Archive
1 September 2009
Vulnerabilities first published on this day (UTC), newest first.
26 results · Feed
-
Unscored —CVE-2009-3042 Public exploit
SQL injection vulnerability in machine.php in Open Computer and Software (OCS) Inventory NG 1.02.1 allows remote attack…
-
Unscored —CVE-2009-3040 Public exploit
Multiple SQL injection vulnerabilities in Open Computer and Software (OCS) Inventory NG 1.02 for Unix allow remote atta…
-
Unscored —CVE-2009-3041 Public exploit
SPIP 1.9 before 1.9.2i and 2.0.x through 2.0.8 does not use proper access control for (1) ecrire/exec/install.php and (…
-
Unscored —
IntraLearn Software IntraLearn 2.1, and possibly other versions before 4.2.3, allows remote attackers to obtain sensiti…
-
Unscored —CVE-2008-7136 Public exploit
toolbaru.dll in ICQ Toolbar (ICQToolbar) 2.3 allows remote attackers to cause a denial of service (toolbar crash) via a…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in IntraLearn Software IntraLearn 2.1, and possibly other versions …
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in Nuked-Klan 1.3 beta allows remote attackers to inject arbitrar…
-
Unscored —CVE-2008-7140 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in @lex Guestbook 4.0.5 and earlier allow remote attackers to injec…
-
Unscored —
The Manager in Eye-Fi 1.1.2 generates predictable snonce values based on the time of day, which allows remote attackers…
-
Unscored —
phpBB 2.0.23 includes the session ID in a request to modcp.php when the moderator or administrator closes a thread, whi…
-
Unscored —CVE-2008-7133 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in onlinetools.org EasyImageCatalogue 1.3.1 allow remote attackers …
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in Live 5.x before 5.x-0.1, a module for Drupal, allows remote attacker…
-
Unscored —CVE-2008-7141 Public exploit
Cross-site scripting (XSS) vulnerability in setup.php in @lex Poll 2.1 allows remote attackers to inject arbitrary web …
-
Unscored —CVE-2008-7142 Public exploit
Absolute path traversal vulnerability in the Disk Usage module (frontend/x/diskusage/index.html) in cPanel 11.18.3 allo…
-
Unscored —
Multiple unspecified vulnerabilities in RARLAB WinRAR before 3.71 have unknown impact and attack vectors related to cra…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in WS-Proxy in Eye-Fi 1.1.2 allow remote attackers to hijack…
-
Unscored —CVE-2008-7135 Public exploit
toolbaru.dll in ICQ Toolbar (ICQToolbar) 2.3 allows remote attackers to cause a denial of service (toolbar crash) via a…
-
Unscored —CVE-2008-7134 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in the default URI in Chris LaPointe RedGalaxy Download Center 1.2 …
-
Unscored —
Unspecified vulnerability in Synfig Animation Studio before 0.61.08 allows attackers to execute arbitrary code via a cr…
-
Unscored —
WS-Proxy in Eye-Fi 1.1.2 allows remote attackers to cause a denial of service (crash) via an empty query string to port…
-
Unscored —CVE-2008-7145 Public exploit
Multiple SQL injection vulnerabilities in index.php in CoronaMatrix phpAddressBook 2.0 allow remote attackers to execut…
-
Unscored —CVE-2008-7152 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Specimen Image Database (SID), when register_globals is enabled, …
-
Unscored —
Unspecified vulnerability in AgileWiki before 0.10.1 has unknown impact and attack vectors related to passwords.
-
Unscored —
Cross-site scripting (XSS) vulnerability in Refine by Taxonomy 5.x before 5.x-0.1, a module for Drupal, allows remote a…
-
Unscored —CVE-2009-3038 Public exploit
A certain ActiveX control in lnresobject.dll 7.1.1.119 in the Research In Motion (RIM) Lotus Notes connector for BlackB…
-
Unscored —
Buffer overflow in xlssr.dll in the Autonomy KeyView XLS viewer (aka File Viewer for Excel), as used in IBM Lotus Notes…