Archive
18 August 2009
Vulnerabilities first published on this day (UTC), newest first.
26 results · Clear filters · Feed
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Adobe ColdFusion Server 8.0.1, 8, and earlier allow remote attac…
-
Unscored —CVE-2009-1873 Public exploit
Directory traversal vulnerability in logging/logviewer.jsp in the Management Console in Adobe JRun Application Server 4…
-
Unscored —CVE-2009-2852 Public exploit
WP-Syntax plugin 0.9.1 and earlier for Wordpress, with register_globals enabled, allows remote attackers to execute arb…
-
Unscored —CVE-2009-2847 Public exploit
The do_sigaltstack function in kernel/signal.c in Linux kernel 2.4 through 2.4.37 and 2.6 before 2.6.31-rc5, when runni…
-
Unscored —CVE-2009-2851 Public exploit
Cross-site scripting (XSS) vulnerability in the administrator interface in WordPress before 2.8.2 allows remote attacke…
-
Unscored —CVE-2008-7000 Public exploit
PHP remote file inclusion vulnerability in index.php in PHPAuction 3.2 allows remote attackers to execute arbitrary PHP…
-
Unscored —CVE-2008-7001 Public exploit
Unrestricted file upload vulnerability in the file manager in Creative Mind Creator CMS 5.0 allows remote attackers to …
-
Unscored —CVE-2008-7003 Public exploit
Multiple SQL injection vulnerabilities in login.php in The Rat CMS Alpha 2 allow remote attackers to execute arbitrary …
-
Unscored —CVE-2008-7002 Public exploit
PHP 5.2.5 does not enforce (a) open_basedir and (b) safe_mode_exec_dir restrictions for certain functions, which might …
-
Unscored —CVE-2008-6979 Public exploit
Cross-site scripting (XSS) vulnerability in as_archives.php in phpAdultSite CMS, possibly 2.3.2, allows remote attacker…
-
Unscored —
Stack-based buffer overflow in the SaveAs feature (SaveFileAsWithFilter function) in win_util.cc in Google Chrome 0.2.1…
-
Unscored —CVE-2008-6997 Public exploit
Google Chrome 0.2.149.27 allows user-assisted remote attackers to cause a denial of service (browser crash) via an IMG …
-
Unscored —CVE-2008-6998 Public exploit
Stack-based buffer overflow in chrome/common/gfx/url_elider.cc in Google Chrome 0.2.149.27 and other versions before 0.…
-
Unscored —CVE-2008-6989 Public exploit
SQL injection vulnerability in gallery.php in Easy Photo Gallery (aka Ezphotogallery) 2.1 allows remote attackers to ex…
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in devalcms 1.4a allows remote attackers to inject arbitrary web …
-
Unscored —CVE-2008-6985 Public exploit
Multiple SQL injection vulnerabilities in includes/classes/shopping_cart.php in Zen Cart 1.2.0 through 1.3.8a, when mag…
-
Unscored —CVE-2008-6992 Public exploit
GreenSQL Firewall (greensql-fw), possibly before 0.9.2 or 0.9.4, allows remote attackers to bypass the SQL injection pr…
-
Unscored —CVE-2008-6996 Public exploit
Google Chrome BETA (0.2.149.27) does not prompt the user before saving an executable file, which makes it easier for re…
-
Unscored —CVE-2008-6990 Public exploit
SQL injection vulnerability in gallery.php in Easy Photo Gallery (aka Ezphotogallery) 2.1 allows remote attackers to ex…
-
Unscored —CVE-2008-6976 Public exploit
MikroTik RouterOS 3.x through 3.13 and 2.x through 2.9.51 allows remote attackers to modify Network Management System (…
-
Unscored —CVE-2008-6988 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Easy Photo Gallery (aka Ezphotogallery) 2.1 allow remote attacke…
-
Unscored —CVE-2008-6977 Public exploit
Cross-site scripting (XSS) vulnerability in album.asp in Full Revolution aspWebAlbum 3.2 allows remote attackers to inj…
-
Unscored —CVE-2008-6983 Public exploit
modules/tool/hitcounter.php in devalcms 1.4a allows remote attackers to execute arbitrary PHP code via the HTTP Referer…
-
Unscored —CVE-2008-6978 Public exploit
Unrestricted file upload vulnerability in Full Revolution aspWebAlbum 3.2 allows remote attackers to execute arbitrary …
-
Unscored —CVE-2008-6995 Public exploit
Integer underflow in net/base/escape.cc in chrome.dll in Google Chrome 0.2.149.27 allows remote attackers to cause a de…
-
Unscored —CVE-2008-6991 Public exploit
SQL injection vulnerability in public/page.php in Websens CMSbright allows remote attackers to execute arbitrary SQL co…