Archive
August 2009
Vulnerabilities first published in this month (UTC), newest first.
527 results · Feed
-
Unscored —
The (1) sendfile and (2) sendfilev functions in Sun Solaris 8 through 10, and OpenSolaris before snv_110, allow local u…
-
Unscored —CVE-2009-2732 Public exploit
The checkHTTPpassword function in http.c in ntop 3.3.10 and earlier allows remote attackers to cause a denial of servic…
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in XZero Community Classifieds 4.97.8 allows remote attackers to …
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in XZero Community Classifieds 4.97.8 and earlier allows remote a…
-
Unscored —
The msn_slplink_process_msg function in libpurple/protocols/msn/slplink.c in libpurple, as used in Pidgin (formerly Gai…
-
Unscored —CVE-2009-2885 Public exploit
SQL injection vulnerability in bios.php in PHP Scripts Now World's Tallest Buildings allows remote attackers to execute…
-
Unscored —
SQL injection vulnerability in bios.php in PHP Scripts Now President Bios allows remote attackers to execute arbitrary …
-
Unscored —CVE-2009-2889 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in PHP Scripts Now Hangman allows remote attackers to inject arbi…
-
Unscored —CVE-2009-2883 Public exploit
SQL injection vulnerability in admin/login.php in SaphpLesson 4.0, when magic_quotes_gpc is disabled, allows remote att…
-
Unscored —
Cross-site scripting (XSS) vulnerability in bios.php in PHP Scripts Now President Bios allows remote attackers to injec…
-
Unscored —CVE-2009-2882 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in PG MatchMaking allow remote attackers to inject arbitrary web sc…
-
Unscored —CVE-2009-2895 Public exploit
SQL injection vulnerability in rss.php in Ultimate Regnow Affiliate (URA) 3.0 allows remote attackers to execute arbitr…
-
Unscored —CVE-2009-2894 Public exploit
Multiple SQL injection vulnerabilities in Ebay Clone 2009 allow remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2009-2893 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in XZero Community Classifieds 4.97.8 allow remote att…
-
Unscored —CVE-2009-2884 Public exploit
Cross-site scripting (XSS) vulnerability in bios.php in PHP Scripts Now World's Tallest Buildings allows remote attacke…
-
Unscored —CVE-2009-2891 Public exploit
SQL injection vulnerability in list.php in PHP Scripts Now Riddles allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2009-2881 Public exploit
Multiple SQL injection vulnerabilities in Basilic 1.5.13 allow remote attackers to execute arbitrary SQL commands via t…
-
Unscored —CVE-2009-2890 Public exploit
Cross-site scripting (XSS) vulnerability in results.php in PHP Scripts Now Riddles allows remote attackers to inject ar…
-
Unscored —CVE-2009-2888 Public exploit
SQL injection vulnerability in index.php in PHP Scripts Now Hangman allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2009-2892 Public exploit
Multiple SQL injection vulnerabilities in header.php in Scripteen Free Image Hosting Script 2.3 allow remote attackers …
-
Unscored —CVE-2009-2896 Public exploit
Buffer overflow in KMplayer 2.9.4.1433 and earlier allows remote attackers to cause a denial of service (application cr…
-
Unscored —
vetmonnt.sys in CA Internet Security Suite r3, vetmonnt.sys before 9.0.0.184 in Internet Security Suite r4, and vetmonn…
-
Unscored —
Off-by-one error in the bzinflate function in Bzip2.xs in the Compress-Raw-Bzip2 module before 2.018 for Perl allows co…
-
Unscored —
Memory leak in the Security component in IBM DB2 8.1 before FP18 on Unix platforms allows attackers to cause a denial o…
-
Unscored —
IBM DB2 8.1 before FP18 allows attackers to obtain unspecified access via a das command.
-
Medium 5.5
The kernel in Sun Solaris 8, 9, and 10, and OpenSolaris before snv_103, does not properly handle interaction between th…
-
Unscored —
Unspecified vulnerability in db2jds in IBM DB2 8.1 before FP18 allows remote attackers to cause a denial of service (se…
-
Medium 5.9CVE-2009-2055 Exploited
Cisco IOS XR 3.4.0 through 3.8.1 allows remote attackers to cause a denial of service (session reset) via a BGP UPDATE …
KEV Mar 25, 2022 -
Unscored —
Insecure method vulnerability in the Acer LunchApp (aka AcerCtrls.APlunch) ActiveX control in acerctrl.ocx allows remot…
-
Unscored —
kmxIds.sys before 7.3.1.18 in CA Host-Based Intrusion Prevention System (HIPS) 8.1 allows remote attackers to cause a d…
-
Unscored —CVE-2008-7005 Public exploit
include/modules/top/1-random_quote.php in Minb Is Not a Blog (minb) 0.1.0 allows remote attackers to execute arbitrary …
-
Unscored —CVE-2008-7009 Public exploit
Buffer overflow in multiscan.exe in Check Point ZoneAlarm Security Suite 7.0.483.000 and 8.0.020.000 allows local users…
-
Unscored —CVE-2008-7010 Public exploit
Skalfa Software SkaLinks Exchange Script 1.5 allows remote attackers to add new administrators and gain privileges via …
-
Unscored —
NetService.dll in Baidu Hi IM allows remote servers to cause a denial of service (client crash) via a crafted login res…
-
Unscored —CVE-2008-7006 Public exploit
Free PHP VX Guestbook 1.06 allows remote attackers to bypass authentication and download a backup of the database via a…
-
Unscored —CVE-2008-7014 Public exploit
fhttpd 0.4.2 allows remote attackers to cause a denial of service (crash) via an Authorization HTTP header with an inva…
-
Unscored —CVE-2008-7012 Public exploit
courier/1000@/api_error_email.html (aka "error reporting page") in Accellion File Transfer Appliance FTA_7_0_178, and p…
-
Unscored —CVE-2008-7008 Public exploit
HyperStop Web Host Directory 1.2 allows remote attackers to bypass authentication and download a database backup via a …
-
Unscored —CVE-2008-7011 Public exploit
The Unreal engine, as used in Unreal Tournament 3 1.3, Unreal Tournament 2003 and 2004, Dead Man's Hand, Pariah, WarPat…
-
Unscored —
Buffer overflow in Electronic Logbook (ELOG) before 2.7.1 has unknown impact and attack vectors, possibly related to el…