Archive
October 2009
Vulnerabilities first published in this month (UTC), newest first.
137 results · Clear filters · Feed
-
Unscored —
The download functionality in Team Services in Microsoft Office SharePoint Server 2007 12.0.0.4518 and 12.0.0.6219 allo…
-
Unscored —CVE-2009-3828 Public exploit
The web interface for Everfocus EDR1600 DVR allows remote attackers to bypass authentication and access live cams via c…
-
Unscored —
layout/base/nsCSSFrameConstructor.cpp in the browser engine in Mozilla Firefox 3.0.x before 3.0.15 does not properly ha…
-
Unscored —
Heap-based buffer overflow in the GIF image parser in Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonk…
-
Unscored —
Snort before 2.8.5.1, when the -v option is enabled, allows remote attackers to cause a denial of service (application …
-
Unscored —CVE-2009-3825 Public exploit
Multiple directory traversal vulnerabilities in GenCMS 2006 allow remote attackers to include and execute arbitrary loc…
-
Unscored —CVE-2009-3824 Public exploit
Directory traversal vulnerability in include/processor.php in Greenwood PHP Content Manager 0.3.2 allows remote attacke…
-
Unscored —CVE-2009-3823 Public exploit
Directory traversal vulnerability in myhtml.php in Mobilelib GOLD 3.0, when magic_quotes_gpc is enabled, allows remote …
-
Unscored —CVE-2009-3817 Public exploit
PHP remote file inclusion vulnerability in doc/releasenote.php in the BookLibrary (com_booklibrary) component 1.0 for J…
-
Unscored —CVE-2009-3822 Public exploit
PHP remote file inclusion vulnerability in Fiji Web Design Ajax Chat (com_ajaxchat) component 1.0 for Joomla! allows re…
-
Unscored —CVE-2009-3806 Public exploit
SQL injection vulnerability in feedback_js.php in DedeCMS 5.1 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2009-3802 Public exploit
Amiro.CMS 5.4.0.0 and earlier allows remote attackers to obtain sensitive information via an invalid loginname ("%%%") …
-
Unscored —CVE-2009-3809 Public exploit
Acoustica MP3 Audio Mixer 1.0 and possibly 2.471 allows remote attackers to cause a denial of service (crash) via a lon…
-
Unscored —CVE-2009-3810 Public exploit
Heap-based buffer overflow in Acoustica MP3 Audio Mixer 2.471 allows remote attackers to cause a denial of service (cra…
-
Unscored —CVE-2009-3808 Public exploit
MixSense DJ Studio 1.0.0.1 allows remote attackers to cause a denial of service (application crash) and possibly execut…
-
Unscored —CVE-2009-3804 Public exploit
Multiple SQL injection vulnerabilities in modules/forum/post.php in RunCMS 2M1 allow remote authenticated users to exec…
-
Unscored —CVE-2009-3811 Public exploit
Stack-based buffer overflow in Music Tag Editor 1.61 build 212 allows remote attackers to execute arbitrary code via an…
-
Unscored —CVE-2009-3807 Public exploit
Stack-based buffer overflow in MixVibes 7.043 Pro allows remote attackers to cause a denial of service (crash) via a lo…
-
Unscored —CVE-2009-3803 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Amiro.CMS 5.4.0.0 and earlier allow remote attackers to inject a…
-
Unscored —CVE-2009-3805 Public exploit
gpg2.exe in Gpg4win 2.0.1, as used in KDE Kleopatra 2.0.11, allows remote attackers to cause a denial of service (appli…
-
Unscored —CVE-2009-3812 Public exploit
Heap-based buffer overflow in OtsAV DJ trial version 1.85.64.0, Radio trial version 1.85.64.0, TV trial version 1.85.64…
-
Unscored —CVE-2009-3787 Public exploit
files.php in Vivvo CMS 4.1.5.1 allows remote attackers to conduct directory traversal attacks and read arbitrary files …
-
Unscored —CVE-2009-3789 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in OpenDocMan 1.2.5 allow remote attackers to inject arbitrary web …
-
Unscored —CVE-2009-3625 Public exploit
Directory traversal vulnerability in www/index.php in Sahana 0.6.2.2 allows remote attackers to include and execute arb…
-
Unscored —
Unspecified vulnerability in the Network Authentication component in Oracle Database 10.1.0.5 and 10.2.0.4 allows remot…
-
Unscored —CVE-2009-3752 Public exploit
SQL injection vulnerability in home.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands via the …
-
Unscored —CVE-2009-3747 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in TBmnetCMS 1.0 allows remote attackers to inject arbitrary web …
-
Unscored —CVE-2009-3749 Public exploit
The Web Administrator service (STEMWADM.EXE) in Websense Personal Email Manager 7.1 before Hotfix 4 and Email Security …
-
Unscored —CVE-2009-3758 Public exploit
SQL injection vulnerability in login.php in sample code in the XenServer Resource Kit in Citrix XenCenterWeb allows rem…
-
Unscored —CVE-2009-3753 Public exploit
Unrestricted file upload vulnerability in Opial 1.0 allows remote attackers to execute arbitrary code by uploading a fi…
-
Unscored —CVE-2009-3748 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in the Web Administrator in Websense Personal Email Manager 7.1 bef…
-
Unscored —CVE-2009-3759 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in sample code in the XenServer Resource Kit in Citrix XenCe…
-
Unscored —CVE-2009-3755 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in phpBMS 0.96 allow remote attackers to inject arbitrary web scrip…
-
Unscored —CVE-2009-3750 Public exploit
SQL injection vulnerability in read.php in ToyLog 0.1 allows remote attackers to execute arbitrary SQL commands via the…
-
Unscored —CVE-2009-3754 Public exploit
Multiple SQL injection vulnerabilities in phpBMS 0.96 allow remote attackers to execute arbitrary SQL commands via the …
-
Unscored —CVE-2009-3760 Public exploit
Static code injection vulnerability in config/writeconfig.php in the sample code in the XenServer Resource Kit in Citri…
-
Unscored —CVE-2009-3756 Public exploit
phpBMS 0.96 allows remote attackers to obtain sensitive information via a direct request to (1) footer.php, (2) header.…
-
Unscored —CVE-2009-3757 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in sample code in the XenServer Resource Kit in Citrix XenCenterWeb…
-
Unscored —CVE-2009-3751 Public exploit
Cross-site scripting (XSS) vulnerability in home.php in Opial 1.0 allows remote attackers to inject arbitrary web scrip…
-
Unscored —CVE-2009-1479 Public exploit
Directory traversal vulnerability in client/desktop/default.htm in Boxalino before 09.05.25-0421 allows remote attacker…