Archive
September 2009
Vulnerabilities first published in this month (UTC), newest first.
574 results · Feed
-
Critical 9.8
Zope Object Database (ZODB) Arbitrary files reading and deletion
Unspecified vulnerability in the Zope Enterprise Objects (ZEO) storage-server functionality in Zope Object Database (ZODB) 3.8 before 3.8.3 and 3.9.x before 3.9.0c2, when certain ZEO database sharing and blob support are enabled, allows remote authenticated u…
-
Unscored —
KDE KSSL in kdelibs 3.5.4, 4.2.4, and 4.3 does not properly handle a '\0' character in a domain name in the Subject Alt…
-
Unscored —
libpurple/protocols/irc/msgs.c in the IRC protocol plugin in libpurple in Pidgin before 2.6.2 allows remote IRC servers…
-
Unscored —
The IAX2 protocol implementation in Asterisk Open Source 1.2.x before 1.2.35, 1.4.x before 1.4.26.2, 1.6.0.x before 1.6…
-
Unscored —CVE-2008-7178 Public exploit
Directory traversal vulnerability in Uploader module 1.1 for XOOPS allows remote attackers to read arbitrary files via …
-
Unscored —CVE-2008-7179 Public exploit
OTManager CMS 2.4 allows remote attackers to bypass authentication and gain administrator privileges by setting the ADM…
-
Unscored —CVE-2008-7172 Public exploit
Lightweight news portal (LNP) 1.0b does not properly restrict access to administrator functionality, which allows remot…
-
Unscored —CVE-2008-7176 Public exploit
Multiple directory traversal vulnerabilities in Facil CMS 0.1RC allow remote attackers to read arbitrary files via a ..…
-
Unscored —CVE-2008-7167 Public exploit
Unrestricted file upload vulnerability in upload.php in Page Manager 2006-02-04 allows remote attackers to execute arbi…
-
Unscored —
Cross-site scripting (XSS) vulnerability in wp-admin/admin.php in NextGEN Gallery 0.96 and earlier plugin for Wordpress…
-
Unscored —
The Jura Internet Connection Kit for the Jura Impressa F90 coffee maker does not properly restrict access to privileged…
-
Unscored —
Multiple buffer overflows in the Jura Internet Connection Kit for the Jura Impressa F90 coffee maker allow remote attac…
-
Unscored —CVE-2008-7168 Public exploit
Insecure method vulnerability in the UUSee UUUpgrade ActiveX control (UUUpgrade.ocx 3.0.2.12) allows remote attackers t…
-
Unscored —
Buffer overflow in the IMAP service in NetWin Surgemail 3.9e, and possibly other versions before 3.9g2, allows remote a…
-
Unscored —CVE-2008-7170 Public exploit
GSC build 2067 and earlier relies on the client to enforce administrator privileges, which allows remote attackers to e…
-
Unscored —CVE-2008-7169 Public exploit
SQL injection vulnerability in Jabode horoscope extension (com_jabode) for Joomla! allows remote attackers to execute a…
-
Unscored —
Buffer overflow in the listing module in Netwide Assembler (NASM) before 2.03.01 has unknown impact and attack vectors,…
-
Unscored —CVE-2008-7171 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Lightweight news portal (LNP) 1.0b allow remote attackers to inj…
-
Unscored —CVE-2008-7180 Public exploit
del_query1.php in Telephone Directory 2008 allows remote attackers to delete arbitrary contacts via a direct request wi…
-
Unscored —CVE-2008-7181 Public exploit
Butterfly Organizer 2.0.0 allows remote attackers to (1) delete arbitrary categories via a modified tablehere parameter…
-
Unscored —CVE-2009-3082 Public exploit
SQL injection vulnerability in wcategory.php in Snow Hall Silurus System 1.0 allows remote attackers to execute arbitra…
-
Unscored —CVE-2009-3081 Public exploit
SQL injection vulnerability in index.php in Uiga Church Portal allows remote attackers to execute arbitrary SQL command…
-
Unscored —
Eval injection vulnerability in scripts/uscan.pl before Rev 1984 in devscripts allows remote attackers to execute arbit…
-
Unscored —
The Red Hat build script for the GNOME Display Manager (GDM) before 2.16.0-56 on Red Hat Enterprise Linux (RHEL) 5 omit…
-
Unscored —
Unrestricted file upload vulnerability in the RoboHelpServer Servlet (robohelp/server) in Adobe RoboHelp Server 8 allow…
-
Unscored —CVE-2008-7165 Public exploit
Cross-site request forgery in cp06_wifi_m_nocifr.cgi in the administrator panel in TELECOM ITALIA Alice Gate2 Plus Wi-F…
-
Unscored —CVE-2008-7163 Public exploit
Directory traversal vulnerability in mods/Integrated/index.php in SineCMS 2.3.5 and earlier, when register_globals is e…
-
Unscored —
Multiple unspecified vulnerabilities in Shareaza before 2.3.1.0 have unknown impact and attack vectors related to "very…
-
Unscored —CVE-2008-7162 Public exploit
Buffer overflow in Hero Super Player 3000 allows remote attackers to cause a denial of service (crash) and possibly exe…
-
Unscored —CVE-2008-7161 Public exploit
Fortinet FortiGuard Fortinet FortiGate-1000 3.00 build 040075,070111 allows remote attackers to bypass URL filtering vi…
-
Unscored —
Buffer overflow in the web interface in BitTorrent 6.0.1 (build 7859) and earlier, and uTorrent 1.7.6 (build 7859) and …
-
Unscored —
Stack consumption vulnerability in the FTP Service in Microsoft Internet Information Services (IIS) 5.0 through 7.0 all…
-
Unscored —CVE-2009-3058 Public exploit
Stack-based buffer overflow in akPlayer 1.9.0 allows remote attackers to execute arbitrary code via a long string in a …
-
Unscored —CVE-2009-3055 Public exploit
PHP remote file inclusion vulnerability in engine/api/api.class.php in DataLife Engine (DLE) 8.2 allows remote attacker…
-
Unscored —CVE-2009-3066 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in PropertyWatchScript.com Property Watch 2.0 allow remote attacker…
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in Reservation Manager allows remote attackers to inject arbitrar…
-
Unscored —CVE-2009-3062 Public exploit
SQL injection vulnerability in message_box.php in OSI Codes PHP Live! 3.3 allows remote attackers to execute arbitrary …
-
Unscored —CVE-2009-3063 Public exploit
SQL injection vulnerability in the Game Server (com_gameserver) component 1.0 for Joomla! allows remote attackers to ex…
-
Unscored —CVE-2009-3052 Public exploit
SQL injection vulnerability in root/includes/prime_quick_style.php in the Prime Quick Style addon before 1.2.3 for phpB…
-
Unscored —CVE-2009-3064 Public exploit
Directory traversal vulnerability in debugger/debug_php.php in Ve-EDIT 0.1.4 allows remote attackers to include and exe…