Archive
November 2009
Vulnerabilities first published in this month (UTC), newest first.
97 results · Clear filters · Feed
-
Unscored —CVE-2009-4114 Public exploit
kl1.sys in Kaspersky Anti-Virus 2010 9.0.0.463, and possibly other versions before 9.0.0.736, does not properly validat…
-
Unscored —CVE-2009-4115 Public exploit
Multiple static code injection vulnerabilities in the Categories module in CutePHP CuteNews 1.4.6 allow remote authenti…
-
Unscored —
Cacti 0.8.7e and earlier allows remote authenticated administrators to gain privileges by modifying the "Data Input Met…
-
Unscored —
mysqld in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41 does not (1) properly handle errors during execution of cer…
-
Unscored —CVE-2009-4096 Public exploit
RADIO istek scripti 2.5 stores sensitive information under the web root with insufficient access control, which allows …
-
Unscored —CVE-2009-4107 Public exploit
Buffer overflow in Invisible Browsing 5.0.52 allows user-assisted remote attackers to execute arbitrary code via a craf…
-
Unscored —CVE-2009-4099 Public exploit
SQL injection vulnerability in the Google Calendar GCalendar (com_gcalendar) component 1.1.2, 2.1.4, and possibly earli…
-
Unscored —CVE-2009-4108 Public exploit
XM Easy Personal FTP Server 5.8.0 allows remote authenticated users to cause a denial of service (crash) by uploading o…
-
Unscored —
Unrestricted file upload vulnerability in banner-edit.php in OpenX adserver 2.8.1 and earlier allows remote authenticat…
-
Unscored —CVE-2009-4106 Public exploit
Unrestricted file upload vulnerability in admintools/editpage-2.php in Agoko CMS 0.4 and earlier allows remote attacker…
-
Unscored —CVE-2009-4105 Public exploit
TYPSoft FTP Server 1.10 allows remote authenticated users to cause a denial of service (crash) by sending an APPE (appe…
-
Unscored —CVE-2009-4104 Public exploit
SQL injection vulnerability in Lyften Designs LyftenBloggie (com_lyftenbloggie) component 1.0.4 for Joomla! allows remo…
-
Unscored —CVE-2009-4097 Public exploit
Stack-based buffer overflow in the MplayInputFile function in Serenity Audio Player 3.2.3 and earlier allows remote att…
-
Unscored —CVE-2009-4091 Public exploit
comments.php in Simplog 0.9.3.2, and possibly earlier, does not properly restrict access, which allows remote attackers…
-
Unscored —CVE-2009-4094 Public exploit
PHP remote file inclusion vulnerability in class/php/d4m_ajax_pagenav.php in the D4J eZine (com_ezine) component 2.1 fo…
-
Unscored —CVE-2009-4093 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in comments.php in Simplog 0.9.3.2, and possibly earlier, allow rem…
-
Unscored —CVE-2009-4082 Public exploit
PHP remote file inclusion vulnerability in forums/Forum_Include/index.php in Outreach Project Tool (OPT) 1.2.7 and earl…
-
Unscored —CVE-2009-4085 Public exploit
PHP remote file inclusion vulnerability in assets/plugins/mp3_id/mp3_id.php in PHP Traverser 0.8.0 allows remote attack…
-
Unscored —CVE-2009-4092 Public exploit
Cross-site request forgery (CSRF) vulnerability in user.php in Simplog 0.9.3.2, and possibly earlier, allows remote att…
-
Unscored —CVE-2009-4088 Public exploit
Multiple directory traversal vulnerabilities in telepark.wiki 2.4.23 and earlier allow remote attackers to read arbitra…
-
Unscored —CVE-2009-4089 Public exploit
telepark.wiki 2.4.23 and earlier allows remote attackers to bypass authorization and (1) delete arbitrary pages via a m…
-
Unscored —CVE-2009-4086 Public exploit
CRLF injection vulnerability in Xerver HTTP Server 4.31 and 4.32 allows remote attackers to inject arbitrary HTTP heade…
-
Unscored —CVE-2009-4032 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.7e allow remote attackers to inject arbitrary web scri…
-
Unscored —
The proc_open function in ext/standard/proc_open.c in PHP before 5.2.11 and 5.3.x before 5.3.1 does not enforce the (1)…
-
Unscored —
Buffer overflow in the RunCmd method in the Altiris eXpress NS Console Utilities ActiveX control in AeXNSConsoleUtiliti…
-
Unscored —
Directory traversal vulnerability in src/http/modules/ngx_http_dav_module.c in nginx (aka Engine X) before 0.7.63, and …
-
Unscored —CVE-2009-3578 Public exploit
Autodesk Maya 8.0, 8.5, 2008, 2009, and 2010 and Alias Wavefront Maya 6.5 and 7.0 allow remote attackers to execute arb…
-
Unscored —CVE-2009-3577 Public exploit
Autodesk 3D Studio Max (3DSMax) 6 through 9 and 2008 through 2010 allows remote attackers to execute arbitrary code via…
-
Unscored —CVE-2009-3576 Public exploit
Autodesk Softimage 7.x and Softimage XSI 6.x allow remote attackers to execute arbitrary JavaScript code via a scene pa…
-
Unscored —CVE-2009-4059 Public exploit
SQL injection vulnerability in the JoomClip (com_joomclip) component for Joomla! allows remote attackers to execute arb…
-
Unscored —CVE-2009-4056 Public exploit
Directory traversal vulnerability in admin/popup.php in Betsy CMS 3.5 allows remote attackers to include and execute ar…
-
Unscored —CVE-2009-4060 Public exploit
SQL injection vulnerability in includes/content/viewProd.inc.php in CubeCart before 4.3.7 remote attackers to execute a…
-
Unscored —CVE-2009-4057 Public exploit
SQL injection vulnerability in the inertialFATE iF Portfolio Nexus (com_if_nexus) component 1.1 for Joomla! allows remo…
-
Unscored —CVE-2009-4058 Public exploit
SQL injection vulnerability in allauctions.php in Telebid Auction Script allows remote attackers to execute arbitrary S…
-
Unscored —
PHP before 5.2.12 and 5.3.x before 5.3.1 does not restrict the number of temporary files created when handling a multip…
-
Unscored —
HP Operations Manager 8.10 on Windows contains a "hidden account" in the XML file that specifies Tomcat users, which al…
-
Unscored —CVE-2009-4049 Public exploit
Heap-based buffer overflow in aswRdr.sys (aka the TDI RDR driver) in avast! Home and Professional 4.8.1356.0 allows loc…
-
Unscored —CVE-2009-4048 Public exploit
Dxmsoft XM Easy Personal FTP Server 5.8.0 allows remote authenticated users to cause a denial of service (daemon outage…
-
Unscored —CVE-2009-4051 Public exploit
Home FTP Server 1.10.1.139 allows remote attackers to cause a denial of service (daemon outage) via multiple invalid SI…
-
Unscored —CVE-2009-4047 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in PHD Help Desk 1.43 allow remote attackers to inject arbitrary we…