Archive
July 2009
Vulnerabilities first published in this month (UTC), newest first.
446 results · Feed
-
Unscored —
The Sun Java System (SJS) Access Manager Policy Agent module 2.2 for SJS Web Proxy Server 4.0 allows remote attackers t…
-
Unscored —CVE-2009-2603 Public exploit
Multiple SQL injection vulnerabilities in index.php in Escon SupportPortal Pro 3.0 allow remote attackers to execute ar…
-
Unscored —CVE-2009-2602 Public exploit
R2 Newsletter Lite, Pro, and Stats stores sensitive information under the web root with insufficient access control, wh…
-
Unscored —CVE-2009-2599 Public exploit
SQL injection vulnerability in index.php in RadCLASSIFIEDS Gold 2.0 allows remote attackers to execute arbitrary SQL co…
-
Unscored —
Cross-site scripting (XSS) vulnerability in login.php in EsPartenaires 1.0 allows remote attackers to inject arbitrary …
-
Unscored —CVE-2008-6875 Public exploit
SQL injection vulnerability in default.asp in ASP Product Catalog allows remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2008-6874 Public exploit
Multiple SQL injection vulnerabilities in ASP SiteWare autoDealer 1 and 2 allow remote attackers to execute arbitrary S…
-
Unscored —CVE-2009-2587 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in DragDropCart allow remote attackers to inject arbitrary web scri…
-
Unscored —
SQL injection vulnerability in guestbook.php in PHPJunkYard GBook 1.6 allows remote attackers to execute arbitrary SQL …
-
Unscored —
SQL injection vulnerability in showcategory.php in Hutscripts PHP Website Script allows remote attackers to execute arb…
-
Unscored —CVE-2009-2585 Public exploit
SQL injection vulnerability in index.php in Mlffat 2.2 allows remote attackers to execute arbitrary SQL commands via a …
-
Unscored —CVE-2009-2586 Public exploit
Cross-site scripting (XSS) vulnerability in articles.php in EDGEPHP EZArticles allows remote attackers to inject arbitr…
-
Unscored —CVE-2009-2594 Public exploit
Cross-site scripting (XSS) vulnerability in censura.php in Censura 1.16.04 allows remote attackers to inject arbitrary …
-
Unscored —CVE-2009-2595 Public exploit
Cross-site scripting (XSS) vulnerability in productSearch.html in Censura 2.0.4 and 2.1.0 allows remote attackers to in…
-
Unscored —CVE-2009-2588 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Hotscripts Type PHP Clone Script allow remote attackers to injec…
-
Unscored —CVE-2009-2593 Public exploit
SQL injection vulnerability in censura.php in Censura 1.16.04 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2009-2591 Public exploit
SQL injection vulnerability in the MyAnnonces module for E-Xoopport 3.1 allows remote attackers to execute arbitrary SQ…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Hutscripts PHP Website Script allow remote attackers to inject a…
-
High 7.8
Unspecified vulnerability in Adobe Reader and Acrobat 9.x through 9.1.2, and Adobe Flash Player 9.x through 9.0.159.0 a…
KEV Jun 8, 2022 -
Unscored —
Off-by-one error in the options_write function in drivers/misc/sgi-gru/gruprocfs.c in the SGI GRU driver in the Linux k…
-
Unscored —
Multiple session fixation vulnerabilities in IBM Tivoli Identity Manager (ITIM) 5.0.0.6 allow remote attackers to hijac…
-
Unscored —
Stack-based buffer overflow in manager.exe in Akamai Download Manager (aka DLM or dlmanager) before 2.2.4.8 allows remo…
-
Unscored —CVE-2008-6871 Public exploit
Merlix Educate Server stores db.mdb under the web root with insufficient access control, which allows remote attackers …
-
Unscored —CVE-2008-6873 Public exploit
SQL injection vulnerability in Active Web Mail 4.0 allows remote attackers to execute arbitrary SQL commands via the Ta…
-
Unscored —CVE-2008-6869 Public exploit
Oramon Oracle Database Monitoring Tool 2.0.1 stores sensitive information under the web root with insufficient access c…
-
Unscored —CVE-2008-6872 Public exploit
ASPThai.NET ASPThai Forums 8.5 stores sensitive information under the web root with insufficient access control, which …
-
Unscored —
Cross-site scripting (XSS) vulnerability in default/login.php in EditeurScripts EsBaseAdmin 2.1 allows remote attackers…
-
Unscored —CVE-2008-6870 Public exploit
Merlix Educate Server allows remote attackers to bypass intended security restrictions and obtain sensitive information…
-
Unscored —
Cross-site scripting (XSS) vulnerability in modifier.php in EditeurScripts EsNews 1.2 allows remote attackers to inject…
-
Unscored —
The Research In Motion (RIM) BlackBerry 8800 allows remote attackers to cause a denial of service (memory consumption a…
-
Unscored —
Google Chrome 2.x through 2.0.172 allows remote attackers to cause a denial of service (application crash) via a long U…
-
Unscored —CVE-2009-2576 EPSS 15%
Microsoft Internet Explorer 6.0.2900.2180 and earlier allows remote attackers to cause a denial of service (CPU and mem…
-
Unscored —
The nsXULTemplateQueryProcessorRDF::CheckIsSeparator function in Mozilla Firefox before 3.0.12, SeaMonkey 2.0a1pre, and…
-
Unscored —
Mozilla Firefox before 3.0.12 and 3.5 before 3.5.1 allows remote attackers to cause a denial of service (application cr…
-
Unscored —
Mozilla Firefox before 3.0.12 does not always use XPCCrossOriginWrapper when required during object construction, which…
-
Unscored —
Integer overflow in Apple CoreGraphics, as used in Safari before 4.0.3, Mozilla Firefox before 3.0.12, and Mac OS X 10.…
-
Unscored —
Opera 9.52 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption, and applicatio…
-
Unscored —
The browser engine in Mozilla Firefox before 3.0.12 and Thunderbird allows remote attackers to cause a denial of servic…
-
Unscored —
The JavaScript engine in Mozilla Firefox before 3.0.12 and Thunderbird allows remote attackers to cause a denial of ser…
-
Unscored —
Mozilla Firefox before 3.0.12 and Thunderbird allow remote attackers to cause a denial of service (memory corruption an…