Skip to content
OpenAdvisories

Archive

25 August 2009

Vulnerabilities first published on this day (UTC), newest first.

23 results · Clear filters · Feed

  • Unscored —
    CVE-2009-2960 Public exploit

    CuteFlow 2.10.3 and 2.11.0_c does not properly restrict access to pages/edituser.php, which allows remote attackers to …

  • Unscored —
    CVE-2009-2961 Public exploit

    Stack-based buffer overflow in Thaddy de Konng KOL Player 1.0 allows remote attackers to cause a denial of service (cra…

  • Unscored —
    CVE-2009-2965 Public exploit

    Cross-site scripting (XSS) vulnerability in entry/index.jsp in Radvision Scopia 5.7, and possibly other versions before…

  • Unscored —
    CVE-2009-2966 Public exploit

    avp.exe in Kaspersky Internet Security 9.0.0.459 and Anti-Virus 9.0.0.463 allows remote attackers to cause a denial of …

  • Unscored —
    CVE-2008-7077 Public exploit

    Multiple SQL injection vulnerabilities in SailPlanner 0.3a allow remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2008-7080 Public exploit

    Team PHP PHP Classifieds Script stores sensitive information under the web root with insufficient access control, which…

  • Unscored —
    CVE-2008-7062 Public exploit

    Unrestricted file upload vulnerability in admin/index.php in Download Manager module 1.0 for LoveCMS 1.6.2 Final allows…

  • Unscored —
    CVE-2008-7072 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Chipmunk Topsites allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2008-7071 Public exploit

    SQL injection vulnerability in authenticate.php in Chipmunk Topsites allows remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2008-7073 Public exploit

    PHP remote file inclusion vulnerability in lib/action/rss.php in RSS module 0.1 for Pie Web M{a,e}sher, when register_g…

  • Unscored —
    CVE-2008-7078 Public exploit

    Multiple buffer overflows in Rumpus before 6.0.1 allow remote attackers to (1) cause a denial of service (segmentation …

  • Unscored —
    CVE-2008-7069 Public exploit

    All Club CMS (ACCMS) 0.0.2 and earlier stores sensitive information under the web root with insufficient access control…

  • Unscored —
    CVE-2008-7064 Public exploit

    Directory traversal vulnerability in the get_lang function in global.php in Quicksilver Forums 1.4.2 and earlier, as us…

  • Unscored —
    CVE-2008-7065 Public exploit

    Siemens C450 IP and C475 IP VoIP devices allow remote attackers to cause a denial of service (disconnected calls and de…

  • Unscored —
    CVE-2008-7083 Public exploit

    Multiple SQL injection vulnerabilities in ReVou Micro Blogging Twitter clone allow remote attackers to execute arbitrar…

  • Unscored —
    CVE-2008-7066 Public exploit

    OpenForum 0.66 Beta allows remote attackers to bypass authentication and reset passwords of other users via a direct re…

  • Unscored —
    CVE-2008-7063 Public exploit

    Ocean12 FAQ Manager Pro stores sensitive data under the web root with insufficient access control, which allows remote …

  • Unscored —
    CVE-2008-7075 Public exploit

    Multiple SQL injection vulnerabilities in Kalptaru Infotech Ltd. Star Articles 6.0 allow remote attackers to inject arb…

  • Unscored —
    CVE-2008-7076 Public exploit

    Unrestricted file upload vulnerability in user.modify.profile.php in Kalptaru Infotech Ltd. Star Articles 6.0 allows re…

  • Unscored —
    CVE-2008-7067 Public exploit

    PHP remote file inclusion vulnerability in admin/plugins/Online_Users/main.php in PageTree CMS 0.0.2 BETA 0001 allows r…

  • Unscored —
    CVE-2008-7070 Public exploit

    Argument injection vulnerability in the URI handler in KVIrc 3.4.2 Shiny allows remote attackers to execute arbitrary c…

  • Unscored —
    CVE-2008-7079 Public exploit

    Buffer overflow in Nero ShowTime 5.0.15.0 allows remote attackers to cause a denial of service (crash) and possibly exe…

  • Unscored —
    CVE-2008-7074 Public exploit

    Format string vulnerability in MemeCode Software i.Scribe 1.88 through 2.00 before Beta9 allows remote SMTP servers to …