Archive
October 2009
Vulnerabilities first published in this month (UTC), newest first.
352 results · Feed
-
Medium —
freeCap CAPTCHA extension for TYPO3 has vulnerability in the session handling feature
Unspecified vulnerability in the session handling feature in freeCap CAPTCHA (sr_freecap) extension 1.2.0 and earlier for TYPO3 has unknown impact and attack vectors.
-
Unscored —CVE-2009-3822 Public exploit
PHP remote file inclusion vulnerability in Fiji Web Design Ajax Chat (com_ajaxchat) component 1.0 for Joomla! allows re…
-
Unscored —CVE-2009-3806 Public exploit
SQL injection vulnerability in feedback_js.php in DedeCMS 5.1 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —
SQL injection vulnerability in index.php in OpenDocMan 1.2.5 allows remote attackers to execute arbitrary SQL commands …
-
Unscored —CVE-2009-3802 Public exploit
Amiro.CMS 5.4.0.0 and earlier allows remote attackers to obtain sensitive information via an invalid loginname ("%%%") …
-
Unscored —CVE-2009-3809 Public exploit
Acoustica MP3 Audio Mixer 1.0 and possibly 2.471 allows remote attackers to cause a denial of service (crash) via a lon…
-
Unscored —CVE-2009-3810 Public exploit
Heap-based buffer overflow in Acoustica MP3 Audio Mixer 2.471 allows remote attackers to cause a denial of service (cra…
-
Unscored —CVE-2009-3808 Public exploit
MixSense DJ Studio 1.0.0.1 allows remote attackers to cause a denial of service (application crash) and possibly execut…
-
Unscored —CVE-2009-3804 Public exploit
Multiple SQL injection vulnerabilities in modules/forum/post.php in RunCMS 2M1 allow remote authenticated users to exec…
-
Unscored —CVE-2009-3811 Public exploit
Stack-based buffer overflow in Music Tag Editor 1.61 build 212 allows remote attackers to execute arbitrary code via an…
-
Unscored —
Multiple SQL injection vulnerabilities in RunCMS 2M1 allow remote authenticated users to execute arbitrary SQL commands…
-
Unscored —CVE-2009-3807 Public exploit
Stack-based buffer overflow in MixVibes 7.043 Pro allows remote attackers to cause a denial of service (crash) via a lo…
-
Unscored —
Static code injection vulnerability in RunCMS 2M1 allows remote authenticated administrators to execute arbitrary PHP c…
-
Unscored —CVE-2009-3803 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Amiro.CMS 5.4.0.0 and earlier allow remote attackers to inject a…
-
Unscored —CVE-2009-3805 Public exploit
gpg2.exe in Gpg4win 2.0.1, as used in KDE Kleopatra 2.0.11, allows remote attackers to cause a denial of service (appli…
-
Unscored —CVE-2009-3812 Public exploit
Heap-based buffer overflow in OtsAV DJ trial version 1.85.64.0, Radio trial version 1.85.64.0, TV trial version 1.85.64…
-
Unscored —
RunCMS 2M1, when running with certain error_reporting levels, allows remote attackers to obtain sensitive information v…
-
Unscored —
Unspecified vulnerability in Userpoints 6.x before 6.x-1.1, a module for Drupal, allows remote authenticated users with…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in Simplenews Statistics 6.x before 6.x-2.0, a module for Dr…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Abuse 5.x before 5.x-2.1 and 6.x before 6.x-1.1-alpha1, a module for Drupal…
-
Unscored —CVE-2009-3787 Public exploit
files.php in Vivvo CMS 4.1.5.1 allows remote attackers to conduct directory traversal attacks and read arbitrary files …
-
Unscored —
Heap-based buffer overflow in FormMax (formerly AcroForm) evaluation 3.5 allows remote attackers to cause a denial of s…
-
Unscored —
SQL injection vulnerability in Moodle Course List 6.x before 6.x-1.2, a module for Drupal, allows remote attackers to e…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Simplenews Statistics 6.x before 6.x-2.0, a module for Drupal, allows remot…
-
Unscored —CVE-2009-3789 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in OpenDocMan 1.2.5 allow remote attackers to inject arbitrary web …
-
Unscored —
Cross-site scripting (XSS) vulnerability in Organic Groups (OG) Vocabulary 5.x before 5.x-1.1 and 6.x before 6.x-1.1, a…
-
Unscored —
Open redirect vulnerability in Simplenews Statistics 6.x before 6.x-2.0, a module for Drupal, allows remote attackers t…
-
Unscored —
The filefield_file_download function in FileField 6.x-3.1, a module for Drupal, does not properly check node-access per…
-
Unscored —
SQL injection vulnerability in index.php in OpenDocMan 1.2.5 allows remote attackers to execute arbitrary SQL commands …
-
Unscored —
Cross-site scripting (XSS) vulnerability in vCard 5.x before 5.x-1.4 and 6.x before 6.x-1.3, a module for Drupal, allow…
-
Unscored —CVE-2009-3625 Public exploit
Directory traversal vulnerability in www/index.php in Sahana 0.6.2.2 allows remote attackers to include and execute arb…
-
Unscored —
common/snapshots.py in Back In Time (aka backintime) 0.9.26 changes certain permissions to 0777 before deleting the fil…
-
Unscored —
mutt_ssl.c in mutt 1.5.19 and 1.5.20, when OpenSSL is used, does not properly handle a '\0' character in a domain name …
-
Unscored —
mutt_ssl.c in mutt 1.5.16 and other versions before 1.5.19, when OpenSSL is used, does not verify the domain name in th…
-
Unscored —
libraries/libldap/tls_o.c in OpenLDAP 2.2 and 2.4, and possibly other versions, when OpenSSL is used, does not properly…
-
Unscored —
iscsi_discovery in open-iscsi in SUSE openSUSE 10.3 through 11.1 and SUSE Linux Enterprise (SLE) 10 SP2 and 11, and oth…
-
Unscored —
Algorithmic complexity vulnerability in wp-trackback.php in WordPress before 2.8.5 allows remote attackers to cause a d…
-
Unscored —
Multiple use-after-free vulnerabilities in vnc.c in the VNC server in QEMU 0.10.6 and earlier might allow guest OS user…
-
Unscored —
Multiple heap-based buffer underflows in the readPostBody function in cgiutil.c in mapserv in MapServer 4.x through 4.1…
-
Unscored —
Unspecified vulnerability in the Application Express component in Oracle Database 3.0.1 allows remote authenticated use…