14 August 2009

22 results · Feed

• Unscored —
  CVE-2009-2770 Public exploit

  PowerUpload 2.4 allows remote attackers to bypass authentication and gain administrative access via a MIME encoded valu…

  Aug 14, 2009
• Unscored —
  CVE-2009-2776 Public exploit

  SQL injection vulnerability in showresult.asp in Smart ASP Survey allows remote attackers to execute arbitrary SQL comm…

  Aug 14, 2009
• Unscored —
  CVE-2009-2774 Public exploit

  SQL injection vulnerability in paidbanner.php in PHP Paid 4 Mail Script allows remote attackers to execute arbitrary SQ…

  Aug 14, 2009
• Unscored —
  CVE-2009-2773 Public exploit

  PHP remote file inclusion vulnerability in home.php in PHP Paid 4 Mail Script allows remote attackers to execute arbitr…

  Aug 14, 2009
• Unscored —
  CVE-2009-2771

  Cross-site scripting (XSS) vulnerability in Free Arcade Script 1.3 allows remote attackers to inject arbitrary web scri…

  Aug 14, 2009
• Unscored —
  CVE-2009-2777 Public exploit

  SQL injection vulnerability in visitor/view.php in GarageSales Script allows remote attackers to execute arbitrary SQL …

  Aug 14, 2009
• Unscored —
  CVE-2009-2778 Public exploit

  Cross-site scripting (XSS) vulnerability in visitor/view.php in GarageSales Script allows remote attackers to inject ar…

  Aug 14, 2009
• Unscored —
  CVE-2009-2772 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in PG Roommate Finder Solution allow remote attackers to inject arb…

  Aug 14, 2009
• Unscored —
  CVE-2009-2769 Public exploit

  PHP remote file inclusion vulnerability in include/timesheet.php in Ultrize TimeSheet 1.2.2, when register_globals is e…

  Aug 14, 2009
• Unscored —
  CVE-2009-2775 Public exploit

  SQL injection vulnerability in linkout.php in PHPArcadeScript (PHP Arcade Script) 4.0 allows remote attackers to execut…

  Aug 14, 2009
• Unscored —
  CVE-2008-6974 Public exploit

  Multiple cross-site request forgery (CSRF) vulnerabilities in apply.cgi in DD-WRT 24 sp1 and earlier allow remote attac…

  Aug 14, 2009
• Unscored —
  CVE-2008-6975 Public exploit

  Multiple cross-site request forgery (CSRF) vulnerabilities in apply.cgi in DD-WRT 24 sp2 allow remote attackers to hija…

  Aug 14, 2009
• Unscored —
  CVE-2009-1048

  The web interface on the snom VoIP phones snom 300, snom 320, snom 360, snom 370, and snom 820 with firmware 6.5 before…

  Aug 14, 2009
• Unscored —
  CVE-2009-2768

  The load_flat_shared_library function in fs/binfmt_flat.c in the flat subsystem in the Linux kernel before 2.6.31-rc6 a…

  Aug 14, 2009
• Unscored —
  CVE-2009-2767 Public exploit

  The init_posix_timers function in kernel/posix-timers.c in the Linux kernel before 2.6.31-rc6 allows local users to cau…

  Aug 14, 2009
• Unscored —
  CVE-2009-2691

  The mm_for_maps function in fs/proc/base.c in the Linux kernel 2.6.30.4 and earlier allows local users to read (1) maps…

  Aug 14, 2009
• Unscored —
  CVE-2009-2692 Public exploit EPSS 15%

  The Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all function pointers for sock…

  Aug 14, 2009
• Unscored —
  CVE-2009-2417

  lib/ssluse.c in cURL and libcurl 7.4 through 7.19.5, when OpenSSL is used, does not properly handle a '\0' character in…

  curl Debian
  Aug 14, 2009
• Unscored —
  CVE-2009-2765 Public exploit EPSS 83%

  httpd.c in httpd in the management GUI in DD-WRT 24 sp1, and other versions before build 12533, allows remote attackers…

  Aug 14, 2009
• Unscored —
  CVE-2009-2677

  Cross-site request forgery (CSRF) vulnerability in HP Insight Control Suite For Linux (aka ICE-LX) before 2.11 allows r…

  Aug 14, 2009
• Unscored —
  CVE-2009-2766 Public exploit

  httpd.c in httpd in the management GUI in DD-WRT 24 sp1 does not require administrative authentication for programs und…

  Aug 14, 2009
• Unscored —
  CVE-2009-2764 Public exploit EPSS 11%

  Microsoft Internet Explorer 8.0.7100.0 on Windows 7 RC on the x64 platform allows remote attackers to cause a denial of…

  Aug 14, 2009