Archive
September 2009
Vulnerabilities first published in this month (UTC), newest first.
574 results · Feed
-
Unscored —
Microsoft Office 2008 for Mac, when running on Macintosh systems that restrict Office access to administrators, does no…
-
Unscored —
Unspecified vulnerability in the Horde API in Horde 3.1 before 3.1.6 and 3.2 before 3.2 before 3.2-RC2; Turba H3 2.1 be…
-
Unscored —
Unspecified vulnerability in Prototype JavaScript framework (prototypejs) before 1.6.0.2 allows attackers to make "cros…
-
Unscored —
Horde Kronolith H3 2.1 before 2.1.7 and 2.2 before 2.2-RC2; Nag H3 2.1 before 2.1.4 and 2.2 before 2.2-RC2; Mnemo H3 2.…
-
Unscored —
Multiple buffer overflows in the dtt_load function in loaders/dtt_load.c Extended Module Player (XMP) 2.5.1 and earlier…
-
Unscored —
Extended Module Player (XMP) 2.5.1 and earlier allow remote attackers to execute arbitrary code via an OXM file with a …
-
Unscored —CVE-2009-3182 Public exploit
Unrestricted file upload vulnerability in admin/editor/filemanager/browser.html in Anantasoft Gazelle CMS 1.0 allows re…
-
Unscored —
Stack-based buffer overflow in AIMP2 Audio Converter 2.53 (build 330) and earlier allows remote attackers to cause a de…
-
Unscored —CVE-2009-3181 Public exploit
Directory traversal vulnerability in Anantasoft Gazelle CMS 1.0 allows remote attackers to overwrite arbitrary files vi…
-
Unscored —
Unspecified vulnerability in mm.exe in Symantec Altiris Deployment Solution 6.9 allows remote attackers to cause a deni…
-
Unscored —CVE-2009-3175 Public exploit
Multiple SQL injection vulnerabilities in Model Agency Manager PRO (formerly Modeling Agency Content Management Script)…
-
Unscored —CVE-2009-3171 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Anantasoft Gazelle CMS 1.0 and earlier allow remote attackers to…
-
Unscored —CVE-2009-3173 Public exploit
Unrestricted file upload vulnerability in admin/add_album.php in The Rat CMS Alpha 2 allows remote attackers to execute…
-
Unscored —
Unspecified vulnerability in Kaspersky Online Scanner 7.0 has unknown impact and attack vectors, as demonstrated by a c…
-
Unscored —CVE-2009-3180 Public exploit
Anantasoft Gazelle CMS 1.0 allows remote attackers to conduct a password reset for other users via a modified user para…
-
Unscored —
Unspecified vulnerability in Hitachi Groupmax Groupware Server 07-00 through 07-50-/A, Groupmax Server Set 03-00 throug…
-
Unscored —
Buffer overflow in the ActiveX control in Novell iPrint Client 4.38 allows remote attackers to cause a denial of servic…
-
Unscored —
Multiple unspecified vulnerabilities in Hitachi JP1/File Transmission Server/FTP before 09-00 allow remote attackers to…
-
High 7.2
Mevin Productions Basic PHP Events Lister 2.0 does not properly restrict access to (1) admin/reset.php and (2) admin/us…
-
Unscored —CVE-2009-3174 Public exploit
PHP remote file inclusion vulnerability in fonctions_racine.php in OBOphiX 2.7.0 and earlier allows remote attackers to…
-
Unscored —
Multiple unspecified vulnerabilities in Symantec Altiris Deployment Solution 6.9 might allow remote attackers to execut…
-
Unscored —CVE-2009-3167 Public exploit
Directory traversal vulnerability in index.php in Anantasoft Gazelle CMS 1.0, when magic_quotes_gpc is disabled, allows…
-
Unscored —
Buffer overflow in Alias Manager in Apple Mac OS X 10.4.11 and 10.5.8 allows attackers to execute arbitrary code or cau…
-
Unscored —
MOStlyCE before 2.4, as used in Mambo 4.6.3 and earlier, allows remote attackers to obtain sensitive information via ce…
-
Unscored —CVE-2008-7210 Public exploit
directory.php in AJchat 0.10 allows remote attackers to bypass input validation and conduct SQL injection attacks via a…
-
Unscored —CVE-2008-7213 Public exploit
Cross-site scripting (XSS) vulnerability in mambots/editors/mostlyce/jscripts/tiny_mce/filemanager/connectors/php/conne…
-
Unscored —
RivetTracker before 1.0 stores passwords in cleartext in config.php, which allows local users to discover passwords by …
-
Unscored —CVE-2008-7209 Public exploit
Unrestricted file upload vulnerability in the add2 action in a_upload.php in OneCMS 2.4, and possibly earlier, allows r…
-
Unscored —CVE-2008-7208 Public exploit
Multiple SQL injection vulnerabilities in OneCMS 2.4, and possibly earlier, allow remote attackers to execute arbitrary…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in administrator/index2.php in MOStlyCE before 2.4, as used in Mambo 4.…
-
Unscored —
Unspecified vulnerability in Electronic Logbook (ELOG) before 2.7.2 has unknown impact and attack vectors when the "log…
-
Unscored —CVE-2008-7211 Public exploit
CreativeLabs es1371mp.sys 5.1.3612.0 WDM audio driver, as used in Ensoniq PCI 1371 sound cards and when running on Wind…
-
Unscored —
Unspecified vulnerability in the product view functionality in VirtueMart 1.0.13a and earlier allows remote attackers t…
-
Unscored —CVE-2008-7216 Public exploit
Peter's Math Anti-Spam Spinoff plugin for WordPress generates audio CAPTCHA clips by concatenating static audio files w…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in VirtueMart 1.0.13a and earlier allows remote attackers to hijack the…
-
Unscored —CVE-2008-7203 Public exploit
Valve Software Half-Life Counter-Strike 1.6 allows remote attackers to cause a denial of service (crash) via multiple c…
-
Unscored —
The Image Manager in MOStlyCE before 2.4, as used in Mambo 4.6.3 and earlier, allows remote attackers to rename arbitra…
-
Unscored —
Unspecified vulnerability in the IPv6 networking stack in Sun Solaris 10, and OpenSolaris snv_01 through snv_82 and snv…
-
Unscored —
The silc_asn1_encoder function in lib/silcasn1/silcasn1_encode.c in Secure Internet Live Conferencing (SILC) Toolkit be…
-
Unscored —
The silc_http_server_parse function in lib/silchttp/silchttpserver.c in the internal HTTP server in silcd in Secure Int…