Archive
November 2009
Vulnerabilities first published in this month (UTC), newest first.
308 results · Feed
-
Unscored —
Static code injection vulnerability in the Categories module in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b all…
-
Unscored —
Multiple directory traversal vulnerabilities in CutePHP CuteNews 1.4.6, when magic_quotes_gpc is disabled, allow remote…
-
Unscored —CVE-2009-4114 Public exploit
kl1.sys in Kaspersky Anti-Virus 2010 9.0.0.463, and possibly other versions before 9.0.0.736, does not properly validat…
-
Unscored —CVE-2009-4115 Public exploit
Multiple static code injection vulnerabilities in the Categories module in CutePHP CuteNews 1.4.6 allow remote authenti…
-
Unscored —
Cacti 0.8.7e and earlier allows remote authenticated administrators to gain privileges by modifying the "Data Input Met…
-
Unscored —
sql/sql_table.cc in MySQL 5.0.x through 5.0.88, 5.1.x through 5.1.41, and 6.0 before 6.0.9-alpha, when the data home di…
-
Unscored —
MySQL 5.1.x before 5.1.41 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM tab…
-
Unscored —
mysqld in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41 does not (1) properly handle errors during execution of cer…
-
Unscored —
The vio_verify_callback function in viosslfactories.c in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41, when OpenSS…
-
Unscored —
Argument injection vulnerability in Mail/sendmail.php in the Mail package 1.1.14, 1.2.0b2, and possibly other versions …
-
Unscored —
Argument injection vulnerability in the traceroute function in Traceroute.php in the Net_Traceroute package before 0.21…
-
Unscored —
Argument injection vulnerability in the sendmail implementation of the Mail::Send method (Mail/sendmail.php) in the Mai…
-
Unscored —
Argument injection vulnerability in the ping function in Ping.php in the Net_Ping package before 2.4.5 for PEAR allows …
-
Unscored —CVE-2009-4096 Public exploit
RADIO istek scripti 2.5 stores sensitive information under the web root with insufficient access control, which allows …
-
Unscored —
The install wizard in DotNetNuke 4.0 through 5.1.4 does not prevent anonymous users from accessing functionality relate…
-
Unscored —
infoRSS 1.1.4.2 and earlier extension for Firefox performs certain operations with chrome privileges, which allows remo…
-
Unscored —CVE-2009-4107 Public exploit
Buffer overflow in Invisible Browsing 5.0.52 allows user-assisted remote attackers to execute arbitrary code via a craf…
-
Unscored —CVE-2009-4099 Public exploit
SQL injection vulnerability in the Google Calendar GCalendar (com_gcalendar) component 1.1.2, 2.1.4, and possibly earli…
-
Unscored —CVE-2009-4108 Public exploit
XM Easy Personal FTP Server 5.8.0 allows remote authenticated users to cause a denial of service (crash) by uploading o…
-
Unscored —
Sage 1.4.3 and earlier extension for Firefox performs certain operations with chrome privileges, which allows remote at…
-
Unscored —
Unrestricted file upload vulnerability in banner-edit.php in OpenX adserver 2.8.1 and earlier allows remote authenticat…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the search functionality in DotNetNuke 4.8 through 5.1.4 allows remote atta…
-
Unscored —
Yoono extension before 6.1.1 for Firefox performs certain operations with chrome privileges, which allows user-assisted…
-
Unscored —CVE-2009-4106 Public exploit
Unrestricted file upload vulnerability in admintools/editpage-2.php in Agoko CMS 0.4 and earlier allows remote attacker…
-
Unscored —CVE-2009-4105 Public exploit
TYPSoft FTP Server 1.10 allows remote authenticated users to cause a denial of service (crash) by sending an APPE (appe…
-
Unscored —CVE-2009-4104 Public exploit
SQL injection vulnerability in Lyften Designs LyftenBloggie (com_lyftenbloggie) component 1.0.4 for Joomla! allows remo…
-
Unscored —CVE-2009-4097 Public exploit
Stack-based buffer overflow in the MplayInputFile function in Serenity Audio Player 3.2.3 and earlier allows remote att…
-
Unscored —
Buffer overflow in Robo-FTP 3.6.17, and possibly other versions, allows remote FTP servers to cause a denial of service…
-
Unscored —CVE-2009-4091 Public exploit
comments.php in Simplog 0.9.3.2, and possibly earlier, does not properly restrict access, which allows remote attackers…
-
Unscored —
Unrestricted file upload vulnerability in ajax/addComment.php in telepark.wiki 2.4.23 and earlier script allows remote …
-
Unscored —CVE-2009-4094 Public exploit
PHP remote file inclusion vulnerability in class/php/d4m_ajax_pagenav.php in the D4J eZine (com_ezine) component 2.1 fo…
-
Unscored —CVE-2009-4093 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in comments.php in Simplog 0.9.3.2, and possibly earlier, allow rem…
-
Unscored —CVE-2009-4082 Public exploit
PHP remote file inclusion vulnerability in forums/Forum_Include/index.php in Outreach Project Tool (OPT) 1.2.7 and earl…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in e107 0.7.16 and earlier allow remote attackers to inject arbitra…
-
Unscored —CVE-2009-4085 Public exploit
PHP remote file inclusion vulnerability in assets/plugins/mp3_id/mp3_id.php in PHP Traverser 0.8.0 allows remote attack…
-
Unscored —CVE-2009-4092 Public exploit
Cross-site request forgery (CSRF) vulnerability in user.php in Simplog 0.9.3.2, and possibly earlier, allows remote att…
-
Unscored —
SQL injection vulnerability in the search feature in e107 0.7.16 and earlier allows remote attackers to execute arbitra…
-
Unscored —
myPhile 1.2.1 allows remote attackers to bypass authentication via an empty password. NOTE: some of these details are o…
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in telepark.wiki 2.4.23 and earlier allows remote attackers to in…
-
Unscored —CVE-2009-4088 Public exploit
Multiple directory traversal vulnerabilities in telepark.wiki 2.4.23 and earlier allow remote attackers to read arbitra…