Archive
July 2009
Vulnerabilities first published in this month (UTC), newest first.
446 results · Feed
-
Unscored —CVE-2008-6867 Public exploit
SQL injection vulnerability in content.php in Scripts For Sites (SFS) EZ Career allows remote attackers to execute arbi…
-
Unscored —CVE-2008-6861 Public exploit
Xigla Software Absolute Newsletter 6.0 and 6.1 allows remote attackers to bypass authentication and gain administrative…
-
Unscored —CVE-2008-6854 Public exploit
Xigla Software Absolute FAQ Manager.NET 6.0 allows remote attackers to bypass authentication and gain administrative ac…
-
Unscored —CVE-2008-6860 Public exploit
Xigla Software Absolute Poll Manager XE 4.1 allows remote attackers to bypass authentication and gain administrative ac…
-
Unscored —
SQL injection vulnerability in modules.php in the Current_Issue module for PHP-Nuke allows remote attackers to execute …
-
Unscored —CVE-2008-6858 Public exploit
Absolute Banner Manager .NET 4.0 allows remote attackers to bypass authentication and gain administrative access by set…
-
Unscored —CVE-2008-6863 Public exploit
Xigla Software Absolute Form Processor .NET 4.0 allows remote attackers to bypass authentication and gain administrativ…
-
Unscored —CVE-2008-6856 Public exploit
Xigla Software Absolute News Manager.NET 5.1 allows remote attackers to bypass authentication and gain administrative a…
-
Unscored —CVE-2008-6862 Public exploit
Absolute Content Rotator 6.0 allows remote attackers to bypass authentication and gain administrative access by setting…
-
Unscored —CVE-2008-6855 Public exploit
Xigla Software Absolute News Feed 1.0 and possibly 1.5 allows remote attackers to bypass authentication and gain admini…
-
Unscored —CVE-2008-6864 Public exploit
Xigla Software Absolute Live Support .NET 5.1 allows remote attackers to bypass authentication and gain administrative …
-
Unscored —
SQL injection vulnerability in modules.php in the Sectionsnew module for PHP-Nuke allows remote attackers to execute ar…
-
Unscored —CVE-2008-6859 Public exploit
Xigla Software Absolute Control Panel XE 1.5 allows remote attackers to bypass authentication and gain administrative a…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in webadmin/admin.php in @mail 5.6.1 allow remote attackers to inje…
-
Unscored —
Multiple unspecified vulnerabilities in Citrix Licensing 11.5 have unknown impact and attack vectors, related to "under…
-
Unscored —
Citrix XenApp (formerly Presentation Server) 4.5 Hotfix Rollup Pack 3 does not apply an access policy when it is define…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Citrix Web Interface 4.6, 5.0, and 5.0.1 allows remote attackers to inject …
-
Unscored —CVE-2009-2451 Public exploit
Multiple SQL injection vulnerabilities in index.php in MIM:InfiniX 1.2.003 and possibly earlier versions allow remote a…
-
Unscored —CVE-2009-2450 Public exploit
The OAmon.sys kernel driver 3.1.0.0 and earlier in Tall Emu Online Armor Personal Firewall AV+ before 3.5.0.12, and Per…
-
Unscored —
Directory traversal vulnerability in maillinglist/admin/change_config.php in ADbNewsSender before 1.5.6 allows remote a…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in ogp_show.php in Online Guestbook Pro 5.1 allow remote attackers …
-
Unscored —
Multiple format string vulnerabilities in the dispatch_command function in libmysqld/sql_parse.cc in mysqld in MySQL 4.…
-
Unscored —
Oracle iPlanet Web Server (formerly Sun Java System Web Server or Sun ONE Web Server) 6.1 before SP12, and 7.0 through …
-
Unscored —
Cross-site scripting (XSS) vulnerability in ogp_show.php in Online Guestbook Pro 5.1 allows remote attackers to inject …
-
Unscored —CVE-2009-2442 Public exploit
Cross-site scripting (XSS) vulnerability in public/index.php in Linea21 1.2.1 allows remote attackers to inject arbitra…
-
Unscored —
Buffer overflow in the syscall implementation in IBM AIX 5.3 allows local users to gain privileges via unspecified vect…
-
Unscored —CVE-2009-2438 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in the search module in ClanSphere 2009.0 and 2009.0.2 allows rem…
-
Unscored —CVE-2009-2441 Public exploit
Cross-site scripting (XSS) vulnerability in ogp_show.php in Online Guestbook Pro 5.1 allows remote attackers to inject …
-
Unscored —CVE-2009-2437 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Rentventory 1.0.1 allow remote attackers to inject …
-
Unscored —CVE-2009-2436 Public exploit
SQL injection vulnerability in page.php in Online Dating Software MyPHPDating 1.0 allows remote attackers to execute ar…
-
Unscored —CVE-2009-2439 Public exploit
Multiple SQL injection vulnerabilities in Web Development House Alibaba Clone allow remote attackers to execute arbitra…
-
Unscored —
Directory traversal vulnerability in maillinglist/setup/step1.php.inc in ADbNewsSender before 1.5.6, and 2.0 before RC2…
-
Unscored —CVE-2009-2443 Public exploit
Siteframe 3.2.3, and other 3.2.x versions, allows remote attackers to obtain configuration information via a direct req…
-
Unscored —CVE-2009-2440 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in JNM Guestbook 3.0 allows remote attackers to inject arbitrary …
-
Unscored —
The Sametime server in IBM Lotus Instant Messaging and Web Conferencing 6.5.1 generates error messages for a failed log…
-
Unscored —
Stack-based buffer overflow in the AddFavorite method in Microsoft Internet Explorer allows remote attackers to cause a…
-
Unscored —
WordPress 2.7.1 places the username of a post's author in an HTML comment, which allows remote attackers to obtain sens…
-
Unscored —
The forgotten mail interface in WordPress and WordPress MU before 2.8.1 exhibits different behavior for a password requ…
-
Unscored —CVE-2009-2334 Public exploit
wp-admin/admin.php in WordPress and WordPress MU before 2.8.1 does not require administrative authentication to access …
-
Unscored —
WordPress and WordPress MU before 2.8.1 allow remote attackers to obtain sensitive information via a direct request to …