Archive
October 2009
Vulnerabilities first published in this month (UTC), newest first.
352 results · Feed
-
Unscored —CVE-2009-3748 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in the Web Administrator in Websense Personal Email Manager 7.1 bef…
-
Unscored —CVE-2009-3759 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in sample code in the XenServer Resource Kit in Citrix XenCe…
-
Unscored —CVE-2009-3755 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in phpBMS 0.96 allow remote attackers to inject arbitrary web scrip…
-
Unscored —CVE-2009-3750 Public exploit
SQL injection vulnerability in read.php in ToyLog 0.1 allows remote attackers to execute arbitrary SQL commands via the…
-
Unscored —CVE-2009-3754 Public exploit
Multiple SQL injection vulnerabilities in phpBMS 0.96 allow remote attackers to execute arbitrary SQL commands via the …
-
Unscored —CVE-2009-3760 Public exploit
Static code injection vulnerability in config/writeconfig.php in the sample code in the XenServer Resource Kit in Citri…
-
Unscored —CVE-2009-3756 Public exploit
phpBMS 0.96 allows remote attackers to obtain sensitive information via a direct request to (1) footer.php, (2) header.…
-
Unscored —CVE-2009-3757 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in sample code in the XenServer Resource Kit in Citrix XenCenterWeb…
-
Unscored —CVE-2009-3751 Public exploit
Cross-site scripting (XSS) vulnerability in home.php in Opial 1.0 allows remote attackers to inject arbitrary web scrip…
-
Unscored —
XScreenSaver in Sun Solaris 10, when the accessibility feature is enabled, allows physically proximate attackers to obt…
-
High —
PyGreSQL Might Be Vulnerable to Encoding-Based SQL Injection
The pygresql module 3.8.1 and 4.0 for Python does not properly support the PQescapeStringConn function, which might allow remote attackers to leverage escaping issues involving multibyte character encodings.
-
Unscored —
The mysql-ocaml bindings 1.0.4 for MySQL do not properly support the mysql_real_escape_string function, which might all…
-
Unscored —
SystemTap 1.0, when the --unprivileged option is used, does not properly restrict certain data sizes, which allows loca…
-
Unscored —
The postgresql-ocaml bindings 1.5.4, 1.7.0, and 1.12.1 for PostgreSQL libpq do not properly support the PQescapeStringC…
-
Unscored —CVE-2008-3685 EPSS 13%
Directory traversal vulnerability in aws_tmxn.exe in the Admin Agent service in the server in EMC Documentum Applicatio…
-
Unscored —
Heap-based buffer overflow in aws_tmxn.exe in the Admin Agent service in the server in EMC Documentum ApplicationXtende…
-
Unscored —CVE-2009-1479 Public exploit
Directory traversal vulnerability in client/desktop/default.htm in Boxalino before 09.05.25-0421 allows remote attacker…
-
Unscored —
The ATI Rage 128 (aka r128) driver in the Linux kernel before 2.6.31-git11 does not properly verify Concurrent Command …
-
Unscored —CVE-2009-3744 Public exploit
rep_serv.exe 6.3.1.3 in the server in EMC RepliStor allows remote attackers to cause a denial of service via a crafted …
-
Unscored —CVE-2009-3621 Public exploit
net/unix/af_unix.c in the Linux kernel 2.6.31.4 and earlier allows local users to cause a denial of service (system han…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the help pages in IBM Rational AppScan Enterprise Edition 5.5.0.2 allows re…
-
Unscored —
Integer overflow in the ImageStream::ImageStream function in Stream.cc in Xpdf before 3.02pl4 and Poppler before 0.12.1…
-
Unscored —
The Splash::drawImage function in Splash.cc in Xpdf 2.x and 3.x before 3.02pl4, and Poppler 0.x, as used in GPdf and kd…
-
Unscored —CVE-2009-3608 EPSS 10%
Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.…
-
Unscored —
Integer overflow in the SplashBitmap::SplashBitmap function in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1 might …
-
Unscored —
Integer overflow in the PSOutputDev::doImageL1Sep function in Xpdf before 3.02pl4, and Poppler 0.x, as used in kdegraph…
-
Unscored —
Integer overflow in the create_surface_from_thumbnail_data function in glib/poppler-page.cc in Poppler 0.x allows remot…
-
Unscored —CVE-2009-3730 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in the ReqWeb Help feature (aka the Web Client Help system) in IBM …
-
Unscored —
The OSCAR protocol plugin in libpurple in Pidgin before 2.6.3 and Adium before 1.3.7 allows remote attackers to cause a…
-
Unscored —
Multiple integer overflows in tiffread.c in CamlImages 2.2 might allow remote attackers to execute arbitrary code via T…
-
Unscored —
Format string vulnerability in the AbstractCommand::onAbort function in src/AbstractCommand.cc in aria2 before 1.6.2, w…
-
Unscored —
Integer signedness error in the ax25_setsockopt function in net/ax25/af_ax25.c in the ax25 subsystem in the Linux kerne…
-
Unscored —
arch/x86/ia32/ia32entry.S in the Linux kernel before 2.6.31.4 on the x86_64 platform does not clear certain kernel regi…
-
Unscored —
Unspecified vulnerability in Adobe Acrobat 9.x before 9.2 allows attackers to bypass intended file-extension restrictio…
-
Unscored —
Adobe Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 allows attackers to cause a denial of se…
-
Unscored —CVE-2009-3458 EPSS 10%
Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not properly validate input, which m…
-
Unscored —
Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 on Unix, when Debug mode is enabled, al…
-
Unscored —
Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allow attackers to cause a denial of se…
-
Unscored —
Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 do not properly perform XMP-X…
-
Unscored —
Array index error in Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 might al…