Archive
December 2009
Vulnerabilities first published in this month (UTC), newest first.
440 results · Feed
-
Unscored —CVE-2009-4474 Public exploit
SQL injection vulnerability in the Mike de Boer zoom (com_zoom) component 2.0 for Mambo allows remote attackers to exec…
-
Unscored —
Multiple stack-based buffer overflows in the CertDecoder::GetName function in src/asn.cpp in TaoCrypt in yaSSL before 1…
-
Unscored —CVE-2009-4472 Public exploit
Multiple PHP remote file inclusion vulnerabilities in PHPope 1.0.0 and earlier allow remote attackers to execute arbitr…
-
Unscored —CVE-2009-4478 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Xstate Real Estate 1.0 allow remote attackers to inject arbitrar…
-
Unscored —
Stack-based buffer overflow in HAURI ViRobot Desktop 5.5 before 2009-09-28.00 allows remote attackers to execute arbitr…
-
Unscored —CVE-2009-4469 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in pagenumber.inc.php in phpPowerCards 2.0 allow remote attackers t…
-
Unscored —
Intellicom NetBiter WebSCADA devices use default passwords for the HICP network configuration service, which makes it e…
-
Unscored —CVE-2009-4467 Public exploit
misc.php in DeluxeBB 1.3 allows remote attackers to register accounts without a valid email address via a valemail acti…
-
Unscored —
Redmine 0.8.7 and earlier uses the title tag before defining the character encoding in a meta tag, which allows remote …
-
Unscored —CVE-2009-4466 Public exploit
DeluxeBB 1.3 allows remote attackers to obtain sensitive information via a crafted page parameter to misc.php, which re…
-
Unscored —
Stack-based buffer overflow in the NetBiterConfig utility (NetBiterConfig.exe) 1.3.0 for Intellicom NetBiter WebSCADA a…
-
Unscored —CVE-2009-4464 Public exploit
Cross-site scripting (XSS) vulnerability in searchadvance.asp in Active Business Directory 2 allows remote attackers to…
-
Unscored —CVE-2009-4461 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in FlatPress 0.909 allow remote attackers to inject arbitrary web s…
-
Unscored —CVE-2009-4468 Public exploit
Cross-site scripting (XSS) vulnerability in misc.php in DeluxeBB 1.3 allows remote attackers to inject arbitrary web sc…
-
Unscored —CVE-2009-4465 Public exploit
DeluxeBB 1.3 stores sensitive information under the web root with insufficient access control, which allows remote atta…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Auto-Surf Traffic Exchange Script 1.1 allow remote attackers to …
-
Unscored —
Multiple unspecified vulnerabilities in the Vsftpd Webmin module before 1.3b for the Vsftpd server have unknown impact …
-
Unscored —CVE-2009-4458 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in FreePBX 2.5.2 and 2.6.0rc2, and possibly other versions, allow r…
-
Unscored —CVE-2009-4456 Public exploit
SQL injection vulnerability in news_detail.php in Green Desktiny 2.3.1, and possibly earlier versions, allows remote at…
-
Unscored —
The default configuration of Cisco ASA 5500 Series Adaptive Security Appliance (Cisco ASA) 7.0, 7.1, 7.2, 8.0, 8.1, and…
-
Unscored —CVE-2009-4454 Public exploit
vccleaner in VideoCache 1.9.2 allows local users with Squid proxy user privileges to overwrite arbitrary files via a sy…
-
Unscored —CVE-2009-4453 Public exploit
Insecure method vulnerability in SoftCab Sound Converter ActiveX control (sndConverter.ocx) 1.2 allows remote attackers…
-
Unscored —
inc/functions_time.php in MyBB (aka MyBulletinBoard) 1.4.10, and possibly earlier versions, allows remote attackers to …
-
Unscored —CVE-2009-4450 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in map.php in LiveZilla 3.1.8.3 allow remote attackers to inject ar…
-
Unscored —
Directory traversal vulnerability in MyBB (aka MyBulletinBoard) 1.4.10, and possibly earlier versions, when changing th…
-
Unscored —CVE-2009-4446 Public exploit
Cross-site scripting (XSS) vulnerability in admin.php in phpInstantGallery 1.1 allows remote attackers to inject arbitr…
-
Unscored —CVE-2009-4452 Public exploit
Kaspersky Anti-Virus 5.0 (5.0.712); Antivirus Personal 5.0.x; Anti-Virus 6.0 (6.0.3.837), 7 (7.0.1.325), 2009 (8.0.0.x)…
-
Unscored —CVE-2009-4447 Public exploit
Jax Guestbook 3.5.0 allows remote attackers to bypass authentication and modify administrator settings via a direct req…
-
Unscored —CVE-2009-4451 Public exploit
Unrestricted file upload vulnerability in upper.php in kandalf upper 0.1 allows remote attackers to execute arbitrary c…
-
Unscored —CVE-2009-4444 EPSS 64%
Microsoft Internet Information Services (IIS) 5.x and 6.x uses only the portion of a filename before a ; (semicolon) ch…
-
Unscored —CVE-2009-4445 EPSS 13%
Microsoft Internet Information Services (IIS), when used in conjunction with unspecified third-party upload application…
-
Unscored —CVE-2009-3295 EPSS 40%
The prep_reprocess_req function in kdc/do_tgs_req.c in the cross-realm referral implementation in the Key Distribution …
-
Unscored —CVE-2009-1798 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities on the Network Management Card (NMC) on American Power Conversion (…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities on the Network Management Card (NMC) on American Power Conve…
-
Unscored —
Directory Proxy Server (DPS) in Sun Java System Directory Server Enterprise Edition 6.0 through 6.3.1 does not properly…
-
Unscored —
Directory Proxy Server (DPS) in Sun Java System Directory Server Enterprise Edition 6.0 through 6.3.1 does not properly…
-
Unscored —
Directory Proxy Server (DPS) in Sun Java System Directory Server Enterprise Edition 6.0 through 6.3.1 does not enable t…
-
Unscored —
Unspecified vulnerability in the Query Compiler, Rewrite, and Optimizer component in IBM DB2 9.5 before FP5 allows remo…
-
Unscored —
Unspecified vulnerability in the psearch (aka persistent search) functionality in Directory Proxy Server (DPS) in Sun J…
-
Unscored —
The Query Compiler, Rewrite, and Optimizer component in IBM DB2 9.1 before FP8, 9.5 before FP5, and 9.7 before FP1 does…