Archive
September 2009
Vulnerabilities first published in this month (UTC), newest first.
574 results · Feed
-
Unscored —
Directory traversal vulnerability in the Agora (com_agora) component 3.0.0b for Joomla! allows remote attackers to incl…
-
Unscored —CVE-2009-3056 Public exploit
PHP remote file inclusion vulnerability in include/engine/content/elements/menu.php in KingCMS 0.6.0 allows remote atta…
-
Unscored —CVE-2009-3054 Public exploit
SQL injection vulnerability in the Artetics.com Art Portal (com_artportal) component 1.0 for Joomla! allows remote atta…
-
Unscored —CVE-2009-3065 Public exploit
PHP remote file inclusion vulnerability in editor/edit_htmlarea.php in Ve-EDIT 0.1.4 allows remote attackers to execute…
-
Unscored —CVE-2009-3061 Public exploit
SQL injection vulnerability in lesson.php in Alqatari Q R Script 1.0 allows remote attackers to execute arbitrary SQL c…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Joker Board (aka JBoard) 2.0 and earlier allow remote attackers …
-
Unscored —CVE-2009-3057 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in AOM Software Beex 3 allow remote attackers to inject arbitrary w…
-
Unscored —CVE-2009-3059 Public exploit
Multiple SQL injection vulnerabilities in Joker Board (aka JBoard) 2.0 and earlier allow remote attackers to execute ar…
-
Unscored —CVE-2008-7155 Public exploit
NetRisk 1.9.7 does not properly restrict access to admin/change_submit.php, which allows remote attackers to change the…
-
Unscored —CVE-2008-7156 Public exploit
EkinBoard 1.1.0 and earlier, when register_globals is enabled, allows remote attackers to bypass authorization and gain…
-
Unscored —CVE-2008-7154 Public exploit
Docebo 3.5.0.3 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) class/cl…
-
Unscored —CVE-2008-7157 Public exploit
Unrestricted file upload vulnerability in EkinBoard 1.1.0 and earlier allows remote attackers to execute arbitrary code…
-
Unscored —CVE-2008-7153 Public exploit
SQL injection vulnerability in the autoDetectRegion function in doceboCore/lib/lib.regset.php in Docebo 3.5.0.3 and ear…
-
Unscored —
Numara FootPrints 7.5a through 7.5a1 and 8.0 through 8.0a allows remote attackers to execute arbitrary commands via she…
-
Unscored —
Heap-based buffer overflow in OpenOffice.org (OOo) before 3.1.1 and StarOffice/StarSuite 7, 8, and 9 might allow remote…
-
Unscored —
Integer underflow in OpenOffice.org (OOo) before 3.1.1 and StarOffice/StarSuite 7, 8, and 9 might allow remote attacker…
-
Unscored —
Opera before 10.00, when a collapsed address bar is used, does not properly update the domain name from the previously …
-
Unscored —
Opera before 10.00 on Linux, Solaris, and FreeBSD does not properly implement the "INPUT TYPE=file" functionality, whic…
-
Unscored —
Buffer overflow in the set_page_size function in util.cxx in HTMLDOC 1.8.27 and earlier allows context-dependent attack…
-
Unscored —CVE-2009-3043 Public exploit
The tty_ldisc_hangup function in drivers/char/tty_ldisc.c in the Linux kernel 2.6.31-rc before 2.6.31-rc8 allows local …
-
Unscored —
Opera before 10.00 does not properly handle a (1) '\0' character or (2) invalid wildcard character in a domain name in …
-
Unscored —
Opera before 10.00 does not properly display all characters in Internationalized Domain Names (IDN) in the address bar,…
-
Unscored —
Opera before 10.00 trusts root X.509 certificates signed with the MD2 algorithm, which makes it easier for man-in-the-m…
-
Unscored —
Opera before 10.00 does not check all intermediate X.509 certificates for revocation, which makes it easier for remote …
-
Unscored —
src/network/ssl/qsslcertificate.cpp in Nokia Trolltech Qt 4.x does not properly handle a '\0' character in a domain nam…
-
Unscored —
Directory traversal vulnerability in a support component in the web interface in VMware Studio 2.0 public beta before b…
-
Unscored —
The tftp_request function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, allows remote attackers to caus…
-
Unscored —
Heap-based buffer overflow in the tftp_request function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, m…
-
Unscored —CVE-2009-3042 Public exploit
SQL injection vulnerability in machine.php in Open Computer and Software (OCS) Inventory NG 1.02.1 allows remote attack…
-
Unscored —CVE-2009-3040 Public exploit
Multiple SQL injection vulnerabilities in Open Computer and Software (OCS) Inventory NG 1.02 for Unix allow remote atta…
-
Unscored —CVE-2009-3041 Public exploit
SPIP 1.9 before 1.9.2i and 2.0.x through 2.0.8 does not use proper access control for (1) ecrire/exec/install.php and (…
-
Unscored —
IntraLearn Software IntraLearn 2.1, and possibly other versions before 4.2.3, allows remote attackers to obtain sensiti…
-
Unscored —CVE-2008-7136 Public exploit
toolbaru.dll in ICQ Toolbar (ICQToolbar) 2.3 allows remote attackers to cause a denial of service (toolbar crash) via a…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in IntraLearn Software IntraLearn 2.1, and possibly other versions …
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in Nuked-Klan 1.3 beta allows remote attackers to inject arbitrar…
-
Unscored —CVE-2008-7140 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in @lex Guestbook 4.0.5 and earlier allow remote attackers to injec…
-
Unscored —
The Manager in Eye-Fi 1.1.2 generates predictable snonce values based on the time of day, which allows remote attackers…
-
Unscored —
phpBB 2.0.23 includes the session ID in a request to modcp.php when the moderator or administrator closes a thread, whi…
-
Unscored —CVE-2008-7133 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in onlinetools.org EasyImageCatalogue 1.3.1 allow remote attackers …
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in Live 5.x before 5.x-0.1, a module for Drupal, allows remote attacker…