Archive
November 2009
Vulnerabilities first published in this month (UTC), newest first.
308 results · Feed
-
Unscored —
Buffer overflow in Labtam ProFTP 2.9 allows remote FTP servers to cause a denial of service (application crash) or exec…
-
Unscored —CVE-2009-3975 Public exploit
SQL injection vulnerability in index.php in Moa Gallery 1.1.0 and 1.2.0 allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2009-3968 Public exploit
Multiple SQL injection vulnerabilities in ITechBids 8.0 allow remote attackers to execute arbitrary SQL commands via th…
-
Unscored —
Multiple SQL injection vulnerabilities in Invision Power Board (IPB or IP.Board) 3.0.0, 3.0.1, and 3.0.2 allow remote a…
-
Unscored —CVE-2009-3965 Public exploit
SQL injection vulnerability in rating.php in New 5 star Rating 1.0 allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2009-3970 Public exploit
SQL injection vulnerability in index.php in PHP Dir Submit (aka WebsiteSubmitter or Submitter Script) allows remote aut…
-
Unscored —CVE-2009-3967 Public exploit
SQL injection vulnerability in browse.php in Ed Charkow SuperCharged Linking allows remote attackers to execute arbitra…
-
Unscored —CVE-2009-3969 Public exploit
Stack-based buffer overflow in Faslo Player 7.0 allows remote attackers to cause a denial of service (application crash…
-
Unscored —CVE-2009-3973 Public exploit
SQL injection vulnerability in index.php in Turnkey Arcade Script allows remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2009-3964 Public exploit
SQL injection vulnerability in the NinjaMonials (com_ninjacentral) component 1.1.0 for Joomla! allows remote attackers …
-
Unscored —
Cross-site scripting (XSS) vulnerability in wp-admin/press-this.php in WordPress before 2.8.6 allows remote authenticat…
-
Unscored —CVE-2009-3962 Public exploit
The management interface on the 2wire Gateway 1700HG, 1701HG, 1800HW, 2071, 2700HG, and 2701HG-T with software before 5…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Best Practical Solutions RT 3.6.x before 3.6.9, 3.8.x before 3.8.5, and oth…
-
Unscored —
SQL injection vulnerability in user.php in Super Serious Stats (aka superseriousstats) before 1.1.2p1 allows remote att…
-
Unscored —CVE-2009-3890 Public exploit
Unrestricted file upload vulnerability in the wp_check_filetype function in wp-includes/functions.php in WordPress befo…
-
Unscored —
Multiple unspecified vulnerabilities in XOOPS before 2.4.0 Final have unknown impact and attack vectors.
-
Unscored —
Unspecified vulnerability in HP Discovery & Dependency Mapping Inventory (DDMI) 2.5x, 7.5x, and 7.60 on Windows allows …
-
Unscored —
Joomla! before 1.5.15 allows remote attackers to read an extension's XML file, and thereby obtain the extension's versi…
-
Unscored —CVE-2009-3949 Public exploit
cp/profile.php in VivaPrograms Infinity 2.0.5 and earlier does not require administrative authentication for the donewa…
-
Unscored —
Unspecified vulnerability in the Front-End Editor in the com_content component in Joomla! before 1.5.15 allows remote a…
-
Unscored —CVE-2009-3947 Public exploit
Buffer overflow in the FTP service on the Tandberg MXP F7.0 allows remote attackers to cause a denial of service (proce…
-
Unscored —CVE-2009-3948 Public exploit
JetAudio 7.5.3 COWON Media Center allows remote attackers to cause a denial of service (memory consumption and applicat…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Bractus SunTrack allow remote attackers to inject arbitrary web …
-
Unscored —
Martin Lambers msmtp before 1.4.19, when OpenSSL is used, does not properly handle a '\0' character in a domain name in…
-
Unscored —CVE-2009-3888 Public exploit
The do_mmap_pgoff function in mm/nommu.c in the Linux kernel before 2.6.31.6, when the CPU lacks a memory management un…
-
Unscored —
The dbg_lvl file for the megaraid_sas driver in the Linux kernel before 2.6.27 has world-writable permissions, which al…
-
Unscored —
The poll_mode_io file for the megaraid_sas driver in the Linux kernel 2.6.31.6 and earlier has world-writable permissio…
-
Unscored —
Unspecified vulnerability in Guest Additions in Sun xVM VirtualBox 1.6.x and 2.0.x before 2.0.12, 2.1.x, and 2.2.x, and…
-
Unscored —
Martin Lambers mpop before 1.0.19, when OpenSSL is used, does not properly handle a '\0' character in a domain name in …
-
Unscored —CVE-2009-3943 EPSS 13%
Microsoft Internet Explorer 6 through 6.0.2900.2180 and 7 through 7.0.6000.16711 allows remote attackers to cause a den…
-
Unscored —
Research In Motion (RIM) BlackBerry Browser on the BlackBerry 8800 allows remote attackers to cause a denial of service…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the administrative console in the Security component in IBM WebSpher…
-
Unscored —
Unspecified vulnerability in Citrix Online Plug-in for Windows 11.0.x before 11.0.150 and 11.x before 11.2, Online Plug…
-
Unscored —
Memory leak in Solaris TCP sockets in Sun OpenSolaris snv_106 through snv_126 allows local users to cause a denial of s…
-
Unscored —
Buffer overflow in the ABWOutputDev::endWord function in poppler/ABWOutputDev.cc in Poppler (aka libpoppler) 0.10.6, 0.…
-
Unscored —
Integer overflow in the ReadImage function in plug-ins/file-bmp/bmp-read.c in GIMP 2.6.7 might allow remote attackers t…
-
Unscored —CVE-2009-3565 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in intruvert/jsp/module/Login.jsp in McAfee IntruShield Network Sec…
-
Unscored —
Multiple unspecified vulnerabilities in WebKit in Apple Safari before 4.0.4 on Windows allow remote FTP servers to exec…
-
Unscored —CVE-2009-3566 Public exploit
McAfee IntruShield Network Security Manager (NSM) before 5.1.11.8.1 does not include the HTTPOnly flag in the Set-Cooki…
-
Unscored —CVE-2009-3676 EPSS 35%
The SMB client in the kernel in Microsoft Windows Server 2008 R2 and Windows 7 allows remote SMB servers and man-in-the…