Archive
September 2009
Vulnerabilities first published in this month (UTC), newest first.
250 results · Clear filters · Feed
-
Unscored —CVE-2009-3489 Public exploit
Adobe Photoshop Elements 8.0 installs the Adobe Active File Monitor V8 service with an insecure security descriptor, wh…
-
Unscored —CVE-2009-3492 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Loggix Project 9.4.5 and earlier allow remote attackers to execut…
-
Unscored —CVE-2009-3503 Public exploit
Multiple SQL injection vulnerabilities in search.aspx in BPowerHouse BPHolidayLettings 1.0 allow remote attackers to ex…
-
Unscored —CVE-2009-3484 Public exploit
Stack-based buffer overflow in Core FTP 2.1 build 1612 allows user-assisted remote attackers to execute arbitrary code …
-
Unscored —CVE-2009-3499 Public exploit
SQL injection vulnerability in employee.aspx in BPowerHouse BPLawyerCaseDocuments 1.0 allows remote attackers to execut…
-
Unscored —CVE-2009-3500 Public exploit
Multiple SQL injection vulnerabilities in BPowerHouse BPGames 1.0 allow remote attackers to execute arbitrary SQL comma…
-
Unscored —CVE-2009-3486 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in the J-Web interface in Juniper JUNOS 8.5R1.14 allow remote authe…
-
Unscored —CVE-2009-3495 Public exploit
SQL injection vulnerability in view_mag.php in Vastal I-Tech DVD Zone allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2009-3494 Public exploit
Multiple SQL injection vulnerabilities in index.php in T-HTB Manager 0.5, when magic_quotes_gpc is disabled, allow remo…
-
Unscored —CVE-2009-3496 Public exploit
Cross-site scripting (XSS) vulnerability in view_mag.php in Vastal I-Tech DVD Zone allows remote attackers to inject ar…
-
Unscored —CVE-2009-3504 Public exploit
SQL injection vulnerability in offers_buy.php in Alibaba Clone 3.0 allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2009-3487 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in the J-Web interface in Juniper JUNOS 8.5R1.14 allow remote authe…
-
Unscored —CVE-2009-3491 Public exploit
SQL injection vulnerability in the Kinfusion SportFusion (com_sportfusion) component 0.2.2 through 0.2.3 for Joomla! al…
-
Unscored —CVE-2009-3485 Public exploit
Cross-site scripting (XSS) vulnerability in the J-Web interface in Juniper JUNOS 8.5R1.14 and 9.0R1.1 allows remote att…
-
Unscored —CVE-2009-3502 Public exploit
SQL injection vulnerability in music.php in BPowerHouse BPMusic 1.0 allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2009-3493 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Zenas PaoBacheca Guestbook 2.1 allow remote attackers to inject …
-
Unscored —CVE-2009-3469 Public exploit
Cross-site scripting (XSS) vulnerability in profiles/html/simpleSearch.do in IBM Lotus Connections 2.0.1 allows remote …
-
Unscored —CVE-2009-3457 Public exploit
Cisco ACE XML Gateway (AXG) and ACE Web Application Firewall (WAF) before 6.1 allow remote attackers to obtain sensitiv…
-
Unscored —CVE-2009-3449 Public exploit
MP3 Collector 2.3 allows remote attackers to cause a denial of service (application crash) via a long URL in a .m3u pla…
-
Unscored —CVE-2009-3436 Public exploit
Multiple SQL injection vulnerabilities in forum.asp in MaxWebPortal allow remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2009-3443 Public exploit
SQL injection vulnerability in the Fastball (com_fastball) component 1.1.0 through 1.2 for Joomla! allows remote attack…
-
Unscored —CVE-2009-3446 Public exploit
SQL injection vulnerability in the MyRemote Video Gallery (com_mytube) component 1.0 Beta for Joomla! allows remote att…
-
Unscored —CVE-2009-3439 Public exploit
Multiple SQL injection vulnerabilities in Open Source Security Information Management (OSSIM) before 2.1.2 allow remote…
-
Unscored —CVE-2009-3438 Public exploit
SQL injection vulnerability in the JoomlaFacebook (com_facebook) component for Joomla! allows remote attackers to execu…
-
Unscored —CVE-2009-3434 Public exploit
SQL injection vulnerability in the Tupinambis (com_tupinambis) component 1.0 for Mambo and Joomla! allows remote attack…
-
Unscored —CVE-2009-3444 Public exploit
Cross-site scripting (XSS) vulnerability in email.php in e107 0.7.16 and earlier allows remote attackers to inject arbi…
-
Unscored —CVE-2009-3440 Public exploit
Cross-site scripting (XSS) vulnerability in Open Source Security Information Management (OSSIM) before 2.1.2 allows rem…
-
Unscored —
Stack consumption vulnerability in Adobe Reader and Acrobat 9.1.3, 9.1.2, 9.1.1, and earlier 9.x versions; 8.1.6 and ea…
-
Unscored —CVE-2009-3417 Public exploit
SQL injection vulnerability in the IDoBlog (com_idoblog) component 1.1 build 30 for Joomla! allows remote attackers to …
-
Unscored —CVE-2009-3430 Public exploit
SQL injection vulnerability in login.php in Allomani Mobile 2.5 allows remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2009-3419 Public exploit
SQL injection vulnerability in index.php in the Publisher module 2.0 for Miniweb allows remote attackers to execute arb…
-
Unscored —CVE-2009-3421 Public exploit
login.php in Zenas PaoBacheca Guestbook 2.1, when register_globals is enabled, allows remote attackers to bypass authen…
-
Unscored —CVE-2009-3425 Public exploit
Directory traversal vulnerability in includes/inc.thcms_admin_dirtree.php in MaxCMS 3.11.20b allows remote attackers to…
-
Unscored —CVE-2009-3418 Public exploit
Multiple SQL injection vulnerabilities in Plume CMS 1.2.3 allow (1) remote authenticated users to execute arbitrary SQL…
-
Unscored —CVE-2009-3428 Public exploit
Stack-based buffer overflow in Easy Music Player 1.0.0.2 allows remote attackers to execute arbitrary code via a crafte…
-
Unscored —CVE-2009-3423 Public exploit
login.php in Zenas PaoLink 1.0, when register_globals is enabled, allows remote attackers to bypass authentication and …
-
Unscored —CVE-2009-3420 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in the Publisher module 2.0 for Miniweb allow remote a…
-
Unscored —
Stack-based buffer overflow in Pirate Radio Destiny Media Player 1.61 allows remote attackers to execute arbitrary code…
-
Unscored —CVE-2009-3426 Public exploit
PHP remote file inclusion vulnerability in includes/file_manager/special.php in MaxCMS 3.11.20b allows remote attackers…
-
Unscored —CVE-2009-3424 Public exploit
Multiple PHP remote file inclusion vulnerabilities in MaxCMS 3.11.20b, when register_globals is enabled, allow remote a…