversal vulnerability in infusions/last_seen_users_panel/last_seen_users_panel.php in MyFusion (aka MyF) 6 …
-
Unscored —CVE-2009-2608 Public exploit
Multiple SQL injection vulnerabilities in PHP Address Book 4.0.x allow remote attackers to execute arbitrary SQL comman…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in DataCheck Solutions LinkPal 1.x allow remote attackers to inject…
-
Unscored —CVE-2009-2614 Public exploit
SQL injection vulnerability in z_admin_login.asp in DataCheck Solutions LinkPal 1.x allows remote attackers to execute …
-
Unscored —CVE-2009-2618 Public exploit
SQL injection vulnerability in the Surveys (aka NS-Polls) module in MDPro (MD-Pro) 1.083.x allows remote attackers to e…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Links Related module in the Links Package 5.x before 5.x-1.13 and 6.x b…
-
Unscored —CVE-2009-2619 Public exploit
SQL injection vulnerability in login.asp in DataCheck Solutions V-SpacePal allows remote attackers to execute arbitrary…
-
Unscored —CVE-2009-2607 Public exploit
SQL injection vulnerability in the com_pinboard component for Joomla! allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2009-2609 Public exploit
SQL injection vulnerability in the amoCourse (com_amocourse) component for Joomla! allows remote attackers to execute a…
-
Unscored —
SQL injection vulnerability in login.aspx in ProSMDR allows remote attackers to execute arbitrary SQL commands via the …
-
Unscored —
SQL injection vulnerability in z_admin_login.asp in DataCheck Solutions SitePal 1.x allows remote attackers to execute …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in DataCheck Solutions SitePal 1.x allow remote attackers to inject…
-
Unscored —CVE-2009-2617 Public exploit
Stack-based buffer overflow in medialib.dll in BaoFeng Storm 3.9.62 allows remote attackers to execute arbitrary code v…
-
Unscored —
Directory traversal vulnerability in admin/includes/languages/english.php in Zen Cart 1.3.8a, 1.3.8, and earlier, when …
-
Unscored —
Directory traversal vulnerability in admin/includes/initsystem.php in Zen Cart 1.3.8 and 1.3.8a, when .htaccess is not …
-
Unscored —CVE-2009-2598 Public exploit
Multiple SQL injection vulnerabilities in Online Grades & Attendance 3.2.6 and earlier allow (1) remote attackers to ex…
-
Unscored —
Unspecified vulnerability in the Solaris Auditing subsystem in Sun Solaris 9 and 10 and OpenSolaris before snv_121, whe…
-
Unscored —CVE-2009-2601 Public exploit
SQL injection vulnerability in the Joomlaequipment (aka JUser or com_juser) component 2.0.4 for Joomla! allows remote a…
-
Unscored —CVE-2009-2606 Public exploit
ASP Football Pool 2.3 stores sensitive information under the web root with insufficient access control, which allows re…
-
Unscored —CVE-2009-2600 Public exploit
Multiple directory traversal vulnerabilities in view.php in Webboard 2.90 beta and earlier allow remote attackers to re…
-
Unscored —CVE-2009-2604 Public exploit
Multiple SQL injection vulnerabilities in adminlogin.asp in Zen Help Desk 2.1 allow remote attackers to execute arbitra…
-
Unscored —CVE-2009-2605 Public exploit
Multiple SQL injection vulnerabilities in adminquery.php in Traidnt Up 2.0 allow remote attackers to execute arbitrary …