Archive
October 2009
Vulnerabilities first published in this month (UTC), newest first.
137 results · Clear filters · Feed
-
Unscored —CVE-2009-3662 Public exploit
FileCopa FTP Server 5.01 allows remote attackers to cause a denial of service (server hang) via a large number of craft…
-
Unscored —CVE-2009-3669 Public exploit
SQL injection vulnerability in the foobla Suggestions (com_foobla_suggestions) component 1.5.11 for Joomla! allows remo…
-
Unscored —CVE-2009-3665 Public exploit
Multiple SQL injection vulnerabilities in index.php in Nullam Blog 0.1.2 allow remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2009-3670 Public exploit
Stack-based buffer overflow in KSP Sound Player 2009 R2 and R2.1 allows remote attackers to execute arbitrary code via …
-
Unscored —CVE-2009-3664 Public exploit
Multiple directory traversal vulnerabilities in index.php in Nullam Blog 0.1.2 allow remote attackers to include or exe…
-
Unscored —
Format string vulnerability in the h_readrequest function in http.c in httpdx Web Server 1.4 allows remote attackers to…
-
Unscored —CVE-2009-3659 Public exploit
SQL injection vulnerability in file/stats.php in BS Counter 2.5.3 allows remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2009-3666 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Nullam Blog 0.1.2 allows remote attackers to inject arbitrary …
-
Unscored —CVE-2009-3647 Public exploit
Cross-site scripting (XSS) vulnerability in emaullinks.php in YABSoft Mega File Hosting Script (aka MFH or MFHS) 1.2 al…
-
Unscored —CVE-2009-3643 Public exploit
Dxmsoft XM Easy Personal FTP Server 5.8.0 allows remote attackers to cause a denial of service via a long argument to t…
-
Unscored —CVE-2009-3646 Public exploit
InterVations NaviCOPA Web Server 3.01 allows remote attackers to obtain the source code for a web page via an HTTP requ…
-
Unscored —CVE-2009-3644 Public exploit
SQL injection vulnerability in the Soundset (com_soundset) component 1.0 for Joomla! allows remote attackers to execute…
-
Unscored —CVE-2009-3645 Public exploit
SQL injection vulnerability in the JoomlaCache CB Resume Builder (com_cbresumebuilder) component for Joomla! allows rem…
-
Unscored —CVE-2009-3658 Public exploit
Use-after-free vulnerability in the Sb.SuperBuddy.1 ActiveX control (sb.dll) in America Online (AOL) 9.5.0.1 allows rem…
-
Unscored —CVE-2009-3642 Public exploit
Multiple SQL injection vulnerabilities in the Call Logging feature in FrontRange HEAT 8.01 allow remote attackers to ex…
-
Unscored —CVE-2009-3599 Public exploit
Cross-site scripting (XSS) vulnerability in single_winner1.php in HUBScript 1.0 allows remote attackers to inject arbit…
-
Unscored —CVE-2009-3592 Public exploit
Cross-site scripting (XSS) vulnerability in customer/home.php in Qualiteam X-Cart allows remote attackers to inject arb…
-
Unscored —CVE-2009-3593 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Freelancers 1.0 allow remote attackers to inject arbitrary web s…
-
Unscored —CVE-2009-3596 Public exploit
JoxTechnology Ajox Poll does not properly restrict access to admin/managepoll.php, which allows remote attackers to byp…
-
Unscored —CVE-2009-3597 Public exploit
Digitaldesign CMS 0.1 stores sensitive information under the web root with insufficient access control, which allows re…
-
Unscored —CVE-2009-3595 Public exploit
SQL injection vulnerability in results.php in VS PANEL 7.5.5 allows remote attackers to execute arbitrary SQL commands …
-
Unscored —CVE-2009-3601 Public exploit
Cross-site scripting (XSS) vulnerability in demo_page.php in Scriptsez Ultimate Poll allows remote attackers to inject …
-
Unscored —CVE-2009-3598 Public exploit
Cross-site scripting (XSS) vulnerability in survey_result.php in eCardMAX FormXP 2007 allows remote attackers to inject…
-
Unscored —
Dopewars 1.5.12 allows remote attackers to cause a denial of service (segmentation fault) via a REQUESTJET message with…
-
Unscored —CVE-2009-3590 Public exploit
SQL injection vulnerability in showcat.php in VS PANEL 7.3.6 allows remote attackers to execute arbitrary SQL commands …
-
Unscored —CVE-2009-3527 Public exploit
Race condition in the Pipe (IPC) close function in FreeBSD 6.3 and 6.4 allows local users to cause a denial of service …
-
Unscored —CVE-2009-3573 Public exploit
Multiple insecure method vulnerabilities in the PDIControl.PDI.1 ActiveX control (PDIControl.dll) 2.2.3160.0 in EMC Cap…
-
Unscored —CVE-2009-3574 Public exploit
Tuniac 090517c allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a lo…
-
Unscored —CVE-2009-3561 Public exploit
Directory traversal vulnerability in Xerver HTTP Server 4.32 allows remote attackers to read arbitrary files via a full…
-
Unscored —CVE-2009-3562 Public exploit
Cross-site scripting (XSS) vulnerability in Xerver HTTP Server 4.32 allows remote attackers to inject arbitrary web scr…
-
Unscored —CVE-2009-3525 Public exploit
The pyGrub boot loader in Xen 3.0.3, 3.3.0, and Xen-3.3.1 does not support the password option in grub.conf for para-vi…
-
Unscored —CVE-2009-3544 Public exploit
Xerver HTTP Server 4.32 allows remote attackers to obtain the source code for a web page via an HTTP request with the a…
-
Unscored —CVE-2009-3545 Public exploit
DataWizard Technologies FtpXQ FTP Server 3.0 allows remote authenticated users to cause a denial of service (crash) via…
-
Unscored —CVE-2009-3543 Public exploit
SQL injection vulnerability in _phenotype/admin/login.php in Phenotype CMS before 2.9 allows remote attackers to execut…
-
Unscored —CVE-2009-3536 Public exploit
Multiple stack-based buffer overflows in EpicDJSoftware EpicVJ 1.2.8.0 and 1.3.1.2 allow remote attackers to cause a de…
-
Unscored —CVE-2009-3542 Public exploit
Directory traversal vulnerability in ls.php in LittleSite (aka LS or LittleSite.php) 0.1 allows remote attackers to inc…
-
Unscored —CVE-2009-3531 Public exploit
SQL injection vulnerability in vnews.php in Universe CMS 1.0.6 allows remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2009-3539 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in YourFreeWorld Ultra Classifieds Pro allow remote attackers to in…
-
Unscored —CVE-2009-3534 Public exploit
Directory traversal vulnerability in index.php in LionWiki 3.0.3, when magic_quotes_gpc is disabled, allows remote atta…
-
Unscored —CVE-2009-3529 Public exploit
SQL injection vulnerability in index.php in RadScripts RadBids Gold 4 allows remote attackers to execute arbitrary SQL …