Archive
August 2009
Vulnerabilities first published in this month (UTC), newest first.
268 results · Clear filters · Feed
-
Unscored —CVE-2009-2896 Public exploit
Buffer overflow in KMplayer 2.9.4.1433 and earlier allows remote attackers to cause a denial of service (application cr…
-
Unscored —CVE-2008-7005 Public exploit
include/modules/top/1-random_quote.php in Minb Is Not a Blog (minb) 0.1.0 allows remote attackers to execute arbitrary …
-
Unscored —CVE-2008-7009 Public exploit
Buffer overflow in multiscan.exe in Check Point ZoneAlarm Security Suite 7.0.483.000 and 8.0.020.000 allows local users…
-
Unscored —CVE-2008-7010 Public exploit
Skalfa Software SkaLinks Exchange Script 1.5 allows remote attackers to add new administrators and gain privileges via …
-
Unscored —CVE-2008-7006 Public exploit
Free PHP VX Guestbook 1.06 allows remote attackers to bypass authentication and download a backup of the database via a…
-
Unscored —CVE-2008-7014 Public exploit
fhttpd 0.4.2 allows remote attackers to cause a denial of service (crash) via an Authorization HTTP header with an inva…
-
Unscored —CVE-2008-7012 Public exploit
courier/1000@/api_error_email.html (aka "error reporting page") in Accellion File Transfer Appliance FTA_7_0_178, and p…
-
Unscored —CVE-2008-7008 Public exploit
HyperStop Web Host Directory 1.2 allows remote attackers to bypass authentication and download a database backup via a …
-
Unscored —CVE-2008-7011 Public exploit
The Unreal engine, as used in Unreal Tournament 3 1.3, Unreal Tournament 2003 and 2004, Dead Man's Hand, Pariah, WarPat…
-
Unscored —CVE-2008-7007 Public exploit
Free PHP VX Guestbook 1.06 allows remote attackers to bypass authentication and gain administrative access by setting t…
-
Unscored —CVE-2008-7015 Public exploit
Unreal engine 3, as used in Unreal Tournament 3 1.3, Frontlines: Fuel of War 1.1.1, and other products, allows remote a…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Adobe ColdFusion Server 8.0.1, 8, and earlier allow remote attac…
-
Unscored —CVE-2009-1873 Public exploit
Directory traversal vulnerability in logging/logviewer.jsp in the Management Console in Adobe JRun Application Server 4…
-
Unscored —CVE-2009-2852 Public exploit
WP-Syntax plugin 0.9.1 and earlier for Wordpress, with register_globals enabled, allows remote attackers to execute arb…
-
Unscored —CVE-2009-2847 Public exploit
The do_sigaltstack function in kernel/signal.c in Linux kernel 2.4 through 2.4.37 and 2.6 before 2.6.31-rc5, when runni…
-
Unscored —CVE-2009-2851 Public exploit
Cross-site scripting (XSS) vulnerability in the administrator interface in WordPress before 2.8.2 allows remote attacke…
-
Unscored —CVE-2008-7000 Public exploit
PHP remote file inclusion vulnerability in index.php in PHPAuction 3.2 allows remote attackers to execute arbitrary PHP…
-
Unscored —CVE-2008-7001 Public exploit
Unrestricted file upload vulnerability in the file manager in Creative Mind Creator CMS 5.0 allows remote attackers to …
-
Unscored —CVE-2008-7003 Public exploit
Multiple SQL injection vulnerabilities in login.php in The Rat CMS Alpha 2 allow remote attackers to execute arbitrary …
-
Unscored —CVE-2008-7002 Public exploit
PHP 5.2.5 does not enforce (a) open_basedir and (b) safe_mode_exec_dir restrictions for certain functions, which might …
-
Unscored —CVE-2008-6979 Public exploit
Cross-site scripting (XSS) vulnerability in as_archives.php in phpAdultSite CMS, possibly 2.3.2, allows remote attacker…
-
Unscored —
Stack-based buffer overflow in the SaveAs feature (SaveFileAsWithFilter function) in win_util.cc in Google Chrome 0.2.1…
-
Unscored —CVE-2008-6997 Public exploit
Google Chrome 0.2.149.27 allows user-assisted remote attackers to cause a denial of service (browser crash) via an IMG …
-
Unscored —CVE-2008-6998 Public exploit
Stack-based buffer overflow in chrome/common/gfx/url_elider.cc in Google Chrome 0.2.149.27 and other versions before 0.…
-
Unscored —CVE-2008-6989 Public exploit
SQL injection vulnerability in gallery.php in Easy Photo Gallery (aka Ezphotogallery) 2.1 allows remote attackers to ex…
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in devalcms 1.4a allows remote attackers to inject arbitrary web …
-
Unscored —CVE-2008-6985 Public exploit
Multiple SQL injection vulnerabilities in includes/classes/shopping_cart.php in Zen Cart 1.2.0 through 1.3.8a, when mag…
-
Unscored —CVE-2008-6992 Public exploit
GreenSQL Firewall (greensql-fw), possibly before 0.9.2 or 0.9.4, allows remote attackers to bypass the SQL injection pr…
-
Unscored —CVE-2008-6996 Public exploit
Google Chrome BETA (0.2.149.27) does not prompt the user before saving an executable file, which makes it easier for re…
-
Unscored —CVE-2008-6990 Public exploit
SQL injection vulnerability in gallery.php in Easy Photo Gallery (aka Ezphotogallery) 2.1 allows remote attackers to ex…
-
Unscored —CVE-2008-6976 Public exploit
MikroTik RouterOS 3.x through 3.13 and 2.x through 2.9.51 allows remote attackers to modify Network Management System (…
-
Unscored —CVE-2008-6988 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Easy Photo Gallery (aka Ezphotogallery) 2.1 allow remote attacke…
-
Unscored —CVE-2008-6977 Public exploit
Cross-site scripting (XSS) vulnerability in album.asp in Full Revolution aspWebAlbum 3.2 allows remote attackers to inj…
-
Unscored —CVE-2008-6983 Public exploit
modules/tool/hitcounter.php in devalcms 1.4a allows remote attackers to execute arbitrary PHP code via the HTTP Referer…
-
Unscored —CVE-2008-6978 Public exploit
Unrestricted file upload vulnerability in Full Revolution aspWebAlbum 3.2 allows remote attackers to execute arbitrary …
-
Unscored —CVE-2008-6995 Public exploit
Integer underflow in net/base/escape.cc in chrome.dll in Google Chrome 0.2.149.27 allows remote attackers to cause a de…
-
Unscored —CVE-2008-6991 Public exploit
SQL injection vulnerability in public/page.php in Websens CMSbright allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2009-2781 Public exploit
SQL injection vulnerability in forum.php in Arab Portal 2.x, when magic_quotes_gpc is disabled, allows remote authentic…
-
Unscored —CVE-2009-2786 Public exploit
SQL injection vulnerability in reputation.php in the Reputation plugin 2.2.4, 2.2.3, 2.0.4, and earlier for PunBB allow…
-
Unscored —CVE-2009-2787 Public exploit
Directory traversal vulnerability in include/reputation/rep_profile.php in the Reputation plugin 2.2.4, 2.2.3, 2.0.4, a…