Archive
November 2009
Vulnerabilities first published in this month (UTC), newest first.
97 results · Clear filters · Feed
-
Unscored —CVE-2009-4050 Public exploit
Directory traversal vulnerability in get_file.php in phpMyBackupPro 2.1 allows remote attackers to read arbitrary files…
-
Unscored —CVE-2009-4053 Public exploit
Multiple directory traversal vulnerabilities in Home FTP Server 1.10.1.139 allow remote authenticated users to (1) crea…
-
Unscored —CVE-2009-4039 Public exploit
Cross-site scripting (XSS) vulnerability in Piwigo before 2.0.6 allows remote attackers to inject arbitrary web script …
-
Unscored —
Stack-based buffer overflow in the TEA decoding algorithm in RhinoSoft Serv-U FTP server 7.0.0.1, 9.0.0.5, and other ve…
-
Unscored —CVE-2009-3840 Public exploit
The embedded database engine service (aka ovdbrun.exe) in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allow…
-
Unscored —CVE-2009-3966 Public exploit
Arcade Trade Script 1.0 allows remote attackers to bypass authentication and gain administrative access by setting the …
-
Unscored —CVE-2009-3971 Public exploit
SQL injection vulnerability in the jTips (com_jtips) component 1.0.7 and 1.0.9 for Joomla! allows remote attackers to e…
-
Unscored —CVE-2009-3972 Public exploit
SQL injection vulnerability in the Q-Proje Siirler Bileseni (com_siirler) component 1.2 RC for Joomla! allows remote at…
-
Unscored —
Buffer overflow in Labtam ProFTP 2.9 allows remote FTP servers to cause a denial of service (application crash) or exec…
-
Unscored —CVE-2009-3975 Public exploit
SQL injection vulnerability in index.php in Moa Gallery 1.1.0 and 1.2.0 allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2009-3968 Public exploit
Multiple SQL injection vulnerabilities in ITechBids 8.0 allow remote attackers to execute arbitrary SQL commands via th…
-
Unscored —CVE-2009-3965 Public exploit
SQL injection vulnerability in rating.php in New 5 star Rating 1.0 allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2009-3970 Public exploit
SQL injection vulnerability in index.php in PHP Dir Submit (aka WebsiteSubmitter or Submitter Script) allows remote aut…
-
Unscored —CVE-2009-3967 Public exploit
SQL injection vulnerability in browse.php in Ed Charkow SuperCharged Linking allows remote attackers to execute arbitra…
-
Unscored —CVE-2009-3969 Public exploit
Stack-based buffer overflow in Faslo Player 7.0 allows remote attackers to cause a denial of service (application crash…
-
Unscored —CVE-2009-3973 Public exploit
SQL injection vulnerability in index.php in Turnkey Arcade Script allows remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2009-3964 Public exploit
SQL injection vulnerability in the NinjaMonials (com_ninjacentral) component 1.1.0 for Joomla! allows remote attackers …
-
Unscored —CVE-2009-3962 Public exploit
The management interface on the 2wire Gateway 1700HG, 1701HG, 1800HW, 2071, 2700HG, and 2701HG-T with software before 5…
-
Unscored —CVE-2009-3890 Public exploit
Unrestricted file upload vulnerability in the wp_check_filetype function in wp-includes/functions.php in WordPress befo…
-
Unscored —CVE-2009-3949 Public exploit
cp/profile.php in VivaPrograms Infinity 2.0.5 and earlier does not require administrative authentication for the donewa…
-
Unscored —CVE-2009-3947 Public exploit
Buffer overflow in the FTP service on the Tandberg MXP F7.0 allows remote attackers to cause a denial of service (proce…
-
Unscored —CVE-2009-3948 Public exploit
JetAudio 7.5.3 COWON Media Center allows remote attackers to cause a denial of service (memory consumption and applicat…
-
Unscored —CVE-2009-3888 Public exploit
The do_mmap_pgoff function in mm/nommu.c in the Linux kernel before 2.6.31.6, when the CPU lacks a memory management un…
-
Unscored —CVE-2009-3565 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in intruvert/jsp/module/Login.jsp in McAfee IntruShield Network Sec…
-
Unscored —CVE-2009-3566 Public exploit
McAfee IntruShield Network Security Manager (NSM) before 5.1.11.8.1 does not include the HTTPOnly flag in the Set-Cooki…
-
Unscored —
The Windows installer for Apache Tomcat 6.0.0 through 6.0.20, 5.5.0 through 5.5.28, and possibly earlier versions uses …
-
High 7.8
Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Con…
KEV Mar 3, 2022 -
Unscored —
win32k.sys in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not correctly parse fo…
-
Unscored —CVE-2009-2820 Public exploit
The web interface in CUPS before 1.4.2, as used on Apple Mac OS X before 10.6.2 and other platforms, does not properly …
-
Unscored —
The nfs4_proc_lock function in fs/nfs/nfs4proc.c in the NFSv4 client in the Linux kernel before 2.6.31-rc4 allows remot…
-
Unscored —CVE-2009-3913 Public exploit
SQL injection vulnerability in summary.php in Xerox Fiery Webtools allows remote attackers to execute arbitrary SQL com…
-
Critical 9.8
Apache Tomcat affected by vulnerability in TLS and SSL protocol
The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Serv…
-
Unscored —CVE-2009-3911 Public exploit
Cross-site scripting (XSS) vulnerability in settings.php in TFTgallery 0.13 allows remote attackers to inject arbitrary…
-
Unscored —CVE-2009-3912 Public exploit
Directory traversal vulnerability in index.php in TFTgallery 0.13 allows remote attackers to read arbitrary files via a…
-
Unscored —CVE-2009-3904 Public exploit
classes/session/cc_admin_session.php in CubeCart 4.3.4 does not properly restrict administrative access permissions, wh…
-
Unscored —CVE-2009-3850 Public exploit
Blender 2.34, 2.35a, 2.40, and 2.49b allows remote attackers to execute arbitrary code via a .blend file that contains …
-
Unscored —CVE-2009-3901 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in e-Courier CMS allow remote attackers to inject arbitrary web scr…
-
Unscored —CVE-2009-3902 Public exploit
Directory traversal vulnerability in Cherokee Web Server 0.5.4 and earlier for Windows allows remote attackers to read …
-
Unscored —
Stack-based buffer overflow in the login form in the management web server in HP Power Manager allows remote attackers …
-
Unscored —
Stack-based buffer overflow in the setDiffICM function in the Abstract Window Toolkit (AWT) in Java Runtime Environment…