Skip to content
OpenAdvisories

Archive

21 August 2009

Vulnerabilities first published on this day (UTC), newest first.

26 results · Clear filters · Feed

  • Unscored —
    CVE-2009-2927 Public exploit

    SQL injection vulnerability in DetailFile.php in DigitalSpinners DS CMS 1.0 allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2009-2930 Public exploit

    Cross-site scripting (XSS) vulnerability in the Search feature in elka CMS (aka Elkapax) allows remote attackers to inj…

  • Unscored —
    CVE-2009-2934 Public exploit EPSS 10%

    Multiple stack-based buffer overflows in xaudio.dll in Programmed Integration PIPL 2.5.0 and 2.5.0D allow remote attack…

  • Unscored —
    CVE-2009-2926 Public exploit

    Multiple SQL injection vulnerabilities in PHP Competition System BETA 0.84 and earlier allow remote attackers to execut…

  • Unscored —
    CVE-2009-2929 Public exploit

    Multiple SQL injection vulnerabilities in TGS Content Management 0.x allow remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2009-2928 Public exploit

    Cross-site scripting (XSS) vulnerability in login.php in TGS Content Management 0.x allows remote attackers to inject a…

  • Unscored —
    CVE-2009-1879 Public exploit

    Cross-site scripting (XSS) vulnerability in index.template.html in the express-install templates in the SDK in Adobe Fl…

  • Unscored —
    CVE-2009-2473 Public exploit

    neon before 0.28.6, when expat is used, does not properly detect recursion during entity expansion, which allows contex…

  • Unscored —
    CVE-2008-7025 Public exploit

    TrueVector in Check Point ZoneAlarm 8.0.020.000, with vsmon.exe running, allows remote HTTP proxies to cause a denial o…

  • Unscored —
    CVE-2008-7027 Public exploit

    Libra File Manager 1.18 and earlier allows remote attackers to bypass authentication and gain privileges by setting the…

  • Unscored —
    CVE-2008-7028 Public exploit

    RPG.Board 0.8 Beta2 and earlier allows remote attackers to bypass authentication and gain privileges by setting the kee…

  • Unscored —
    CVE-2008-7022 Public exploit

    Insecure method vulnerability in ChilkatMail_v7_9.dll in the Chilkat Software IMAP ActiveX control (ChilkatMail2.Chilka…

  • Unscored —
    CVE-2008-7017 Public exploit

    Cross-site scripting (XSS) vulnerability in analyse.php in CAcert 20080921, and possibly other versions before 20080928…

  • Unscored —
    CVE-2008-7024 Public exploit

    admin.php in Arz Development The Gemini Portal 4.7 and earlier allows remote attackers to bypass authentication and gai…

  • Unscored —
    CVE-2008-7021 Public exploit

    Unrestricted file upload vulnerability in editlogo.php in AvailScript Jobs Portal Script allows remote authenticated us…

  • Unscored —
    CVE-2008-7019 Public exploit

    Esqlanelapse 2.6.1 and 2.6.2 allows remote attackers to bypass authentication and gain privileges via modified (1) enom…

  • Unscored —
    CVE-2008-7026 Public exploit

    Unrestricted file upload vulnerability in filesystem3.class.php in eFront 3.5.1 build 2710 and earlier allows remote at…

  • Unscored —
    CVE-2009-2921 Public exploit

    Multiple SQL injection vulnerabilities in login.php in MOC Designs PHP News 1.1 allow remote attackers to execute arbit…

  • Unscored —
    CVE-2009-2918 Public exploit

    The tgbvpn.sys driver in TheGreenBow IPSec VPN Client 4.61.003 allows local users to cause a denial of service (NULL po…

  • Unscored —
    CVE-2009-2922 Public exploit

    Absolute path traversal vulnerability in pixaria.image.php in Pixaria Gallery 2.0.0 through 2.3.5 allows remote attacke…

  • Unscored —
    CVE-2009-2925 Public exploit

    Directory traversal vulnerability in DJcalendar.cgi in DJCalendar allows remote attackers to read arbitrary files via a…

  • Unscored —
    CVE-2009-2924 Public exploit

    Multiple SQL injection vulnerabilities in Videos Broadcast Yourself 2 allow remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2009-2917 Public exploit

    Stack-based buffer overflow in ImTOO MPEG Encoder 3.1.53 allows remote attackers to cause a denial of service (crash) o…

  • Unscored —
    CVE-2009-2915 Public exploit

    SQL injection vulnerability in 2fly_gift.php in 2FLY Gift Delivery System 6.0 allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2009-2920 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Elvin 1.2.2 allow remote attackers to inject arbitrary web scrip…

  • Unscored —
    CVE-2009-2923 Public exploit

    Multiple directory traversal vulnerabilities in BitmixSoft PHP-Lance 1.52 allow remote attackers to read arbitrary file…