Archive
September 2009
Vulnerabilities first published in this month (UTC), newest first.
250 results · Clear filters · Feed
-
Unscored —CVE-2008-7168 Public exploit
Insecure method vulnerability in the UUSee UUUpgrade ActiveX control (UUUpgrade.ocx 3.0.2.12) allows remote attackers t…
-
Unscored —
Buffer overflow in the IMAP service in NetWin Surgemail 3.9e, and possibly other versions before 3.9g2, allows remote a…
-
Unscored —CVE-2008-7170 Public exploit
GSC build 2067 and earlier relies on the client to enforce administrator privileges, which allows remote attackers to e…
-
Unscored —CVE-2008-7169 Public exploit
SQL injection vulnerability in Jabode horoscope extension (com_jabode) for Joomla! allows remote attackers to execute a…
-
Unscored —CVE-2008-7171 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Lightweight news portal (LNP) 1.0b allow remote attackers to inj…
-
Unscored —CVE-2008-7180 Public exploit
del_query1.php in Telephone Directory 2008 allows remote attackers to delete arbitrary contacts via a direct request wi…
-
Unscored —CVE-2008-7181 Public exploit
Butterfly Organizer 2.0.0 allows remote attackers to (1) delete arbitrary categories via a modified tablehere parameter…
-
Unscored —CVE-2009-3082 Public exploit
SQL injection vulnerability in wcategory.php in Snow Hall Silurus System 1.0 allows remote attackers to execute arbitra…
-
Unscored —CVE-2009-3081 Public exploit
SQL injection vulnerability in index.php in Uiga Church Portal allows remote attackers to execute arbitrary SQL command…
-
Unscored —
Unrestricted file upload vulnerability in the RoboHelpServer Servlet (robohelp/server) in Adobe RoboHelp Server 8 allow…
-
Unscored —CVE-2008-7165 Public exploit
Cross-site request forgery in cp06_wifi_m_nocifr.cgi in the administrator panel in TELECOM ITALIA Alice Gate2 Plus Wi-F…
-
Unscored —CVE-2008-7163 Public exploit
Directory traversal vulnerability in mods/Integrated/index.php in SineCMS 2.3.5 and earlier, when register_globals is e…
-
Unscored —CVE-2008-7162 Public exploit
Buffer overflow in Hero Super Player 3000 allows remote attackers to cause a denial of service (crash) and possibly exe…
-
Unscored —CVE-2008-7161 Public exploit
Fortinet FortiGuard Fortinet FortiGate-1000 3.00 build 040075,070111 allows remote attackers to bypass URL filtering vi…
-
Unscored —
Stack consumption vulnerability in the FTP Service in Microsoft Internet Information Services (IIS) 5.0 through 7.0 all…
-
Unscored —CVE-2009-3058 Public exploit
Stack-based buffer overflow in akPlayer 1.9.0 allows remote attackers to execute arbitrary code via a long string in a …
-
Unscored —CVE-2009-3055 Public exploit
PHP remote file inclusion vulnerability in engine/api/api.class.php in DataLife Engine (DLE) 8.2 allows remote attacker…
-
Unscored —CVE-2009-3066 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in PropertyWatchScript.com Property Watch 2.0 allow remote attacker…
-
Unscored —CVE-2009-3062 Public exploit
SQL injection vulnerability in message_box.php in OSI Codes PHP Live! 3.3 allows remote attackers to execute arbitrary …
-
Unscored —CVE-2009-3063 Public exploit
SQL injection vulnerability in the Game Server (com_gameserver) component 1.0 for Joomla! allows remote attackers to ex…
-
Unscored —CVE-2009-3052 Public exploit
SQL injection vulnerability in root/includes/prime_quick_style.php in the Prime Quick Style addon before 1.2.3 for phpB…
-
Unscored —CVE-2009-3064 Public exploit
Directory traversal vulnerability in debugger/debug_php.php in Ve-EDIT 0.1.4 allows remote attackers to include and exe…
-
Unscored —
Directory traversal vulnerability in the Agora (com_agora) component 3.0.0b for Joomla! allows remote attackers to incl…
-
Unscored —CVE-2009-3056 Public exploit
PHP remote file inclusion vulnerability in include/engine/content/elements/menu.php in KingCMS 0.6.0 allows remote atta…
-
Unscored —CVE-2009-3054 Public exploit
SQL injection vulnerability in the Artetics.com Art Portal (com_artportal) component 1.0 for Joomla! allows remote atta…
-
Unscored —CVE-2009-3065 Public exploit
PHP remote file inclusion vulnerability in editor/edit_htmlarea.php in Ve-EDIT 0.1.4 allows remote attackers to execute…
-
Unscored —CVE-2009-3061 Public exploit
SQL injection vulnerability in lesson.php in Alqatari Q R Script 1.0 allows remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2009-3057 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in AOM Software Beex 3 allow remote attackers to inject arbitrary w…
-
Unscored —CVE-2009-3059 Public exploit
Multiple SQL injection vulnerabilities in Joker Board (aka JBoard) 2.0 and earlier allow remote attackers to execute ar…
-
Unscored —CVE-2008-7155 Public exploit
NetRisk 1.9.7 does not properly restrict access to admin/change_submit.php, which allows remote attackers to change the…
-
Unscored —CVE-2008-7156 Public exploit
EkinBoard 1.1.0 and earlier, when register_globals is enabled, allows remote attackers to bypass authorization and gain…
-
Unscored —CVE-2008-7154 Public exploit
Docebo 3.5.0.3 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) class/cl…
-
Unscored —CVE-2008-7157 Public exploit
Unrestricted file upload vulnerability in EkinBoard 1.1.0 and earlier allows remote attackers to execute arbitrary code…
-
Unscored —CVE-2008-7153 Public exploit
SQL injection vulnerability in the autoDetectRegion function in doceboCore/lib/lib.regset.php in Docebo 3.5.0.3 and ear…
-
Unscored —CVE-2009-3043 Public exploit
The tty_ldisc_hangup function in drivers/char/tty_ldisc.c in the Linux kernel 2.6.31-rc before 2.6.31-rc8 allows local …
-
Unscored —
The tftp_request function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, allows remote attackers to caus…
-
Unscored —
Heap-based buffer overflow in the tftp_request function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, m…
-
Unscored —CVE-2009-3042 Public exploit
SQL injection vulnerability in machine.php in Open Computer and Software (OCS) Inventory NG 1.02.1 allows remote attack…
-
Unscored —CVE-2009-3040 Public exploit
Multiple SQL injection vulnerabilities in Open Computer and Software (OCS) Inventory NG 1.02 for Unix allow remote atta…
-
Unscored —CVE-2009-3041 Public exploit
SPIP 1.9 before 1.9.2i and 2.0.x through 2.0.8 does not use proper access control for (1) ecrire/exec/install.php and (…