27 November 2009

21 results · Feed

• Unscored —
  CVE-2009-4091 Public exploit

  comments.php in Simplog 0.9.3.2, and possibly earlier, does not properly restrict access, which allows remote attackers…

  Nov 27, 2009
• Unscored —
  CVE-2009-4090

  Unrestricted file upload vulnerability in ajax/addComment.php in telepark.wiki 2.4.23 and earlier script allows remote …

  Nov 27, 2009
• Unscored —
  CVE-2009-4094 Public exploit

  PHP remote file inclusion vulnerability in class/php/d4m_ajax_pagenav.php in the D4J eZine (com_ezine) component 2.1 fo…

  Nov 27, 2009
• Unscored —
  CVE-2009-4093 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in comments.php in Simplog 0.9.3.2, and possibly earlier, allow rem…

  Nov 27, 2009
• Unscored —
  CVE-2009-4082 Public exploit

  PHP remote file inclusion vulnerability in forums/Forum_Include/index.php in Outreach Project Tool (OPT) 1.2.7 and earl…

  Nov 27, 2009
• Unscored —
  CVE-2009-4083

  Multiple cross-site scripting (XSS) vulnerabilities in e107 0.7.16 and earlier allow remote attackers to inject arbitra…

  Nov 27, 2009
• Unscored —
  CVE-2009-4085 Public exploit

  PHP remote file inclusion vulnerability in assets/plugins/mp3_id/mp3_id.php in PHP Traverser 0.8.0 allows remote attack…

  Nov 27, 2009
• Unscored —
  CVE-2009-4092 Public exploit

  Cross-site request forgery (CSRF) vulnerability in user.php in Simplog 0.9.3.2, and possibly earlier, allows remote att…

  Nov 27, 2009
• Unscored —
  CVE-2009-4084

  SQL injection vulnerability in the search feature in e107 0.7.16 and earlier allows remote attackers to execute arbitra…

  Nov 27, 2009
• Unscored —
  CVE-2009-4095

  myPhile 1.2.1 allows remote attackers to bypass authentication via an empty password. NOTE: some of these details are o…

  Nov 27, 2009
• Unscored —
  CVE-2009-4087

  Cross-site scripting (XSS) vulnerability in index.php in telepark.wiki 2.4.23 and earlier allows remote attackers to in…

  Nov 27, 2009
• Unscored —
  CVE-2009-4088 Public exploit

  Multiple directory traversal vulnerabilities in telepark.wiki 2.4.23 and earlier allow remote attackers to read arbitra…

  Nov 27, 2009
• Unscored —
  CVE-2009-4089 Public exploit

  telepark.wiki 2.4.23 and earlier allows remote attackers to bypass authorization and (1) delete arbitrary pages via a m…

  Nov 27, 2009
• Unscored —
  CVE-2009-4086 Public exploit

  CRLF injection vulnerability in Xerver HTTP Server 4.31 and 4.32 allows remote attackers to inject arbitrary HTTP heade…

  Nov 27, 2009
• Unscored —
  CVE-2009-4080

  Multiple unspecified vulnerabilities in ldap_cachemgr (aka the LDAP client configuration cache daemon) in Sun Solaris 9…

  Nov 27, 2009
• Unscored —
  CVE-2009-4081

  Untrusted search path vulnerability in dstat before r3199 allows local users to gain privileges via a Trojan horse Pyth…

  Nov 27, 2009
• Unscored —
  CVE-2009-3894

  Multiple untrusted search path vulnerabilities in dstat before 0.7.0 allow local users to gain privileges via a Trojan …

  dstat Debian
  Nov 27, 2009
• Unscored —
  CVE-2009-3736

  ltdl.c in libltdl in GNU Libtool 1.5.x, and 2.2.6 before 2.2.6b, as used in Ham Radio Control Libraries, Q, and possibl…

  imagemagick clamav graphicsmagick libextractor Debian
  Nov 27, 2009
• Unscored —
  CVE-2009-4032 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.7e allow remote attackers to inject arbitrary web scri…

  cacti Debian
  Nov 27, 2009
• Unscored —
  CVE-2009-4031

  The do_insn_fetch function in arch/x86/kvm/emulate.c in the x86 emulator in the KVM subsystem in the Linux kernel befor…

  Nov 27, 2009
• Unscored —
  CVE-2009-4018 Public exploit EPSS 11%

  The proc_open function in ext/standard/proc_open.c in PHP before 5.2.11 and 5.3.x before 5.3.1 does not enforce the (1)…

  Nov 27, 2009