Archive
August 2009
Vulnerabilities first published in this month (UTC), newest first.
527 results · Feed
-
Unscored —CVE-2008-6928 Public exploit
Unrestricted file upload vulnerability in PHPStore Complete Classifieds allows remote authenticated users to execute ar…
-
Unscored —CVE-2008-6934 Public exploit
Static code injection vulnerability in Sanus|artificium (aka Sanusart) Free simple guestbook PHP script, when downloade…
-
Unscored —CVE-2008-6937 Public exploit
Argument injection vulnerability in Exodus 0.10 allows remote attackers to inject arbitrary command line arguments, ove…
-
Unscored —CVE-2008-6931 Public exploit
Unrestricted file upload vulnerability in PHPStore Job Search (aka PHPCareers) allows remote authenticated users to exe…
-
Unscored —
Stack consumption vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ 2.7.0 and 2.8.0 allows context-de…
-
Medium 6.5
Multiple use-after-free vulnerabilities in libxml2 2.5.10, 2.6.16, 2.6.26, 2.6.27, and 2.6.32, and libxml 1.8.17, allow…
-
Unscored —
Stack consumption vulnerability in libxml2 2.5.10, 2.6.16, 2.6.26, 2.6.27, and 2.6.32, and libxml 1.8.17, allows contex…
-
Unscored —
Cross-site scripting (XSS) vulnerability in FreeNAS before 0.69.2 allows remote attackers to inject arbitrary web scrip…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the WebGUI in FreeNAS before 0.7RC1 allows remote attackers to hijac…
-
Unscored —CVE-2009-0687 Public exploit
The pf_test_rule function in OpenBSD Packet Filter (PF), as used in OpenBSD 4.2 through 4.5, NetBSD 5.0 before RC3, Mir…
-
Unscored —CVE-2009-2735 Public exploit
SQL injection vulnerability in admin.php in sun-jester OpenNews 1.0, when magic_quotes_gpc is disabled, allows remote a…
-
Unscored —CVE-2009-2704 Public exploit
CA SiteMinder allows remote attackers to bypass cross-site scripting (XSS) protections for J2EE applications via a requ…
-
Unscored —CVE-2009-2705 Public exploit
CA SiteMinder allows remote attackers to bypass cross-site scripting (XSS) protections for J2EE applications via a requ…
-
Medium —
Roundup Improper Access Control
The EditCSVAction function in cgi/actions.py in Roundup 1.2 before 1.2.1, 1.4 through 1.4.6, and possibly other versions does not properly check permissions, which allows remote authenticated users with edit or create privileges for a class to modify arbitrar…
-
Unscored —CVE-2009-2736 Public exploit
Static code injection vulnerability in admin.php in sun-jester OpenNews 1.0 allows remote authenticated administrators …
-
Unscored —
Stack-based buffer overflow in the _tt_internal_realpath function in the ToolTalk library (libtt.a) in IBM AIX 5.2.0, 5…
-
Unscored —CVE-2008-6924 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in register.php in eSyndiCat Directory 2.2 allow remote attackers t…
-
Unscored —CVE-2008-6927 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in autoinstall4imagesgalleryupgrade.php in the Fantastico De Luxe M…
-
Unscored —
Cross-site scripting (XSS) vulnerability in function.php in Zenphoto 1.1.7 allows remote attackers to inject arbitrary …
-
Unscored —CVE-2008-6926 Public exploit
Directory traversal vulnerability in autoinstall4imagesgalleryupgrade.php in the Fantastico De Luxe Module for cPanel a…
-
Unscored —
The Abstract Window Toolkit (AWT) implementation in Sun Java SE 6 before Update 15 on Windows 2000 Professional does no…
-
Unscored —
Multiple unspecified vulnerabilities in the Provider class in Sun Java SE 5.0 before Update 20 have unknown impact and …
-
Unscored —
The Java Web Start implementation in Sun Java SE 6 before Update 15 allows context-dependent attackers to cause a denia…
-
Unscored —
Multiple unspecified vulnerabilities in the Provider class in Sun Java SE 5.0 before Update 20 have unknown impact and …
-
Unscored —
The Abstract Window Toolkit (AWT) implementation in Sun Java SE 6 before Update 15 on X11 does not impose the intended …
-
Unscored —
Race condition in the java.lang package in Sun Java SE 5.0 before Update 20 has unknown impact and attack vectors, rela…
-
Unscored —
Unspecified vulnerability in deserialization in the Provider class in Sun Java SE 5.0 before Update 20 has unknown impa…
-
Unscored —
Unspecified vulnerability in the javax.swing.plaf.synth.SynthContext.isSubregion method in the Swing implementation in …
-
Unscored —
The plugin functionality in Sun Java SE 6 before Update 15 does not properly implement version selection, which allows …
-
Unscored —CVE-2008-6922 Public exploit
Multiple stack-based buffer overflows in CMailCOM.dll in CMailServer 5.4.6 allow remote attackers to execute arbitrary …
-
Unscored —CVE-2008-6923 Public exploit
SQL injection vulnerability in the content component (com_content) 1.0.0 for Joomla! allows remote attackers to execute…
-
Unscored —
The Java Web Start framework in IcedTea in OpenJDK before 1.6.0.0-20.b16.fc10 on Fedora 10, and before 1.6.0.0-27.b16.f…
-
Unscored —
JDK13Services.getProviders in Sun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, grants full privile…
-
Unscored —
Sun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, might allow context-dependent attackers to obtain…
-
Unscored —
Multiple integer overflows in memcached 1.1.12 and 1.2.2 allow remote attackers to execute arbitrary code via vectors i…
-
Unscored —
The encoder in Sun Java SE 6 before Update 15, and OpenJDK, grants read access to private variables with unspecified na…
-
Unscored —
Stack-based buffer overflow in a token searching function in the dtscore library in Data Transport Services in CA Softw…
-
Unscored —
The Java Management Extensions (JMX) implementation in Sun Java SE 6 before Update 15, and OpenJDK, does not properly e…
-
Unscored —CVE-2008-6920 Public exploit
Unrestricted file upload vulnerability in auth.php in phpEmployment 1.8 allows remote attackers to execute arbitrary co…
-
Unscored —CVE-2008-6918 Public exploit
Unrestricted file upload vulnerability in admin/galeria.php in ThePortal2 2.2 allows remote attackers to execute arbitr…