Archive
5 March 2010
Vulnerabilities first published on this day (UTC), newest first.
42 results · Feed
-
Unscored —
The Perforce service (p4s.exe) in Perforce Server 2008.1 allows remote attackers to cause a denial of service (daemon c…
-
Unscored —
The _cupsGetlang function, as used by lppasswd.c in lppasswd in CUPS 1.2.2, 1.3.7, 1.3.9, and 1.4.1, relies on an envir…
-
Unscored —
Unspecified vulnerability in Cisco Digital Media Manager (DMM) 5.0.x and 5.1.x allows remote authenticated users to gai…
-
Unscored —
Perforce Server 2009.2 and earlier, when the protection table is empty, allows remote authenticated users to obtain sup…
-
Unscored —
The Perforce service (p4s.exe) in Perforce Server 2008.1 allows remote attackers to cause a denial of service (daemon c…
-
Unscored —
modules/arch/win32/mod_isapi.c in mod_isapi in the Apache HTTP Server 2.0.37 through 2.0.63, 2.2.0 through 2.2.14, and …
-
Unscored —
The triggers functionality in Perforce Server 2008.1 allows remote authenticated users with super privileges to execute…
-
Unscored —
Directory traversal vulnerability in Perforce Server 2008.1 allows remote authenticated users to create arbitrary files…
-
Unscored —
Cisco Digital Media Manager (DMM) 5.0.x and 5.1.x has a default password for the Tomcat administration account, which m…
-
Unscored —CVE-2010-0434 EPSS 18%
The ap_read_request function in server/protocol.c in the Apache HTTP Server 2.2.x before 2.2.15, when a multithreaded M…
-
Unscored —
The FTP server in Perforce Server 2008.1 allows remote attackers to cause a denial of service (NULL pointer dereference…
-
Unscored —
Cisco Digital Media Manager (DMM) before 5.2 allows remote authenticated users to discover Cisco Digital Media Player c…
-
Unscored —
Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in schedu…
-
Unscored —
Unspecified vulnerability on the Cisco Digital Media Player before 5.2 allows remote attackers to hijack the source of …
-
Unscored —
OpenSSL 0.9.8i on the Gaisler Research LEON3 SoC on the Xilinx Virtex-II Pro FPGA uses a Fixed Width Exponentiation (FW…
-
Unscored —
fcrontab in fcron before 3.0.5 allows local users to read arbitrary files via a symlink attack on an unspecified file.
-
Unscored —
The Perforce service (p4s.exe) in Perforce Server 2008.1 allows remote attackers to cause a denial of service (infinite…
-
Unscored —
The kssl_keytab_is_available function in ssl/kssl.c in OpenSSL before 0.9.8n, when Kerberos is enabled but Kerberos con…
-
Unscored —CVE-2009-4676 Public exploit
Stack-based buffer overflow in JetCast.exe 2.0.4.1109 in jetAudio 7.5.2 and 7.5.3.15 allows remote attackers to execute…
-
Unscored —
Integer overflow in kvolefio.dll 8.5.0.8339 and 10.5.0.0 in the Autonomy KeyView Filter SDK, as used in IBM Lotus Notes…
-
Unscored —
OpenSSL before 0.9.8m does not check for a NULL return value from bn_wexpand function calls in (1) crypto/bn/bn_div.c, …
-
Unscored —CVE-2009-4672 Public exploit
Directory traversal vulnerability in main.php in the WP-Lytebox plugin 1.3 for WordPress allows remote attackers to inc…
-
Unscored —CVE-2009-4671 Public exploit
Login.php in RoomPHPlanning 1.6 allows remote attackers to bypass authentication and obtain administrative access by se…
-
Unscored —CVE-2009-4674 Public exploit
admin/admin.php in Mole Group Sky Hunter Airline Ticket Sale Script and Bus Ticket Script allows remote attackers to ch…
-
Medium —CVE-2009-4665 Public exploit
CuteSoft CuteEditor Path Traversal vulnerability
Directory traversal vulnerability in CuteSoft_Client/CuteEditor/Load.ashx in CuteSoft Components Cute Editor for ASP.NET allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.
-
Unscored —CVE-2009-4670 Public exploit
admin/delitem.php in RoomPHPlanning 1.6 does not require authentication, which allows remote attackers to (1) delete ar…
-
Unscored —CVE-2009-4667 Public exploit
SQL injection vulnerability in form.php in WebMember 1.0 allows remote authenticated users to execute arbitrary SQL com…
-
Unscored —CVE-2009-4673 Public exploit
SQL injection vulnerability in profile.php in Mole Group Adult Portal Script allows remote attackers to execute arbitra…
-
Unscored —CVE-2009-4668 Public exploit
Stack-based buffer overflow in JetCast.exe 2.0.4.1109 in jetAudio 7.5.2 and 7.5.3.15 allows remote attackers to execute…
-
Unscored —CVE-2009-4675 Public exploit
admin/admin_info/index.php in the Mole Group Gastro Portal (Restaurant Directory) Script does not require administrativ…
-
Unscored —CVE-2009-4666 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Webradev Download Protect 1.0 allow remote attackers to execute a…
-
Unscored —CVE-2009-4669 Public exploit
Multiple SQL injection vulnerabilities in RoomPHPlanning 1.6 allow remote attackers to execute arbitrary SQL commands v…
-
Unscored —
Cross-site scripting (XSS) vulnerability in help/readme.nsf/Header in the Help component in IBM Lotus Domino 7.x before…
-
Unscored —
Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x before 4.3(2)SR2, 6.x before 6.1(5), 7.x befo…
-
Unscored —
Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5), 7.x before 7.1(3b)SU2, and 8.x…
-
Unscored —
The x86 emulator in KVM 83, when a guest is configured for Symmetric Multiprocessing (SMP), does not properly restrict …
-
Unscored —CVE-2010-0408 EPSS 21%
The ap_proxy_ajp_request function in mod_proxy_ajp.c in mod_proxy_ajp in the Apache HTTP Server 2.2.x before 2.2.15 doe…
-
Unscored —
The CTI Manager service in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x before 4.3(2)sr1a,…
-
Unscored —
The CMSIPUtility component in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 7.x before 7.1(3a)s…
-
Unscored —
Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5), 7.x before 7.1(3a)su1, and 8.x…