Archive
October 2009
Vulnerabilities first published in this month (UTC), newest first.
352 results · Feed
-
Unscored —
Cross-site scripting (XSS) vulnerability in Service Links 6.x-1.0, a module for Drupal, allows remote authenticated use…
-
Unscored —CVE-2009-3642 Public exploit
Multiple SQL injection vulnerabilities in the Call Logging feature in FrontRange HEAT 8.01 allow remote attackers to ex…
-
Unscored —CVE-2009-3599 Public exploit
Cross-site scripting (XSS) vulnerability in single_winner1.php in HUBScript 1.0 allows remote attackers to inject arbit…
-
Unscored —CVE-2009-3592 Public exploit
Cross-site scripting (XSS) vulnerability in customer/home.php in Qualiteam X-Cart allows remote attackers to inject arb…
-
Unscored —CVE-2009-3593 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Freelancers 1.0 allow remote attackers to inject arbitrary web s…
-
Unscored —CVE-2009-3596 Public exploit
JoxTechnology Ajox Poll does not properly restrict access to admin/managepoll.php, which allows remote attackers to byp…
-
Unscored —CVE-2009-3597 Public exploit
Digitaldesign CMS 0.1 stores sensitive information under the web root with insufficient access control, which allows re…
-
Unscored —CVE-2009-3595 Public exploit
SQL injection vulnerability in results.php in VS PANEL 7.5.5 allows remote attackers to execute arbitrary SQL commands …
-
Unscored —
Cross-site scripting (XSS) vulnerability in bpost.php in BLOB Blog System before 1.2 allows remote attackers to inject …
-
Unscored —CVE-2009-3601 Public exploit
Cross-site scripting (XSS) vulnerability in demo_page.php in Scriptsez Ultimate Poll allows remote attackers to inject …
-
Unscored —
HUBScript 1.0 allows remote attackers to obtain configuration information via a direct request to manage/phpinfo.php, w…
-
Unscored —CVE-2009-3598 Public exploit
Cross-site scripting (XSS) vulnerability in survey_result.php in eCardMAX FormXP 2007 allows remote attackers to inject…
-
Unscored —
Dopewars 1.5.12 allows remote attackers to cause a denial of service (segmentation fault) via a REQUESTJET message with…
-
Unscored —CVE-2009-3590 Public exploit
SQL injection vulnerability in showcat.php in VS PANEL 7.3.6 allows remote attackers to execute arbitrary SQL commands …
-
Unscored —
incron 0.5.5 does not initialize supplementary groups when running a process from a user's incrontabs, which causes the…
-
Unscored —
smbd in Samba 3.0 before 3.0.37, 3.2 before 3.2.15, 3.3 before 3.3.8, and 3.4 before 3.4.2 allows remote authenticated …
-
Unscored —
mount.cifs in Samba 3.0 before 3.0.37, 3.2 before 3.2.15, 3.3 before 3.3.8 and 3.4 before 3.4.2, when mount.cifs is ins…
-
Unscored —
Buffer overflow in DHTRoutingTableDeserializer.cc in aria2 0.15.3, 1.2.0, and other versions allows remote attackers to…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the CookieDump.java sample application in Mort Bay Jetty 6.1.19 and 6.1.20 …
-
Unscored —CVE-2009-3527 Public exploit
Race condition in the Pipe (IPC) close function in FreeBSD 6.3 and 6.4 allows local users to cause a denial of service …
-
Unscored —CVE-2009-3573 Public exploit
Multiple insecure method vulnerabilities in the PDIControl.PDI.1 ActiveX control (PDIControl.dll) 2.2.3160.0 in EMC Cap…
-
Unscored —
OpenBSD 4.4, 4.5, and 4.6, when running on an i386 kernel, does not properly handle XMM exceptions, which allows local …
-
Unscored —
Unspecified vulnerability in OpenOffice.org (OOo) has unknown impact and client-side attack vector, as demonstrated by …
-
Unscored —
Cross-site scripting (XSS) vulnerability in modules/tickets/functions_ticketsui.php in Kayako SupportSuite and eSupport…
-
Unscored —
Stack-based buffer overflow in OpenOffice.org (OOo) allows remote attackers to execute arbitrary code via unspecified v…
-
Unscored —
Unspecified vulnerability in OpenOffice.org (OOo) has unspecified impact and remote attack vectors, as demonstrated by …
-
Unscored —
Comment RSS 5.x before 5.x-2.2 and 6.x before 6.x-2.2, a module for Drupal, does not properly enforce permissions when …
-
Unscored —CVE-2009-3574 Public exploit
Tuniac 090517c allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a lo…
-
Unscored —
puppetmasterd in puppet 0.24.6 does not reset supplementary groups when it switches to a different user, which might al…
-
Unscored —CVE-2009-3561 Public exploit
Directory traversal vulnerability in Xerver HTTP Server 4.32 allows remote attackers to read arbitrary files via a full…
-
Unscored —CVE-2009-3562 Public exploit
Cross-site scripting (XSS) vulnerability in Xerver HTTP Server 4.32 allows remote attackers to inject arbitrary web scr…
-
Unscored —CVE-2009-3525 Public exploit
The pyGrub boot loader in Xen 3.0.3, 3.3.0, and Xen-3.3.1 does not support the password option in grub.conf for para-vi…
-
Unscored —CVE-2009-3544 Public exploit
Xerver HTTP Server 4.32 allows remote attackers to obtain the source code for a web page via an HTTP request with the a…
-
Unscored —CVE-2009-3545 Public exploit
DataWizard Technologies FtpXQ FTP Server 3.0 allows remote authenticated users to cause a denial of service (crash) via…
-
Unscored —
Unspecified vulnerability in bootpd in HP HP-UX B.11.11, B.11.23, and B.11.31 allows remote attackers to cause a denial…
-
Unscored —
SQL injection vulnerability in report.php in Meeting Room Booking System (MRBS) before 1.4.2 allows remote attackers to…
-
Unscored —CVE-2009-3543 Public exploit
SQL injection vulnerability in _phenotype/admin/login.php in Phenotype CMS before 2.9 allows remote attackers to execut…
-
Unscored —
Cross-site scripting (XSS) vulnerability in listads.php in YourFreeWorld Ultra Classifieds Pro allows remote attackers …
-
Unscored —CVE-2009-3536 Public exploit
Multiple stack-based buffer overflows in EpicDJSoftware EpicVJ 1.2.8.0 and 1.3.1.2 allow remote attackers to cause a de…
-
Unscored —CVE-2009-3542 Public exploit
Directory traversal vulnerability in ls.php in LittleSite (aka LS or LittleSite.php) 0.1 allows remote attackers to inc…