Archive
August 2009
Vulnerabilities first published in this month (UTC), newest first.
527 results · Feed
-
Unscored —
lib/ssluse.c in cURL and libcurl 7.4 through 7.19.5, when OpenSSL is used, does not properly handle a '\0' character in…
-
Unscored —
httpd.c in httpd in the management GUI in DD-WRT 24 sp1, and other versions before build 12533, allows remote attackers…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in HP Insight Control Suite For Linux (aka ICE-LX) before 2.11 allows r…
-
Unscored —CVE-2009-2766 Public exploit
httpd.c in httpd in the management GUI in DD-WRT 24 sp1 does not require administrative authentication for programs und…
-
Unscored —
Microsoft Internet Explorer 8.0.7100.0 on Windows 7 RC on the x64 platform allows remote attackers to cause a denial of…
-
Unscored —
Multiple unspecified vulnerabilities in IBM WebSphere Commerce 6.0 before 6.0.0.7 have unknown impact and attack vector…
-
Unscored —
The Service Component Architecture (SCA) feature pack for IBM WebSphere Application Server (WAS) SCA 1.0 before 1.0.0.3…
-
Unscored —
The Web Services functionality in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.25 and 7.0 before 7.0.0.5, in…
-
Unscored —
The System Management/Repository component in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.5 on z/OS uses we…
-
Unscored —
The Servlet Engine/Web Container component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.25 and 7.0 before…
-
Unscored —
The Migration component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.25 and 7.0 before 7.0.0.5, when trac…
-
Unscored —
IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.5 does not properly read the portletServingEnabled parameter in…
-
Unscored —
SQL injection vulnerability in the console in IBM WebSphere Partner Gateway (WPG) Enterprise 6.0 before FP8, 6.1 before…
-
Unscored —
Unspecified vulnerability in wsadmin in the System Management/Repository component in IBM WebSphere Application Server …
-
Unscored —
The Security component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.25 and 7.0 before 7.0.0.5 does not pr…
-
Unscored —
Unspecified vulnerability in IBM WebSphere Commerce 6.0 Enterprise before 6.0.0.8, when trace is enabled, allows local …
-
Unscored —
Avira AntiVir Premium, Premium Security Suite, AntiVir Professional, and AntiVir Personal - FREE allows local users to …
-
Unscored —CVE-2008-6964 Public exploit
SQL injection vulnerability in the login page in X7 Chat 2.0.5 allows remote attackers to execute arbitrary SQL command…
-
Unscored —
mailnews in Mozilla Thunderbird before 2.0.0.18 and SeaMonkey before 1.1.13, when JavaScript is enabled in mail, allows…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Drupal Content Construction Kit (CCK) 5.x through 5.x-1.8 allow …
-
Unscored —CVE-2008-6971 Public exploit
The password reset functionality in Simple Machines Forum (SMF) 1.0.x before 1.0.14, 1.1.x before 1.1.6, and 2.0 before…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in checkout.php in Avactis Shopping Cart 1.8.0 and 1.8.1 allow remo…
-
Unscored —CVE-2008-6968 Public exploit
Multiple SQL injection vulnerabilities in submit.php in Pligg CMS 9.9.5 allow remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2008-6970 Public exploit
SQL injection vulnerability in dosearch.inc.php in UBB.threads 7.3.1 and earlier allows remote attackers to execute arb…
-
Unscored —CVE-2008-6963 Public exploit
admin.php in TurnkeyForms Text Link Sales allows remote attackers to bypass authentication and gain administrative priv…
-
Unscored —CVE-2008-6966 Public exploit
AJ Square AJ Auction Pro Platinum Skin #1 sends a redirect but does not exit when it is called directly, which allows r…
-
Unscored —
Multiple unspecified vulnerabilities in WorldClient in Alt-N MDaemon before 10.02 have unknown impact and attack vector…
-
Unscored —CVE-2008-6965 Public exploit
AJ Square AJ Auction OOPD, Pro Platinum Skin #1, Pro Platinum Skin #2, and Web 2.0 send a redirect but do not exit when…
-
Unscored —
Unquoted Windows search path vulnerability in the scheduler (sched.exe) in Avira AntiVir, AntiVir Premium, Premium Secu…
-
Unscored —
wp-login.php in WordPress 2.8.3 and earlier allows remote attackers to force a password reset for the first user in the…
-
Unscored —
Unspecified vulnerability in Apple Safari 4 before 4.0.3 allows remote web servers to place an arbitrary web site in th…
-
Unscored —
Buffer overflow in WebKit in Apple Safari before 4.0.3 allows remote attackers to execute arbitrary code or cause a den…
-
Unscored —
Incomplete blacklist vulnerability in WebKit in Apple Safari before 4.0.3, as used on iPhone OS before 3.1, iPhone OS b…
-
Unscored —
WebKit in Apple Safari before 4.0.3 does not properly restrict the URL scheme of the pluginspage attribute of an EMBED …
-
Unscored —CVE-2009-0562 EPSS 26%
The Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2003 SP3, Office XP Web Components SP3, Of…
-
High 8.8CVE-2009-1544 EPSS 21%
Double free vulnerability in the Workstation service in Microsoft Windows allows remote authenticated users to gain pri…
-
Unscored —CVE-2009-1930 EPSS 41%
The Telnet service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server…
-
Unscored —CVE-2009-1923 EPSS 25%
Heap-based buffer overflow in the Windows Internet Name Service (WINS) component for Microsoft Windows 2000 SP4 and Ser…
-
Unscored —
The Message Queuing (aka MSMQ) service for Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP2, and Vista Gold does not…
-
Unscored —CVE-2009-1929 EPSS 35%
Heap-based buffer overflow in the Microsoft Terminal Services Client ActiveX control running RDP 6.1 on Windows XP SP2,…