Archive
22 October 2009
Vulnerabilities first published on this day (UTC), newest first.
62 results · Feed
-
Unscored —CVE-2009-3753 Public exploit
Unrestricted file upload vulnerability in Opial 1.0 allows remote attackers to execute arbitrary code by uploading a fi…
-
Unscored —CVE-2009-3748 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in the Web Administrator in Websense Personal Email Manager 7.1 bef…
-
Unscored —CVE-2009-3759 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in sample code in the XenServer Resource Kit in Citrix XenCe…
-
Unscored —CVE-2009-3755 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in phpBMS 0.96 allow remote attackers to inject arbitrary web scrip…
-
Unscored —CVE-2009-3750 Public exploit
SQL injection vulnerability in read.php in ToyLog 0.1 allows remote attackers to execute arbitrary SQL commands via the…
-
Unscored —CVE-2009-3754 Public exploit
Multiple SQL injection vulnerabilities in phpBMS 0.96 allow remote attackers to execute arbitrary SQL commands via the …
-
Unscored —CVE-2009-3760 Public exploit
Static code injection vulnerability in config/writeconfig.php in the sample code in the XenServer Resource Kit in Citri…
-
Unscored —CVE-2009-3756 Public exploit
phpBMS 0.96 allows remote attackers to obtain sensitive information via a direct request to (1) footer.php, (2) header.…
-
Unscored —CVE-2009-3757 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in sample code in the XenServer Resource Kit in Citrix XenCenterWeb…
-
Unscored —CVE-2009-3751 Public exploit
Cross-site scripting (XSS) vulnerability in home.php in Opial 1.0 allows remote attackers to inject arbitrary web scrip…
-
Unscored —
XScreenSaver in Sun Solaris 10, when the accessibility feature is enabled, allows physically proximate attackers to obt…
-
High —
PyGreSQL Might Be Vulnerable to Encoding-Based SQL Injection
The pygresql module 3.8.1 and 4.0 for Python does not properly support the PQescapeStringConn function, which might allow remote attackers to leverage escaping issues involving multibyte character encodings.
-
Unscored —
The mysql-ocaml bindings 1.0.4 for MySQL do not properly support the mysql_real_escape_string function, which might all…
-
Unscored —
SystemTap 1.0, when the --unprivileged option is used, does not properly restrict certain data sizes, which allows loca…
-
Unscored —
The postgresql-ocaml bindings 1.5.4, 1.7.0, and 1.12.1 for PostgreSQL libpq do not properly support the PQescapeStringC…
-
Unscored —CVE-2008-3685 EPSS 13%
Directory traversal vulnerability in aws_tmxn.exe in the Admin Agent service in the server in EMC Documentum Applicatio…
-
Unscored —
Heap-based buffer overflow in aws_tmxn.exe in the Admin Agent service in the server in EMC Documentum ApplicationXtende…
-
Unscored —CVE-2009-1479 Public exploit
Directory traversal vulnerability in client/desktop/default.htm in Boxalino before 09.05.25-0421 allows remote attacker…
-
Unscored —
The ATI Rage 128 (aka r128) driver in the Linux kernel before 2.6.31-git11 does not properly verify Concurrent Command …
-
Unscored —CVE-2009-3744 Public exploit
rep_serv.exe 6.3.1.3 in the server in EMC RepliStor allows remote attackers to cause a denial of service via a crafted …
-
Unscored —CVE-2009-3621 Public exploit
net/unix/af_unix.c in the Linux kernel 2.6.31.4 and earlier allows local users to cause a denial of service (system han…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the help pages in IBM Rational AppScan Enterprise Edition 5.5.0.2 allows re…