Archive
24 September 2009
Vulnerabilities first published on this day (UTC), newest first.
39 results · Feed
-
Unscored —
Multiple unspecified vulnerabilities in the (1) iscsiadm and (2) iscsitadm programs in Sun Solaris 10, and OpenSolaris …
-
Unscored —CVE-2009-2817 Public exploit
Buffer overflow in Apple iTunes before 9.0.1 allows remote attackers to execute arbitrary code or cause a denial of ser…
-
Unscored —
Unspecified vulnerability in Role-Based Access Control (RBAC) in HP HP-UX B.11.23 and B.11.31 allows local users to byp…
-
Unscored —CVE-2009-3367 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in An image gallery 1.0 allow remote attackers to inject arbitrary …
-
Unscored —CVE-2009-3362 Public exploit
PHP remote file inclusion vulnerability in printnews.php3 in SZNews 2.7 allows remote attackers to execute arbitrary PH…
-
Unscored —CVE-2009-3366 Public exploit
Directory traversal vulnerability in navigation.php in An image gallery 1.0 allows remote attackers to list arbitrary d…
-
Unscored —
Unspecified vulnerability in SAP Crystal Reports Server 2008 on Windows XP allows attackers to cause a denial of servic…
-
Unscored —
Multiple unspecified vulnerabilities in the Subdomain Manager module for Drupal have unknown impact and attack vectors.
-
Unscored —CVE-2009-3335 Public exploit
SQL injection vulnerability in the TurtuShout component 0.11 for Joomla! allows remote attackers to execute arbitrary S…
-
Unscored —CVE-2009-3358 Public exploit
SQL injection vulnerability in profile.php in Tourism Scripts Adult Portal escort listing allows remote attackers to ex…
-
Unscored —CVE-2009-3342 Public exploit
SQL injection vulnerability in frontend/assets/ajax/checkusername.php in the AlphaUserPoints (com_alphauserpoints) comp…
-
Unscored —CVE-2009-3368 Public exploit
Cross-site scripting (XSS) vulnerability in the Hotel Booking Reservation System (aka HBS or com_hbssearch) component f…
-
Unscored —
SQL injection vulnerability in the Freetag (serendipity_event_freetag) plugin before 3.09 for Serendipity (S9Y) allows …
-
Unscored —CVE-2009-3365 Public exploit
PHP remote file inclusion vulnerability in add-ons/modules/sysmanager/plugins/install.plugin.php in Aurora CMS 1.0.2 al…
-
Unscored —CVE-2009-3336 Public exploit
SQL injection vulnerability in auction_details.php in PHP Pro Bid allows remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2009-3361 Public exploit
SQL injection vulnerability in index.php in PHP-IPNMonitor allows remote attackers to execute arbitrary SQL commands vi…
-
Unscored —CVE-2009-3359 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Match Agency BiZ 1.0 allow remote attackers to inject arbitrary …
-
Unscored —CVE-2009-3357 Public exploit
Multiple SQL injection vulnerabilities in the Hotel Booking Reservation System (aka HBS or com_hbssearch) component for…
-
Unscored —
Unspecified vulnerability in FreeSSHD 1.2.4 allows remote attackers to cause a denial of service via unknown vectors, a…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the BUEditor module 5.x before 5.x-1.2 and 6.x before 6.x-1.4, a module for…
-
Unscored —
Unspecified vulnerability in SAP Crystal Reports Server 2008 allows remote attackers to execute arbitrary code via unkn…
-
Unscored —
Unspecified vulnerability in McAfee Email and Web Security Appliance 5.1 VMtrial allows remote attackers to read arbitr…
-
Unscored —CVE-2009-3348 Public exploit
Cross-site scripting (XSS) vulnerability in Datavore Gyro 5.0 allows remote attackers to inject arbitrary web script or…
-
Unscored —CVE-2009-3360 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Datemill 1.0 allow remote attackers to inject arbitrary web scri…
-
Unscored —
Multiple unspecified vulnerabilities in the Rest API module for Drupal have unknown impact and attack vectors.
-
Unscored —CVE-2009-3349 Public exploit
SQL injection vulnerability in Datavore Gyro 5.0 allows remote attackers to execute arbitrary SQL commands via the cid …
-
Unscored —
Multiple unspecified vulnerabilities in the Node2Node module for Drupal have unknown impact and attack vectors.
-
Unscored —
Buffer overflow on the Linksys WRT54GL wireless router allows remote attackers to execute arbitrary code via unspecifie…
-
Unscored —
Multiple unspecified vulnerabilities in the quota_by_role (Quota by role) module for Drupal have unknown impact and att…
-
Unscored —
CgiUserConfigEdit in BackupPC 3.1.0, when SSH keys and Rsync are in use in a multi-user environment, does not restrict …
-
Unscored —CVE-2009-3343 Public exploit
SQL injection vulnerability in details.asp in HotWeb Rentals allows remote attackers to execute arbitrary SQL commands …
-
Unscored —
Buffer overflow on the D-Link DIR-400 wireless router allows remote attackers to execute arbitrary code via unspecified…
-
Unscored —CVE-2009-3364 Public exploit
Stack-based buffer overflow in FTPShell Client 4.1 RC2 allows remote FTP servers to execute arbitrary code via a long r…
-
Unscored —CVE-2009-3356 Public exploit
SQL injection vulnerability in index.php in Image voting 1.0 allows remote attackers to execute arbitrary SQL commands …
-
Unscored —CVE-2009-3355 Public exploit
Cross-site scripting (XSS) vulnerability in profile.php in Datetopia Buy Dating Site 1.0 allows remote attackers to inj…
-
Unscored —CVE-2009-3338 Public exploit
Stack-based buffer overflow in EffectMatrix (E.M.) Magic Morph 1.95b allows remote attackers to execute arbitrary code …
-
Unscored —
Multiple unspecified vulnerabilities in the Node Browser module for Drupal have unknown impact and attack vectors.
-
Unscored —
Heap-based buffer overflow in SAP Crystal Reports Server 2008 has unknown impact and attack vectors, as demonstrated by…
-
Unscored —
Unspecified vulnerability in the Remote Management Interface (RMI) for MSL Tape Libraries and 1/8 G2 Tape Autoloaders i…