Archive
4 December 2009
Vulnerabilities first published on this day (UTC), newest first.
21 results · Feed
-
Unscored —
The U.S. Defense Information Systems Agency (DISA) Security Readiness Review (SRR) script for the Solaris x86 platform …
-
Unscored —
Stack-based buffer overflow in the hfs subsystem in the Linux kernel 2.6.32 allows remote attackers to have an unspecif…
-
Unscored —CVE-2009-3560 EPSS 24%
The big2_toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used in the XML-Twig module for Perl, allows co…
-
Unscored —CVE-2009-4203 Public exploit
Multiple SQL injection vulnerabilities in admin/aclass/admin_func.php in Arab Portal 2.2 allow remote attackers to exec…
-
Unscored —
Multiple stack-based buffer overflows in Mp3 Tag Assistant Professional 2.92 build 300 allow remote attackers to execut…
-
Unscored —CVE-2009-4205 Public exploit
Directory traversal vulnerability in admin.php in Flashlight Free Edition allows remote attackers to include and execut…
-
Unscored —CVE-2009-4209 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in admin/index.php in moziloCMS 1.11.1 allow remote attackers to in…
-
Unscored —CVE-2009-4200 Public exploit
SQL injection vulnerability in the Seminar (com_seminar) component 1.28 for Joomla! allows remote attackers to execute …
-
Unscored —CVE-2009-4199 Public exploit
Multiple SQL injection vulnerabilities in the Mambo Resident (aka Mos Res or com_mosres) component 1.0f for Mambo and J…
-
Unscored —
Directory traversal vulnerability in the Omilen Photo Gallery (com_omphotogallery) component Beta 0.5 for Joomla! allow…
-
Unscored —CVE-2009-4198 Public exploit
SQL injection vulnerability in my_orders.php in MyMiniBill allows remote authenticated users to execute arbitrary SQL c…
-
Unscored —CVE-2009-4208 Public exploit
SQL injection vulnerability in the os_news module in Open-school (OS) 1.0 allows remote attackers to execute arbitrary …
-
Unscored —CVE-2009-4206 Public exploit
SQL injection vulnerability in admin.link.modify.php in Million Dollar Text Links 1.0 and earlier allows remote attacke…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Webform module 5.x before 5.x-2.7 and 6.x before 6.x-2.7, a module for …
-
Unscored —CVE-2009-4148 Public exploit
DAZ Studio 2.3.3.161, 2.3.3.163, and 3.0.1.135 allows remote attackers to execute arbitrary JavaScript code via a (1) .…
-
Unscored —CVE-2009-4204 Public exploit
SQL injection vulnerability in read.php in Flashlight Free Edition allows remote attackers to execute arbitrary SQL com…
-
Unscored —
GForge 4.5.14, 4.7 rc2, and 4.8.2 allows local users to overwrite arbitrary files via a symlink attack on authorized_ke…
-
Unscored —
Buffer overflow in Adobe Illustrator CS4 14.0.0, CS3 13.0.3 and earlier, and CS3 13.0.0 allows remote attackers to exec…
-
Unscored —CVE-2009-4196 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in multiple scripts in Forms/ in Huawei MT882 V100R002B020 ARG-T ru…
-
Unscored —CVE-2009-4197 Public exploit
rpwizPppoe.htm in Huawei MT882 V100R002B020 ARG-T running firmware 3.7.9.98 contains a form that does not disable the a…
-
Unscored —
Clientless SSL VPN products break web browser domain-based security models
Multiple clientless SSL VPN products that run in web browsers, including Stonesoft StoneGate; Cisco ASA; SonicWALL E-Class SSL VPN and SonicWALL SSL VPN; SafeNet SecureWire Access Gateway; Juniper Networks Secure Access; Nortel CallPilot; Citrix Access Gatewa…