Archive
September 2009
Vulnerabilities first published in this month (UTC), newest first.
574 results · Feed
-
Unscored —CVE-2009-3150 Public exploit
SQL injection vulnerability in index.php in Multi Website 1.5 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —
Unspecified vulnerability in Fujitsu Interstage HTTP Server, as used in Interstage Application Server 5.0, 7.0, 7.0.1, …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in OpenWebMail before 2.53 (Stable) allow remote attackers to injec…
-
Unscored —
Multiple unspecified vulnerabilities in phpns before 2.1.1beta1 have unknown impact and attack vectors.
-
Unscored —
Phoenix Contact FL IL 24 BK-PAC allows remote attackers to cause a denial of service (hang) via (1) unspecified manipul…
-
Unscored —
Unspecified vulnerability in Fujitsu Interstage HTTP Server, as used in Interstage Application Server Enterprise Editio…
-
Unscored —
Multiple unspecified vulnerabilities in G15Daemon before 1.9.4 have unknown impact and attack vectors.
-
Unscored —
Double free vulnerability in Deliantra server engine before 2.4 has unknown impact and attack vectors.
-
Unscored —
Unspecified vulnerability in metashell before 0.03 has unknown impact and attack vectors related to a "PATH execution s…
-
Unscored —
Lantronix MSS485-T allows remote attackers to cause a denial of service (unstable performance and service loss) via cer…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the web management interface in the ZyXEL P-330W router allows remote attac…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in the web management interface in the ZyXEL P-330W router a…
-
Unscored —
Cross-site scripting (XSS) vulnerability in public/index.php in BIGACE Web CMS 2.6 allows remote attackers to inject ar…
-
Unscored —CVE-2009-3123 Public exploit
Directory traversal vulnerability in gallery/gallery.php in Wap-Motor before 18.1 allows remote attackers to read arbit…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Ajax Table module 5.x for Drupal allows remote attackers to inject arbi…
-
Unscored —
The Ajax Table module 5.x for Drupal does not perform access control, which allows remote attackers to delete arbitrary…
-
Unscored —
The RSS reader widget in IBM Lotus Notes 8.0 and 8.5 saves items from an RSS feed as local HTML documents, which allows…
-
Unscored —CVE-2009-3117 Public exploit
SQL injection vulnerability in category.php in Snow Hall Silurus System 1.0 allows remote attackers to execute arbitrar…
-
Unscored —
SolarWinds TFTP Server 9.2.0.111 and earlier allows remote attackers to cause a denial of service (service stop) via a …
-
Unscored —CVE-2009-3116 Public exploit
SQL injection vulnerability in index.php in Uiga Church Portal allows remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2009-3124 Public exploit
Directory traversal vulnerability in get_message.cgi in QuarkMail allows remote attackers to read arbitrary files via a…
-
Unscored —
SQL injection vulnerability in mod/poll/comment.php in the vote module in Danneo CMS 0.5.2 and earlier allows remote at…
-
Unscored —CVE-2009-3119 Public exploit
SQL injection vulnerability in screen.php in the Download System mSF (dsmsf) module for PHP-Fusion allows remote attack…
-
Unscored —
Stack-based buffer overflow in the Java Web Start command launcher in Java for Mac OS X 10.5 before Update 5 allows att…
-
Unscored —CVE-2008-7192 Public exploit
Cross-site request forgery (CSRF) vulnerability in index.php in WoltLab Burning Board (wBB) 3.0.1, and possibly other 3…
-
Unscored —
PHPKIT 1.6.4 PL1 includes the session ID in the URL, which allows remote attackers to conduct cross-site request forger…
-
Unscored —
Unspecified vulnerability in OXID eShop Professional, Enterprise, and Community Edition before 4.1.2, 3.x, and 2.x allo…
-
Unscored —
Unspecified vulnerability in OXID eShop Professional, Enterprise, and Community Edition before 4.1.0 allows remote atta…
-
Unscored —
The rad_decode function in FreeRADIUS before 1.1.8 allows remote attackers to cause a denial of service (radiusd crash)…
-
Unscored —
Unspecified vulnerability in Polipo before 1.0.4 allows remote attackers to cause a denial of service (crash) via a lon…
-
Unscored —
Unspecified vulnerability in Adium before 1.2 has unknown impact and attack vectors related to javascript: URLs, possib…
-
Unscored —
Multiple unspecified vulnerabilities in Local Media Browser before 0.1 have unknown impact and attack vectors related t…
-
Unscored —CVE-2008-7188 Public exploit
ClipShare 2.6 does not properly restrict access to certain functionality, which allows remote attackers to change the p…
-
Unscored —
Coppermine Photo Gallery (CPG) 1.4.14 does not restrict access to update.php, which allows remote attackers to obtain s…
-
Unscored —
Coppermine Photo Gallery (CPG) 1.4.14 allows remote attackers to obtain sensitive information via a direct request to i…
-
Unscored —
OXID eShop 4.x before 4.1.4-21266, 3.x, and 2.x allows remote attackers to obtain sensitive information (session detail…
-
Unscored —
PHP remote file inclusion vulnerability in eva/index.php in EVA CMS 2.3.1, when register_globals is enabled, allows rem…
-
Unscored —CVE-2008-7184 Public exploit
Cross-site scripting (XSS) vulnerability in Diigo Toolbar and Diigolet allows remote attackers to inject arbitrary web …
-
Unscored —CVE-2008-7185 Public exploit
GNOME Rhythmbox 0.11.5 allows remote attackers to cause a denial of service (segmentation fault and crash) via a playli…
-
Unscored —
Unspecified vulnerability in Cisco NX-OS before 4.0(1a)N2(1), when running on Nexus 5000 platforms, allows remote attac…