Archive
28 August 2009
Vulnerabilities first published on this day (UTC), newest first.
25 results · Feed
-
Unscored —CVE-2008-7107 Public exploit
easdrv.sys in ESET Smart Security 3.0.667.0 allows local users to cause a denial of service (crash) via a crafted IOCTL…
-
Unscored —CVE-2008-7114 Public exploit
SQL injection vulnerability in members_search.php in iFusion Services iFdate 2.0.3 and earlier allows remote attackers …
-
Unscored —
The Scanner File Utility (aka listener) in Kyocera Mita (KM) 3.3.0.1 uses a small space of predictable user identificat…
-
Unscored —CVE-2008-7116 Public exploit
SQL injection vulnerability in the admin panel (admin/) in WeBid auction script 0.5.4 allows remote attackers to execut…
-
Unscored —CVE-2008-7118 Public exploit
WeBid auction script 0.5.4 stores sensitive information under the web root with insufficient access control, which allo…
-
Unscored —
The Scanner File Utility (aka listener) in Kyocera Mita (KM) 3.3.0.1 does not restrict the filenames or extensions of u…
-
Unscored —CVE-2008-7119 Public exploit
SQL injection vulnerability in item.php in WeBid auction script 0.5.4 allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2008-7110 Public exploit
Directory traversal vulnerability in the Scanner File Utility (aka listener) in Kyocera Mita (KM) 3.3.0.1 allows remote…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Carmosa phpCart 3.4 through 4.6.4 allow remote attackers to inje…
-
Unscored —CVE-2008-7115 Public exploit
The web interface to the Belkin Wireless G router and ADSL2 modem F5D7632-4V6 with firmware 6.01.08 allows remote attac…
-
Unscored —CVE-2008-7120 Public exploit
SQL injection vulnerability in Mr. CGI Guy Hot Links SQL-PHP 3 and earlier allows remote attackers to execute arbitrary…
-
Unscored —CVE-2008-7117 Public exploit
eledicss.php in WeBid auction script 0.5.4 allows remote attackers to modify arbitrary cascading style sheets (CSS) fil…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Mr. CGI Guy Hot Links SQL-PHP 3 and earlier allows remote attackers to inje…
-
Critical 9.8
The Scanner File Utility (aka listener) in Kyocera Mita (KM) 3.3.0.1 allows remote attackers to bypass authorization an…
-
Unscored —
The Scanner File Utility (aka listener) in Kyocera Mita (KM) 3.3.0.1 allows remote attackers to cause a denial of servi…
-
Unscored —CVE-2009-3003 EPSS 11%
Microsoft Internet Explorer 6 through 8 allows remote attackers to spoof the address bar, via window.open with a relati…
-
Unscored —
Maxthon Browser 2.5.3.80 UNICODE allows remote attackers to spoof the address bar, via window.open with a relative URI,…
-
Unscored —
K-Meleon 1.5.3 allows context-dependent attackers to spoof the address bar, via window.open with a relative URI, to sho…
-
Unscored —
Mozilla Firefox 3.5.1 and SeaMonkey 1.1.17, and Flock 2.5.1, allow context-dependent attackers to spoof the address bar…
-
Unscored —
Avant Browser 11.7 Builds 35 and 36 allows remote attackers to spoof the address bar, via window.open with a relative U…
-
Unscored —CVE-2009-3002 Public exploit
The Linux kernel before 2.6.31-rc7 does not initialize certain data structures within getname functions, which allows l…
-
Unscored —
Lunascape 5.1.3 and 5.1.4 allows remote attackers to spoof the address bar, via window.open with a relative URI, to sho…
-
Unscored —CVE-2009-3001 Public exploit
The llc_ui_getname function in net/llc/af_llc.c in the Linux kernel 2.6.31-rc7 and earlier does not initialize a certai…
-
Unscored —
The sockfs module in the kernel in Sun Solaris 10 and OpenSolaris snv_41 through snv_122, when Network Cache Accelerato…
-
Unscored —
The Linux kernel before 2.6.31-rc7 does not properly prevent mmap operations that target page zero and other low memory…