Archive
18 August 2009
Vulnerabilities first published on this day (UTC), newest first.
47 results · Feed
-
Unscored —
Adobe ColdFusion 8.0.1 and earlier might allow attackers to obtain sensitive information via unspecified vectors, relat…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Adobe ColdFusion Server 8.0.1, 8, and earlier allow remote attac…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Adobe ColdFusion 8.0.1 and earlier allow remote attackers to inj…
-
Unscored —
Session fixation vulnerability in Adobe ColdFusion 8.0.1 and earlier allows remote attackers to hijack web sessions via…
-
Unscored —CVE-2009-1873 Public exploit
Directory traversal vulnerability in logging/logviewer.jsp in the Management Console in Adobe JRun Application Server 4…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the Management Console in Adobe JRun 4.0 allow remote attackers …
-
Unscored —
Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 8.0.1 and earlier allows remote attackers to inject arbitr…
-
Unscored —
Sun Virtual Desktop Infrastructure (VDI) 3.0, when anonymous binding is enabled, does not properly handle a client's at…
-
Unscored —
Multiple buffer overflows in NASA Common Data Format (CDF) allow context-dependent attackers to execute arbitrary code,…
-
Unscored —
Wordpress before 2.8.3 allows remote attackers to gain privileges via a direct request to (1) admin-footer.php, (2) edi…
-
Unscored —
The eisa_eeprom_read function in the parisc isa-eeprom component (drivers/parisc/eisa_eeprom.c) in the Linux kernel bef…
-
Unscored —
cfg80211 in net/wireless/scan.c in the Linux kernel 2.6.30-rc1 and other versions before 2.6.31-rc6 allows remote attac…
-
Unscored —
The md driver (drivers/md/md.c) in the Linux kernel before 2.6.30.2 might allow local users to cause a denial of servic…
-
Unscored —CVE-2009-2855 EPSS 34%
The strListGetItem function in src/HttpHeaderTools.c in Squid 2.7 allows remote attackers to cause a denial of service …
-
Unscored —CVE-2009-2852 Public exploit
WP-Syntax plugin 0.9.1 and earlier for Wordpress, with register_globals enabled, allows remote attackers to execute arb…
-
Unscored —CVE-2009-2847 Public exploit
The do_sigaltstack function in kernel/signal.c in Linux kernel 2.4 through 2.4.37 and 2.6 before 2.6.31-rc5, when runni…
-
Unscored —
The execve function in the Linux kernel, possibly 2.6.30-rc6 and earlier, does not properly clear the current->clear_ch…
-
Unscored —CVE-2009-2851 Public exploit
Cross-site scripting (XSS) vulnerability in the administrator interface in WordPress before 2.8.2 allows remote attacke…
-
Unscored —
Wordpress before 2.8.3 does not check capabilities for certain actions, which allows remote attackers to make unauthori…
-
Unscored —CVE-2008-7000 Public exploit
PHP remote file inclusion vulnerability in index.php in PHPAuction 3.2 allows remote attackers to execute arbitrary PHP…
-
Unscored —CVE-2008-7001 Public exploit
Unrestricted file upload vulnerability in the file manager in Creative Mind Creator CMS 5.0 allows remote attackers to …
-
Unscored —CVE-2008-7003 Public exploit
Multiple SQL injection vulnerabilities in login.php in The Rat CMS Alpha 2 allow remote attackers to execute arbitrary …
-
Unscored —CVE-2008-7002 Public exploit
PHP 5.2.5 does not enforce (a) open_basedir and (b) safe_mode_exec_dir restrictions for certain functions, which might …
-
Unscored —CVE-2008-6979 Public exploit
Cross-site scripting (XSS) vulnerability in as_archives.php in phpAdultSite CMS, possibly 2.3.2, allows remote attacker…
-
Unscored —
Stack-based buffer overflow in the SaveAs feature (SaveFileAsWithFilter function) in win_util.cc in Google Chrome 0.2.1…
-
Unscored —CVE-2008-6997 Public exploit
Google Chrome 0.2.149.27 allows user-assisted remote attackers to cause a denial of service (browser crash) via an IMG …
-
Unscored —CVE-2008-6998 Public exploit
Stack-based buffer overflow in chrome/common/gfx/url_elider.cc in Google Chrome 0.2.149.27 and other versions before 0.…
-
Unscored —CVE-2008-6989 Public exploit
SQL injection vulnerability in gallery.php in Easy Photo Gallery (aka Ezphotogallery) 2.1 allows remote attackers to ex…
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in devalcms 1.4a allows remote attackers to inject arbitrary web …
-
Unscored —CVE-2008-6985 Public exploit
Multiple SQL injection vulnerabilities in includes/classes/shopping_cart.php in Zen Cart 1.2.0 through 1.3.8a, when mag…
-
Unscored —CVE-2008-6992 Public exploit
GreenSQL Firewall (greensql-fw), possibly before 0.9.2 or 0.9.4, allows remote attackers to bypass the SQL injection pr…
-
Unscored —CVE-2008-6996 Public exploit
Google Chrome BETA (0.2.149.27) does not prompt the user before saving an executable file, which makes it easier for re…
-
Unscored —
SQL injection vulnerability in the actionMultipleAddProduct function in includes/classes/shopping_cart.php in Zen Cart …
-
Unscored —
SQL injection vulnerability in as_archives.php in phpAdultSite CMS, possibly 2.3.2, allows remote attackers to execute …
-
Unscored —CVE-2008-6990 Public exploit
SQL injection vulnerability in gallery.php in Easy Photo Gallery (aka Ezphotogallery) 2.1 allows remote attackers to ex…
-
Unscored —
phpAuction 3.2, and possibly 3.3.0 GPL Basic edition, allows remote attackers to obtain configuration information via a…
-
Unscored —CVE-2008-6976 Public exploit
MikroTik RouterOS 3.x through 3.13 and 2.x through 2.9.51 allows remote attackers to modify Network Management System (…
-
Unscored —CVE-2008-6988 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Easy Photo Gallery (aka Ezphotogallery) 2.1 allow remote attacke…
-
Unscored —CVE-2008-6977 Public exploit
Cross-site scripting (XSS) vulnerability in album.asp in Full Revolution aspWebAlbum 3.2 allows remote attackers to inj…
-
Unscored —
Unrestricted file upload vulnerability in eZoneScripts Dating Website script allows remote attackers to execute arbitra…