Archive
November 2009
Vulnerabilities first published in this month (UTC), newest first.
308 results · Feed
-
Unscored —CVE-2009-4058 Public exploit
SQL injection vulnerability in allauctions.php in Telebid Auction Script allows remote attackers to execute arbitrary S…
-
Unscored —
PHP before 5.2.12 and 5.3.x before 5.3.1 does not restrict the number of temporary files created when handling a multip…
-
Unscored —
HP Operations Manager 8.10 on Windows contains a "hidden account" in the XML file that specifies Tomcat users, which al…
-
Unscored —CVE-2009-4049 Public exploit
Heap-based buffer overflow in aswRdr.sys (aka the TDI RDR driver) in avast! Home and Professional 4.8.1356.0 allows loc…
-
Unscored —CVE-2009-4048 Public exploit
Dxmsoft XM Easy Personal FTP Server 5.8.0 allows remote authenticated users to cause a denial of service (daemon outage…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the JSF Widget Library Runtime in IBM Rational Application Devel…
-
Unscored —CVE-2009-4051 Public exploit
Home FTP Server 1.10.1.139 allows remote attackers to cause a denial of service (daemon outage) via multiple invalid SI…
-
Unscored —CVE-2009-4047 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in PHD Help Desk 1.43 allow remote attackers to inject arbitrary we…
-
Unscored —CVE-2009-4050 Public exploit
Directory traversal vulnerability in get_file.php in phpMyBackupPro 2.1 allows remote attackers to read arbitrary files…
-
Unscored —CVE-2009-4053 Public exploit
Multiple directory traversal vulnerabilities in Home FTP Server 1.10.1.139 allow remote authenticated users to (1) crea…
-
Unscored —
The tempnam function in ext/standard/file.c in PHP before 5.2.12 and 5.3.x before 5.3.1 allows context-dependent attack…
-
Unscored —
The posix_mkfifo function in ext/posix/posix.c in PHP before 5.2.12 and 5.3.x before 5.3.1 allows context-dependent att…
-
Unscored —
main/streams/plain_wrapper.c in PHP 5.3.x before 5.3.1 does not recognize the safe_mode_include_dir directive, which al…
-
Unscored —
Race condition in Philippe Jounin Tftpd32 before 2.80 allows remote attackers to cause a denial of service (daemon cras…
-
Unscored —
tftpd in Philippe Jounin Tftpd32 2.74 and earlier, as used in Wyse Simple Imager (WSI) and other products, allows remot…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the AddToAny module 5.x before 5.x-2.4 and 6.x before 6.x-2.4 for Drupal al…
-
Unscored —
Cross-site scripting (XSS) vulnerability in phpMyFAQ before 2.0.17 and 2.5.x before 2.5.2, when used with Internet Expl…
-
Unscored —
Multiple SQL injection vulnerabilities in FrontAccounting (FA) before 2.1.7 allow remote attackers to execute arbitrary…
-
Unscored —
UseBB 1.0.9 before 1.0.10 allows remote attackers to cause a denial of service (infinite loop) via crafted BBCode tags.
-
Unscored —CVE-2009-4039 Public exploit
Cross-site scripting (XSS) vulnerability in Piwigo before 2.0.6 allows remote attackers to inject arbitrary web script …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in NCH Software Axon Virtual PBX 2.10 and 2.11 allow remote attacke…
-
Unscored —
The Web Services module 6.x for Drupal does not perform the expected access control, which allows remote attackers to m…
-
Unscored —
Multiple SQL injection vulnerabilities in FrontAccounting (FA) 2.2.x before 2.2 RC allow remote attackers to execute ar…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the RootCandy theme 6.x before 6.x-1.5 for Drupal allows remote attackers t…
-
Unscored —
Multiple SQL injection vulnerabilities in FrontAccounting (FA) before 2.1.7, and 2.2.x before 2.2 RC, allow remote atta…
-
Unscored —
Heap-based buffer overflow in the exif_entry_fix function (aka the tag fixup routine) in libexif/exif-entry.c in libexi…
-
Unscored —
Template.pm in Bugzilla 3.3.2 through 3.4.3 and 3.5 through 3.5.1 allows remote attackers to discover the alias of a pr…
-
Unscored —
Unspecified vulnerability on the HP Color LaserJet M3530 Multifunction Printer with firmware 05.058.4 and the Color Las…
-
Unscored —
Array index error in the gdth_read_event function in drivers/scsi/gdth.c in the Linux kernel before 2.6.32-rc8 allows l…
-
Unscored —
Stack-based buffer overflow in the TEA decoding algorithm in RhinoSoft Serv-U FTP server 7.0.0.1, 9.0.0.5, and other ve…
-
Unscored —
The collect_rx_frame function in drivers/isdn/hisax/hfc_usb.c in the Linux kernel before 2.6.32-rc7 allows attackers to…
-
Unscored —
Buffer overflow in the kvm_vcpu_ioctl_x86_setup_mce function in arch/x86/kvm/x86.c in the KVM subsystem in the Linux ke…
-
Unscored —
Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in schedu…
-
Unscored —
The nsGIFDecoder2::GifWrite function in decoders/gif/nsGIFDecoder2.cpp in libpr0n in Mozilla Firefox before 3.5.5 allow…
-
Unscored —CVE-2009-3840 Public exploit
The embedded database engine service (aka ovdbrun.exe) in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allow…
-
Unscored —
Integer overflow in the read_channel_data function in plug-ins/file-psd/psd-load.c in GIMP 2.6.7 might allow remote att…
-
Unscored —
Multiple buffer overflows in a certain ActiveX control in ActiveDom.ocx in HP OpenView Network Node Manager (OV NNM) 7.…
-
Unscored —CVE-2009-3966 Public exploit
Arcade Trade Script 1.0 allows remote attackers to bypass authentication and gain administrative access by setting the …
-
Unscored —CVE-2009-3971 Public exploit
SQL injection vulnerability in the jTips (com_jtips) component 1.0.7 and 1.0.9 for Joomla! allows remote attackers to e…
-
Unscored —CVE-2009-3972 Public exploit
SQL injection vulnerability in the Q-Proje Siirler Bileseni (com_siirler) component 1.2 RC for Joomla! allows remote at…