Archive
December 2009
Vulnerabilities first published in this month (UTC), newest first.
151 results · Clear filters · Feed
-
Unscored —CVE-2009-4131 Public exploit
The EXT4_IOC_MOVE_EXT (aka move extents) ioctl implementation in the ext4 filesystem in the Linux kernel before 2.6.32-…
-
Unscored —CVE-2009-4238 Public exploit
Multiple SQL injection vulnerabilities in TestLink before 1.8.5 allow remote authenticated users to execute arbitrary S…
-
Unscored —CVE-2009-4237 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in TestLink before 1.8.5 allow remote attackers to inject arbitrary…
-
Unscored —
Stack-based buffer overflow in ovalarm.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows rem…
-
Unscored —
Heap-based buffer overflow in OvWebHelp.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows re…
-
Unscored —
Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote at…
-
Unscored —CVE-2009-4263 Public exploit
SQL injection vulnerability in main_forum.php in PTCPay GeN3 forum 1.3 allows remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2009-4264 Public exploit
PHP remote file inclusion vulnerability in components/core/connect.php in AROUNDMe 1.1 and earlier, when register_globa…
-
Unscored —CVE-2009-4266 Public exploit
Cross-site scripting (XSS) vulnerability in search.php in YABSoft Advanced Image Hosting (AIH) Script 2.2, and possibly…
-
Unscored —
Stack-based buffer overflow in Ideal Administration 2009 9.7.1, and possibly other versions, allows remote attackers to…
-
Unscored —CVE-2009-4253 Public exploit
Cross-site scripting (XSS) vulnerability in dspStats.php in PowerPhlogger 2.2.5 allows remote attackers to inject arbit…
-
Unscored —CVE-2009-4256 Public exploit
Multiple SQL injection vulnerabilities in cource.php in AlefMentor 2.0 and 2.2 allow remote attackers to execute arbitr…
-
Unscored —CVE-2009-4250 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allow remote…
-
Unscored —CVE-2009-4249 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in CutePHP CuteNews 1.4.6, when register_globals is enabled and mag…
-
Unscored —CVE-2009-4251 Public exploit
Stack-based buffer overflow in Jasc Paint Shop Pro 8.10 (aka Corel Paint Shop Pro) allows user-assisted remote attacker…
-
Unscored —
ntp_request.c in ntpd in NTP before 4.2.4p8, and 4.2.5, allows remote attackers to cause a denial of service (CPU and b…
-
Unscored —
Multiple stack-based buffer overflows in Novell iPrint Client 4.38, 5.30, and possibly other versions before 5.32 allow…
-
Unscored —
Stack-based buffer overflow in ienipp.ocx in Novell iPrint Client 5.30, and possibly other versions before 5.32, allows…
-
Unscored —
Stack-based buffer overflow in the OmniInet process in HP OpenView Data Protector Application Recovery Manager 5.50 and…
-
Unscored —CVE-2009-4231 Public exploit
Directory traversal vulnerability in as/lib/plugins.php in SweetRice 0.5.3 and earlier allows remote attackers to inclu…
-
Unscored —CVE-2009-4234 Public exploit
Cross-site scripting (XSS) vulnerability in loginpages/error_user.shtml on the Micronet Network Access Controller SP191…
-
Unscored —CVE-2009-4229 Public exploit
Multiple SQL injection vulnerabilities in ActiveWebSoftwares Active Bids allow remote attackers to execute arbitrary SQ…
-
Unscored —
Stack-based buffer overflow in the read_1_3_textobject function in f_readold.c in Xfig 3.2.5b and earlier, and in the r…
-
Unscored —
Stack-based buffer overflow in the PestPatrol ActiveX control (ppctl.dll) 5.6.7.9 in CA eTrust PestPatrol allows remote…
-
Unscored —CVE-2009-3586 Public exploit
Off-by-one error in src/http.c in CoreHTTP 0.5.3.1 and earlier allows remote attackers to cause a denial of service or …
-
Unscored —CVE-2009-4220 Public exploit
PHP remote file inclusion vulnerability in includes/classes/pctemplate.php in PointComma 3.8b2 and earlier allows remot…
-
Unscored —CVE-2009-4216 Public exploit
Directory traversal vulnerability in funzioni/lib/menulast.php in klinza professional cms 5.0.1 and earlier allows remo…
-
Unscored —CVE-2009-4222 Public exploit
phpBazar 2.1.1fix and earlier does not require administrative authentication for admin/admin.php, which allows remote a…
-
Unscored —CVE-2009-4217 Public exploit
SQL injection vulnerability in the Itamar Elharar MusicGallery (com_musicgallery) component for Joomla! allows remote a…
-
Unscored —
PHP remote file inclusion vulnerability in adm/krgourl.php in KR-Web 1.1b2 and earlier allows remote attackers to execu…
-
Unscored —CVE-2009-4221 Public exploit
SQL injection vulnerability in classified.php in phpBazar 2.1.1fix and earlier allows remote attackers to execute arbit…
-
Unscored —CVE-2009-4218 Public exploit
Multiple SQL injection vulnerabilities in files/login.asp in JiRo's Banner System eXperience (JBSX) allow remote attack…
-
Unscored —CVE-2009-4219 Public exploit
Stack-based buffer overflow in the MYACTIVEX.MyActiveXCtrl.1 ActiveX control in MyActiveX.ocx 1.4.8.0 in Haihaisoft Uni…
-
Unscored —CVE-2009-4224 Public exploit
Multiple PHP remote file inclusion vulnerabilities in SweetRice 0.5.4, 0.5.3, and earlier allow remote attackers to exe…
-
Unscored —CVE-2009-4203 Public exploit
Multiple SQL injection vulnerabilities in admin/aclass/admin_func.php in Arab Portal 2.2 allow remote attackers to exec…
-
Unscored —CVE-2009-4205 Public exploit
Directory traversal vulnerability in admin.php in Flashlight Free Edition allows remote attackers to include and execut…
-
Unscored —CVE-2009-4209 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in admin/index.php in moziloCMS 1.11.1 allow remote attackers to in…
-
Unscored —CVE-2009-4200 Public exploit
SQL injection vulnerability in the Seminar (com_seminar) component 1.28 for Joomla! allows remote attackers to execute …
-
Unscored —CVE-2009-4199 Public exploit
Multiple SQL injection vulnerabilities in the Mambo Resident (aka Mos Res or com_mosres) component 1.0f for Mambo and J…
-
Unscored —
Directory traversal vulnerability in the Omilen Photo Gallery (com_omphotogallery) component Beta 0.5 for Joomla! allow…