Archive
August 2009
Vulnerabilities first published in this month (UTC), newest first.
268 results · Clear filters · Feed
-
Unscored —
Buffer overflow in the FTP Service in Microsoft Internet Information Services (IIS) 5.0 through 6.0 allows remote authe…
-
Unscored —
Microsoft Internet Explorer 6 on Windows XP SP2 and SP3, and Internet Explorer 7 on Vista, allows remote attackers to c…
-
Unscored —
win32k.sys in Microsoft Windows Server 2003 SP2 allows remote attackers to cause a denial of service (system crash) by …
-
Unscored —CVE-2008-7124 Public exploit
zKup CMS 2.0 through 2.3 does not require administrative authentication for admin/configuration/modifier.php, which all…
-
Unscored —
Integer overflow in osagent.exe in Borland VisiBroker Smart Agent 08.00.00.C1.03 and earlier allows remote attackers to…
-
Unscored —CVE-2008-7123 Public exploit
Static code injection vulnerability in admin/configuration/modifier.php in zKup CMS 2.0 through 2.3 allows remote attac…
-
Unscored —CVE-2008-7107 Public exploit
easdrv.sys in ESET Smart Security 3.0.667.0 allows local users to cause a denial of service (crash) via a crafted IOCTL…
-
Unscored —CVE-2008-7114 Public exploit
SQL injection vulnerability in members_search.php in iFusion Services iFdate 2.0.3 and earlier allows remote attackers …
-
Unscored —CVE-2008-7116 Public exploit
SQL injection vulnerability in the admin panel (admin/) in WeBid auction script 0.5.4 allows remote attackers to execut…
-
Unscored —CVE-2008-7118 Public exploit
WeBid auction script 0.5.4 stores sensitive information under the web root with insufficient access control, which allo…
-
Unscored —CVE-2008-7119 Public exploit
SQL injection vulnerability in item.php in WeBid auction script 0.5.4 allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2008-7110 Public exploit
Directory traversal vulnerability in the Scanner File Utility (aka listener) in Kyocera Mita (KM) 3.3.0.1 allows remote…
-
Unscored —CVE-2008-7115 Public exploit
The web interface to the Belkin Wireless G router and ADSL2 modem F5D7632-4V6 with firmware 6.01.08 allows remote attac…
-
Unscored —CVE-2008-7120 Public exploit
SQL injection vulnerability in Mr. CGI Guy Hot Links SQL-PHP 3 and earlier allows remote attackers to execute arbitrary…
-
Unscored —CVE-2008-7117 Public exploit
eledicss.php in WeBid auction script 0.5.4 allows remote attackers to modify arbitrary cascading style sheets (CSS) fil…
-
Unscored —CVE-2009-3002 Public exploit
The Linux kernel before 2.6.31-rc7 does not initialize certain data structures within getname functions, which allows l…
-
Unscored —CVE-2009-3001 Public exploit
The llc_ui_getname function in net/llc/af_llc.c in the Linux kernel 2.6.31-rc7 and earlier does not initialize a certai…
-
Unscored —CVE-2008-7099 Public exploit
Unspecified vulnerability in the Manage Templates feature in Qsoft K-Rate Premium allows remote attackers to execute ar…
-
Unscored —CVE-2008-7098 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Qsoft K-Rate Premium allow remote attackers to inject arbitrary …
-
Unscored —CVE-2008-7103 Public exploit
Stack-based buffer overflow in an ActiveX control in najdisitoolbar.dll in Najdi.si Toolbar 2.0.4.1 allows remote attac…
-
Unscored —CVE-2008-7097 Public exploit
Multiple SQL injection vulnerabilities in Qsoft K-Rate Premium allow remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2009-2698 Public exploit
The udp_sendmsg function in the UDP implementation in (1) net/ipv4/udp.c and (2) net/ipv6/udp.c in the Linux kernel bef…
-
Unscored —CVE-2008-7085 Public exploit
Multiple SQL injection vulnerabilities in TheHockeyStop HockeySTATS Online 2.0 Basic and Advanced allow remote attacker…
-
Unscored —CVE-2008-7084 Public exploit
Directory traversal vulnerability in the web server 1.0 in Velocity Security Management System allows remote attackers …
-
Unscored —CVE-2008-7086 Public exploit
Maian Greetings 2.1 allows remote attackers to bypass authentication and gain administrative privileges by setting the …
-
Unscored —CVE-2008-7087 Public exploit
PHP remote file inclusion vulnerability in search_wA.php in OpenPro 1.3.1 allows remote attackers to execute arbitrary …
-
Unscored —CVE-2008-7091 Public exploit
Multiple SQL injection vulnerabilities in Pligg 9.9 and earlier allow remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2008-7088 Public exploit
Unrestricted file upload vulnerability in upload.php in PhotoPost vBGallery 2.4.2 allows remote authenticated users to …
-
Unscored —CVE-2008-7090 Public exploit
Multiple directory traversal vulnerabilities in Pligg 9.9 and earlier allow remote attackers to (1) determine the exist…
-
Unscored —CVE-2008-7089 Public exploit
Cross-site scripting (XSS) vulnerability in Pligg 9.9 and earlier allows remote attackers to inject arbitrary web scrip…
-
Unscored —CVE-2009-2960 Public exploit
CuteFlow 2.10.3 and 2.11.0_c does not properly restrict access to pages/edituser.php, which allows remote attackers to …
-
Unscored —CVE-2009-2961 Public exploit
Stack-based buffer overflow in Thaddy de Konng KOL Player 1.0 allows remote attackers to cause a denial of service (cra…
-
Unscored —CVE-2009-2965 Public exploit
Cross-site scripting (XSS) vulnerability in entry/index.jsp in Radvision Scopia 5.7, and possibly other versions before…
-
Unscored —CVE-2009-2966 Public exploit
avp.exe in Kaspersky Internet Security 9.0.0.459 and Anti-Virus 9.0.0.463 allows remote attackers to cause a denial of …
-
Unscored —CVE-2008-7077 Public exploit
Multiple SQL injection vulnerabilities in SailPlanner 0.3a allow remote attackers to execute arbitrary SQL commands via…
-
Unscored —CVE-2008-7080 Public exploit
Team PHP PHP Classifieds Script stores sensitive information under the web root with insufficient access control, which…
-
Unscored —CVE-2008-7062 Public exploit
Unrestricted file upload vulnerability in admin/index.php in Download Manager module 1.0 for LoveCMS 1.6.2 Final allows…
-
Unscored —CVE-2008-7072 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Chipmunk Topsites allows remote attackers to inject arbitrary …
-
Unscored —CVE-2008-7071 Public exploit
SQL injection vulnerability in authenticate.php in Chipmunk Topsites allows remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2008-7073 Public exploit
PHP remote file inclusion vulnerability in lib/action/rss.php in RSS module 0.1 for Pie Web M{a,e}sher, when register_g…