Archive
August 2009
Vulnerabilities first published in this month (UTC), newest first.
268 results · Clear filters · Feed
-
Unscored —CVE-2009-2930 Public exploit
Cross-site scripting (XSS) vulnerability in the Search feature in elka CMS (aka Elkapax) allows remote attackers to inj…
-
Unscored —
Multiple stack-based buffer overflows in xaudio.dll in Programmed Integration PIPL 2.5.0 and 2.5.0D allow remote attack…
-
Unscored —CVE-2009-2926 Public exploit
Multiple SQL injection vulnerabilities in PHP Competition System BETA 0.84 and earlier allow remote attackers to execut…
-
Unscored —CVE-2009-2929 Public exploit
Multiple SQL injection vulnerabilities in TGS Content Management 0.x allow remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2009-2928 Public exploit
Cross-site scripting (XSS) vulnerability in login.php in TGS Content Management 0.x allows remote attackers to inject a…
-
Unscored —CVE-2009-1879 Public exploit
Cross-site scripting (XSS) vulnerability in index.template.html in the express-install templates in the SDK in Adobe Fl…
-
Unscored —CVE-2009-2473 Public exploit
neon before 0.28.6, when expat is used, does not properly detect recursion during entity expansion, which allows contex…
-
Unscored —CVE-2008-7025 Public exploit
TrueVector in Check Point ZoneAlarm 8.0.020.000, with vsmon.exe running, allows remote HTTP proxies to cause a denial o…
-
Unscored —CVE-2008-7027 Public exploit
Libra File Manager 1.18 and earlier allows remote attackers to bypass authentication and gain privileges by setting the…
-
Unscored —CVE-2008-7028 Public exploit
RPG.Board 0.8 Beta2 and earlier allows remote attackers to bypass authentication and gain privileges by setting the kee…
-
Unscored —CVE-2008-7022 Public exploit
Insecure method vulnerability in ChilkatMail_v7_9.dll in the Chilkat Software IMAP ActiveX control (ChilkatMail2.Chilka…
-
Unscored —CVE-2008-7017 Public exploit
Cross-site scripting (XSS) vulnerability in analyse.php in CAcert 20080921, and possibly other versions before 20080928…
-
Unscored —CVE-2008-7024 Public exploit
admin.php in Arz Development The Gemini Portal 4.7 and earlier allows remote attackers to bypass authentication and gai…
-
Unscored —CVE-2008-7021 Public exploit
Unrestricted file upload vulnerability in editlogo.php in AvailScript Jobs Portal Script allows remote authenticated us…
-
Unscored —CVE-2008-7019 Public exploit
Esqlanelapse 2.6.1 and 2.6.2 allows remote attackers to bypass authentication and gain privileges via modified (1) enom…
-
Unscored —CVE-2008-7026 Public exploit
Unrestricted file upload vulnerability in filesystem3.class.php in eFront 3.5.1 build 2710 and earlier allows remote at…
-
Unscored —CVE-2009-2921 Public exploit
Multiple SQL injection vulnerabilities in login.php in MOC Designs PHP News 1.1 allow remote attackers to execute arbit…
-
Unscored —CVE-2009-2918 Public exploit
The tgbvpn.sys driver in TheGreenBow IPSec VPN Client 4.61.003 allows local users to cause a denial of service (NULL po…
-
Unscored —CVE-2009-2922 Public exploit
Absolute path traversal vulnerability in pixaria.image.php in Pixaria Gallery 2.0.0 through 2.3.5 allows remote attacke…
-
Unscored —CVE-2009-2925 Public exploit
Directory traversal vulnerability in DJcalendar.cgi in DJCalendar allows remote attackers to read arbitrary files via a…
-
Unscored —CVE-2009-2924 Public exploit
Multiple SQL injection vulnerabilities in Videos Broadcast Yourself 2 allow remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2009-2917 Public exploit
Stack-based buffer overflow in ImTOO MPEG Encoder 3.1.53 allows remote attackers to cause a denial of service (crash) o…
-
Unscored —CVE-2009-2915 Public exploit
SQL injection vulnerability in 2fly_gift.php in 2FLY Gift Delivery System 6.0 allows remote attackers to execute arbitr…
-
Unscored —CVE-2009-2920 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Elvin 1.2.2 allow remote attackers to inject arbitrary web scrip…
-
Unscored —CVE-2009-2923 Public exploit
Multiple directory traversal vulnerabilities in BitmixSoft PHP-Lance 1.52 allow remote attackers to read arbitrary file…
-
Unscored —CVE-2009-2732 Public exploit
The checkHTTPpassword function in http.c in ntop 3.3.10 and earlier allows remote attackers to cause a denial of servic…
-
Unscored —
The msn_slplink_process_msg function in libpurple/protocols/msn/slplink.c in libpurple, as used in Pidgin (formerly Gai…
-
Unscored —CVE-2009-2885 Public exploit
SQL injection vulnerability in bios.php in PHP Scripts Now World's Tallest Buildings allows remote attackers to execute…
-
Unscored —CVE-2009-2889 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in PHP Scripts Now Hangman allows remote attackers to inject arbi…
-
Unscored —CVE-2009-2883 Public exploit
SQL injection vulnerability in admin/login.php in SaphpLesson 4.0, when magic_quotes_gpc is disabled, allows remote att…
-
Unscored —CVE-2009-2882 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in PG MatchMaking allow remote attackers to inject arbitrary web sc…
-
Unscored —CVE-2009-2895 Public exploit
SQL injection vulnerability in rss.php in Ultimate Regnow Affiliate (URA) 3.0 allows remote attackers to execute arbitr…
-
Unscored —CVE-2009-2894 Public exploit
Multiple SQL injection vulnerabilities in Ebay Clone 2009 allow remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2009-2893 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in XZero Community Classifieds 4.97.8 allow remote att…
-
Unscored —CVE-2009-2884 Public exploit
Cross-site scripting (XSS) vulnerability in bios.php in PHP Scripts Now World's Tallest Buildings allows remote attacke…
-
Unscored —CVE-2009-2891 Public exploit
SQL injection vulnerability in list.php in PHP Scripts Now Riddles allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2009-2881 Public exploit
Multiple SQL injection vulnerabilities in Basilic 1.5.13 allow remote attackers to execute arbitrary SQL commands via t…
-
Unscored —CVE-2009-2890 Public exploit
Cross-site scripting (XSS) vulnerability in results.php in PHP Scripts Now Riddles allows remote attackers to inject ar…
-
Unscored —CVE-2009-2888 Public exploit
SQL injection vulnerability in index.php in PHP Scripts Now Hangman allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2009-2892 Public exploit
Multiple SQL injection vulnerabilities in header.php in Scripteen Free Image Hosting Script 2.3 allow remote attackers …