Archive
September 2009
Vulnerabilities first published in this month (UTC), newest first.
250 results · Clear filters · Feed
-
Unscored —CVE-2009-3331 Public exploit
Multiple PHP remote file inclusion vulnerabilities in DDL CMS 1.0 allow remote attackers to execute arbitrary PHP code …
-
Unscored —CVE-2009-3323 Public exploit
Multiple PHP remote file inclusion vulnerabilities in BAnner ROtation System mini (BAROSmini) 0.32.595 allow remote att…
-
Unscored —CVE-2009-3325 Public exploit
SQL injection vulnerability in the Focusplus Developments Survey Manager (com_surveymanager) component 1.5.0 for Joomla…
-
Unscored —CVE-2009-3328 Public exploit
Cross-site scripting (XSS) vulnerability in sign.php in WX-Guestbook 1.1.208 allows remote attackers to inject arbitrar…
-
Unscored —CVE-2009-3327 Public exploit
Multiple SQL injection vulnerabilities in WX-Guestbook 1.1.208 allow remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2009-3332 Public exploit
SQL injection vulnerability in the JBudgetsMagic (com_jbudgetsmagic) component 0.3.2 through 0.4.0 for Joomla! allows r…
-
Unscored —CVE-2009-3320 Public exploit
Cross-site scripting (XSS) vulnerability in scrivi.php in Zenas PaoLink (aka Pao-Link) 1.0 allows remote attackers to i…
-
Unscored —CVE-2009-3316 Public exploit
SQL injection vulnerability in the JReservation (com_jreservation) component 1.0 and 1.5 for Joomla! allows remote atta…
-
Unscored —CVE-2009-3313 Public exploit
Multiple SQL injection vulnerabilities in FMyClone 2.3 allow remote attackers to execute arbitrary SQL commands via the…
-
Unscored —CVE-2009-3271 Public exploit
Apple Safari on iPhone OS 3.0.1 allows remote attackers to cause a denial of service (application crash) via a long tel…
-
Unscored —CVE-2009-3272 Public exploit
Stack consumption vulnerability in WebKit.dll in WebKit in Apple Safari 3.2.3, and possibly other versions before 4.1.2…
-
Unscored —CVE-2008-7244 Public exploit
Mozilla Firefox 3.0.1 and earlier allows remote attackers to cause a denial of service (browser hang) by calling the wi…
-
Unscored —CVE-2008-7245 Public exploit
Opera 9.52 and earlier allows remote attackers to cause a denial of service (unusable browser) by calling the window.pr…
-
Unscored —CVE-2008-7246 Public exploit
Google Chrome 0.2.149.29 and earlier allows remote attackers to cause a denial of service (unusable browser) by calling…
-
Unscored —
Microsoft Internet Explorer 7 through 7.0.6000.16711 allows remote attackers to cause a denial of service (unusable bro…
-
Unscored —CVE-2009-2793 Public exploit
The kernel in NetBSD, probably 5.0.1 and earlier, on x86 platforms does not properly handle a pre-commit failure of the…
-
Unscored —CVE-2009-3260 Public exploit
Cross-site scripting (XSS) vulnerability in LiveStreet 0.2 allows remote attackers to inject arbitrary web script or HT…
-
Unscored —CVE-2009-3254 Public exploit
Multiple stack-based buffer overflows in Ultimate Player 1.56 beta allow remote attackers to execute arbitrary code via…
-
Unscored —CVE-2009-3248 Public exploit
Cross-site request forgery (CSRF) vulnerability in the RSS module in vtiger CRM 5.0.4 allows remote attackers to hijack…
-
Unscored —CVE-2009-3249 Public exploit
Multiple directory traversal vulnerabilities in vtiger CRM 5.0.4 allow remote attackers to include and execute arbitrar…
-
Unscored —CVE-2009-3253 Public exploit
Stack-based buffer overflow in TriceraSoft Swift Ultralite 1.032 allows remote attackers to cause a denial of service (…
-
Unscored —CVE-2009-3247 Public exploit
Cross-site scripting (XSS) vulnerability in the Activities module in vtiger CRM 5.0.4 allows remote attackers to inject…
-
Unscored —CVE-2009-3252 Public exploit
Multiple SQL injection vulnerabilities in news.php in Rock Band CMS 0.10 allow remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2009-3246 Public exploit
SQL injection vulnerability in spnews.php in MyBuxScript PTC-BUX allows remote attackers to execute arbitrary SQL comma…
-
Unscored —
The saveForwardAttachments procedure in the Compose Mail functionality in vtiger CRM 5.0.4 allows remote authenticated …
-
Unscored —CVE-2009-3256 Public exploit
Cross-site scripting (XSS) vulnerability in include/ajax/blogInfo.php in LiveStreet 0.2 allows remote attackers to inje…
-
Unscored —CVE-2009-3243 Public exploit
Unspecified vulnerability in the TLS dissector in Wireshark 1.2.0 and 1.2.1, when running on Windows, allows remote att…
-
Unscored —CVE-2009-3242 Public exploit
Unspecified vulnerability in packet.c in the GSM A RR dissector in Wireshark 1.2.0 and 1.2.1 allows remote attackers to…
-
Unscored —
Heap-based buffer overflow in the SwDir.dll ActiveX control in Adobe Shockwave Player 11.5.1.601 and earlier allows rem…
-
Unscored —CVE-2009-3241 Public exploit
Unspecified vulnerability in the OpcUa (OPC UA) dissector in Wireshark 0.99.6 through 1.0.8 and 1.2.0 through 1.2.1 all…
-
Unscored —CVE-2009-2937 Public exploit
Cross-site scripting (XSS) vulnerability in Planet 2.0 and Planet Venus allows remote attackers to inject arbitrary web…
-
Unscored —CVE-2008-7242 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in MODx CMS 0.9.6.1 and 0.9.6.1p1 allo remote attackers to inject a…
-
Unscored —CVE-2008-7240 Public exploit
Directory traversal vulnerability in include/unverified.inc.php in Linux Web Shop (LWS) php User Base 1.3beta allows re…
-
Unscored —CVE-2009-3233 Public exploit
changetrack 4.3 allows local users to execute arbitrary commands via CRLF sequences and shell metacharacters in a filen…
-
Unscored —CVE-2009-3234 Public exploit
Buffer overflow in the perf_copy_attr function in kernel/perf_counter.c in the Linux kernel 2.6.31-rc1 allows local use…
-
Unscored —CVE-2009-3226 Public exploit
SQL injection vulnerability in index.php in AlmondSoft Almond Classifieds Ads Enterprise and Almond Affiliate Network C…
-
Unscored —CVE-2009-3219 Public exploit
Directory traversal vulnerability in a.php in AR Web Content Manager (AWCM) 2.1, when magic_quotes_gpc is disabled, all…
-
Unscored —CVE-2009-3223 Public exploit
SQL injection vulnerability in ppc-add-keywords.php in Inout Adserver allows remote authenticated users to execute arbi…
-
Unscored —CVE-2009-3220 Public exploit
PHP remote file inclusion vulnerability in cp_html2txt.php in All In One Control Panel (AIOCP) 1.4.001 allows remote at…
-
Unscored —CVE-2009-3215 Public exploit
SQL injection vulnerability in IXXO Cart Standalone before 3.9.6.1, and the IXXO Cart component for Joomla! 1.0.x, allo…