Archive
8 September 2009
Vulnerabilities first published on this day (UTC), newest first.
64 results · Feed
-
Unscored —
Unspecified vulnerability in the Portal in HP Operations Dashboard 2.1 on Windows Server 2003 SP2 allows remote attacke…
-
Unscored —CVE-2009-3099 Public exploit
Unspecified vulnerability in HP OpenView Operations Manager 8.1 on Windows Server 2003 SP2 allows remote attackers to h…
-
Unscored —
IBM Tivoli Directory Server (TDS) 6.0 allows remote attackers to cause a denial of service (NULL pointer dereference an…
-
Unscored —
The XMPP protocol plugin in libpurple in Pidgin before 2.6.2 does not properly handle an error IQ stanza during an atte…
-
Critical 9.8
Zope Object Database (ZODB) Arbitrary files reading and deletion
Unspecified vulnerability in the Zope Enterprise Objects (ZEO) storage-server functionality in Zope Object Database (ZODB) 3.8 before 3.8.3 and 3.9.x before 3.9.0c2, when certain ZEO database sharing and blob support are enabled, allows remote authenticated u…
-
Unscored —
KDE KSSL in kdelibs 3.5.4, 4.2.4, and 4.3 does not properly handle a '\0' character in a domain name in the Subject Alt…
-
Unscored —
libpurple/protocols/irc/msgs.c in the IRC protocol plugin in libpurple in Pidgin before 2.6.2 allows remote IRC servers…
-
Unscored —
The IAX2 protocol implementation in Asterisk Open Source 1.2.x before 1.2.35, 1.4.x before 1.4.26.2, 1.6.0.x before 1.6…
-
Unscored —CVE-2008-7178 Public exploit
Directory traversal vulnerability in Uploader module 1.1 for XOOPS allows remote attackers to read arbitrary files via …
-
Unscored —CVE-2008-7179 Public exploit
OTManager CMS 2.4 allows remote attackers to bypass authentication and gain administrator privileges by setting the ADM…
-
Unscored —CVE-2008-7172 Public exploit
Lightweight news portal (LNP) 1.0b does not properly restrict access to administrator functionality, which allows remot…
-
Unscored —CVE-2008-7176 Public exploit
Multiple directory traversal vulnerabilities in Facil CMS 0.1RC allow remote attackers to read arbitrary files via a ..…
-
Unscored —CVE-2008-7167 Public exploit
Unrestricted file upload vulnerability in upload.php in Page Manager 2006-02-04 allows remote attackers to execute arbi…
-
Unscored —
Cross-site scripting (XSS) vulnerability in wp-admin/admin.php in NextGEN Gallery 0.96 and earlier plugin for Wordpress…
-
Unscored —
The Jura Internet Connection Kit for the Jura Impressa F90 coffee maker does not properly restrict access to privileged…
-
Unscored —
Multiple buffer overflows in the Jura Internet Connection Kit for the Jura Impressa F90 coffee maker allow remote attac…
-
Unscored —CVE-2008-7168 Public exploit
Insecure method vulnerability in the UUSee UUUpgrade ActiveX control (UUUpgrade.ocx 3.0.2.12) allows remote attackers t…
-
Unscored —
Buffer overflow in the IMAP service in NetWin Surgemail 3.9e, and possibly other versions before 3.9g2, allows remote a…
-
Unscored —CVE-2008-7170 Public exploit
GSC build 2067 and earlier relies on the client to enforce administrator privileges, which allows remote attackers to e…
-
Unscored —CVE-2008-7169 Public exploit
SQL injection vulnerability in Jabode horoscope extension (com_jabode) for Joomla! allows remote attackers to execute a…
-
Unscored —
Buffer overflow in the listing module in Netwide Assembler (NASM) before 2.03.01 has unknown impact and attack vectors,…
-
Unscored —CVE-2008-7171 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Lightweight news portal (LNP) 1.0b allow remote attackers to inj…
-
Unscored —CVE-2008-7180 Public exploit
del_query1.php in Telephone Directory 2008 allows remote attackers to delete arbitrary contacts via a direct request wi…
-
Unscored —CVE-2008-7181 Public exploit
Butterfly Organizer 2.0.0 allows remote attackers to (1) delete arbitrary categories via a modified tablehere parameter…