Archive
16 October 2009
Vulnerabilities first published on this day (UTC), newest first.
23 results · Feed
-
Unscored —CVE-2009-3704 Public exploit
ZoIPer 2.22, and possibly other versions before 2.24 Library 5324, allows remote attackers to cause a denial of service…
-
Unscored —
Integer overflow in the vmx86 kernel extension in VMware Fusion before 2.0.6 build 196839 allows host OS users to cause…
-
Unscored —CVE-2009-3709 Public exploit
Stack-based buffer overflow in the Meta Content Optimizer in Konae Technologies Alleycode HTML Editor 2.21 allows user-…
-
Unscored —
VMware Authentication Daemon 1.0 in vmware-authd.exe in the VMware Authorization Service in VMware Workstation 7.0 befo…
-
Unscored —CVE-2009-3715 Public exploit
Multiple SQL injection vulnerabilities in scr_login.php in MCshoutbox 1.1, when magic_quotes_gpc is disabled, allow rem…
-
Unscored —
Unspecified vulnerability in the ZFS filesystem in Sun Solaris 10, and OpenSolaris snv_100 through snv_117, allows loca…
-
Unscored —CVE-2009-3714 Public exploit
Cross-site scripting (XSS) vulnerability in admin_login.php in MCshoutbox 1.1 allows remote attackers to inject arbitra…
-
Unscored —CVE-2009-3705 Public exploit
PHP remote file inclusion vulnerability in debugger.php in Achievo before 1.4.0 allows remote attackers to execute arbi…
-
Unscored —CVE-2009-3713 Public exploit
SQL injection vulnerability in fichero.php in MorcegoCMS 1.7.6 and earlier allows remote attackers to execute arbitrary…
-
Medium —
phpMyAdmin Cross-site Scripting In MySQL Table Name
Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.11.x before 2.11.9.6 and 3.x before 3.2.2.1 allows remote attackers to inject arbitrary web script or HTML via a crafted name for a MySQL table.
-
Unscored —CVE-2009-3717 Public exploit
Heap-based buffer overflow in LucVil PatPlayer 3.9 allows remote attackers to cause a denial of service (crash) or exec…
-
Unscored —CVE-2009-3712 Public exploit
Multiple SQL injection vulnerabilities in Ebay Clone 2009 allow remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2009-3719 Public exploit
Cross-site scripting (XSS) vulnerability in comment.asp in Battle Blog 1.25 and 1.30 build 2 allows remote attackers to…
-
Unscored —CVE-2009-3718 Public exploit
SQL injection vulnerability in admin/authenticate.asp in Battle Blog 1.25 and 1.30 build 2 allows remote attackers to e…
-
Unscored —CVE-2009-3710 Public exploit
RioRey RIOS 4.6.6 and 4.7.0 uses an undocumented, hard-coded username (dbadmin) and password (sq!us3r) for an SSH tunne…
-
Unscored —CVE-2009-3708 Public exploit
Stack-based buffer overflow in the Meta Content Optimizer in Konae Technologies Alleycode HTML Editor 2.21 allows user-…
-
Unscored —CVE-2009-3716 Public exploit
Unrestricted file upload vulnerability in admin.php in MCshoutbox 1.1 allows remote authenticated users to execute arbi…
-
Unscored —
Stack-based buffer overflow in the h_handlepeer function in http.cpp in httpdx 1.4, and possibly 1.4.3, allows remote a…
-
Unscored —CVE-2009-3281 Public exploit
The vmx86 kernel extension in VMware Fusion before 2.0.6 build 196839 does not use correct file permissions, which allo…
-
Unscored —
SQL injection vulnerability in the PDF schema generator functionality in phpMyAdmin 2.11.x before 2.11.9.6 and 3.x befo…
-
Unscored —CVE-2009-2733 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Achievo before 1.4.0 allow remote attackers to inject arbitrary …
-
Unscored —
The TimesTenD process in Cisco Unified Presence 1.x, 6.x before 6.0(6), and 7.x before 7.0(4) allows remote attackers t…
-
Unscored —CVE-2009-2734 Public exploit
SQL injection vulnerability in the get_employee function in classweekreport.inc in Achievo before 1.4.0 allows remote a…