11 September 2009

31 results · Feed

• Unscored —
  CVE-2009-3182 Public exploit

  Unrestricted file upload vulnerability in admin/editor/filemanager/browser.html in Anantasoft Gazelle CMS 1.0 allows re…

  Sep 11, 2009
• Unscored —
  CVE-2009-3170 Public exploit EPSS 15%

  Stack-based buffer overflow in AIMP2 Audio Converter 2.53 (build 330) and earlier allows remote attackers to cause a de…

  Sep 11, 2009
• Unscored —
  CVE-2009-3181 Public exploit

  Directory traversal vulnerability in Anantasoft Gazelle CMS 1.0 allows remote attackers to overwrite arbitrary files vi…

  Sep 11, 2009
• Unscored —
  CVE-2009-3178

  Unspecified vulnerability in mm.exe in Symantec Altiris Deployment Solution 6.9 allows remote attackers to cause a deni…

  Sep 11, 2009
• Unscored —
  CVE-2009-3175 Public exploit

  Multiple SQL injection vulnerabilities in Model Agency Manager PRO (formerly Modeling Agency Content Management Script)…

  Sep 11, 2009
• Unscored —
  CVE-2009-3171 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in Anantasoft Gazelle CMS 1.0 and earlier allow remote attackers to…

  Sep 11, 2009
• Unscored —
  CVE-2009-3173 Public exploit

  Unrestricted file upload vulnerability in admin/add_album.php in The Rat CMS Alpha 2 allows remote attackers to execute…

  Sep 11, 2009
• Unscored —
  CVE-2009-3177

  Unspecified vulnerability in Kaspersky Online Scanner 7.0 has unknown impact and attack vectors, as demonstrated by a c…

  Sep 11, 2009
• Unscored —
  CVE-2009-3180 Public exploit

  Anantasoft Gazelle CMS 1.0 allows remote attackers to conduct a password reset for other users via a modified user para…

  Sep 11, 2009
• Unscored —
  CVE-2009-3172

  Unspecified vulnerability in Hitachi Groupmax Groupware Server 07-00 through 07-50-/A, Groupmax Server Set 03-00 throug…

  Sep 11, 2009
• Unscored —
  CVE-2009-3176

  Buffer overflow in the ActiveX control in Novell iPrint Client 4.38 allows remote attackers to cause a denial of servic…

  Sep 11, 2009
• Unscored —
  CVE-2009-3169

  Multiple unspecified vulnerabilities in Hitachi JP1/File Transmission Server/FTP before 09-00 allow remote attackers to…

  Sep 11, 2009
• High 7.2
  CVE-2009-3168

  Mevin Productions Basic PHP Events Lister 2.0 does not properly restrict access to (1) admin/reset.php and (2) admin/us…

  Sep 11, 2009
• Unscored —
  CVE-2009-3174 Public exploit

  PHP remote file inclusion vulnerability in fonctions_racine.php in OBOphiX 2.7.0 and earlier allows remote attackers to…

  Sep 11, 2009
• Unscored —
  CVE-2009-3179

  Multiple unspecified vulnerabilities in Symantec Altiris Deployment Solution 6.9 might allow remote attackers to execut…

  Sep 11, 2009
• Unscored —
  CVE-2009-3167 Public exploit

  Directory traversal vulnerability in index.php in Anantasoft Gazelle CMS 1.0, when magic_quotes_gpc is disabled, allows…

  Sep 11, 2009
• Unscored —
  CVE-2009-2800

  Buffer overflow in Alias Manager in Apple Mac OS X 10.4.11 and 10.5.8 allows attackers to execute arbitrary code or cau…

  Sep 11, 2009
• Unscored —
  CVE-2008-7212

  MOStlyCE before 2.4, as used in Mambo 4.6.3 and earlier, allows remote attackers to obtain sensitive information via ce…

  Sep 11, 2009
• Unscored —
  CVE-2008-7210 Public exploit

  directory.php in AJchat 0.10 allows remote attackers to bypass input validation and conduct SQL injection attacks via a…

  Sep 11, 2009
• Unscored —
  CVE-2008-7213 Public exploit

  Cross-site scripting (XSS) vulnerability in mambots/editors/mostlyce/jscripts/tiny_mce/filemanager/connectors/php/conne…

  Sep 11, 2009
• Unscored —
  CVE-2008-7207

  RivetTracker before 1.0 stores passwords in cleartext in config.php, which allows local users to discover passwords by …

  Sep 11, 2009
• Unscored —
  CVE-2008-7209 Public exploit

  Unrestricted file upload vulnerability in the add2 action in a_upload.php in OneCMS 2.4, and possibly earlier, allows r…

  Sep 11, 2009
• Unscored —
  CVE-2008-7208 Public exploit

  Multiple SQL injection vulnerabilities in OneCMS 2.4, and possibly earlier, allow remote attackers to execute arbitrary…

  Sep 11, 2009
• Unscored —
  CVE-2008-7214

  Cross-site request forgery (CSRF) vulnerability in administrator/index2.php in MOStlyCE before 2.4, as used in Mambo 4.…

  Sep 11, 2009
• Unscored —
  CVE-2008-7206

  Unspecified vulnerability in Electronic Logbook (ELOG) before 2.7.2 has unknown impact and attack vectors when the "log…

  Sep 11, 2009
• Unscored —
  CVE-2008-7211 Public exploit

  CreativeLabs es1371mp.sys 5.1.3612.0 WDM audio driver, as used in Ensoniq PCI 1371 sound cards and when running on Wind…

  Sep 11, 2009
• Unscored —
  CVE-2008-7205

  Unspecified vulnerability in the product view functionality in VirtueMart 1.0.13a and earlier allows remote attackers t…

  Sep 11, 2009
• Unscored —
  CVE-2008-7216 Public exploit

  Peter's Math Anti-Spam Spinoff plugin for WordPress generates audio CAPTCHA clips by concatenating static audio files w…

  Web / CMS
  Sep 11, 2009
• Unscored —
  CVE-2008-7204

  Cross-site request forgery (CSRF) vulnerability in VirtueMart 1.0.13a and earlier allows remote attackers to hijack the…

  Sep 11, 2009
• Unscored —
  CVE-2008-7203 Public exploit

  Valve Software Half-Life Counter-Strike 1.6 allows remote attackers to cause a denial of service (crash) via multiple c…

  Sep 11, 2009
• Unscored —
  CVE-2008-7215

  The Image Manager in MOStlyCE before 2.4, as used in Mambo 4.6.3 and earlier, allows remote attackers to rename arbitra…

  Sep 11, 2009