Archive
March 2010
Vulnerabilities first published in this month (UTC), newest first.
513 results · Feed
-
Unscored —
The FTP server in Perforce Server 2008.1 allows remote attackers to cause a denial of service (NULL pointer dereference…
-
Unscored —
Cisco Digital Media Manager (DMM) before 5.2 allows remote authenticated users to discover Cisco Digital Media Player c…
-
Unscored —
Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in schedu…
-
Unscored —
Unspecified vulnerability on the Cisco Digital Media Player before 5.2 allows remote attackers to hijack the source of …
-
Unscored —
OpenSSL 0.9.8i on the Gaisler Research LEON3 SoC on the Xilinx Virtex-II Pro FPGA uses a Fixed Width Exponentiation (FW…
-
Unscored —
fcrontab in fcron before 3.0.5 allows local users to read arbitrary files via a symlink attack on an unspecified file.
-
Unscored —
The Perforce service (p4s.exe) in Perforce Server 2008.1 allows remote attackers to cause a denial of service (infinite…
-
Unscored —
The kssl_keytab_is_available function in ssl/kssl.c in OpenSSL before 0.9.8n, when Kerberos is enabled but Kerberos con…
-
Unscored —CVE-2009-4676 Public exploit
Stack-based buffer overflow in JetCast.exe 2.0.4.1109 in jetAudio 7.5.2 and 7.5.3.15 allows remote attackers to execute…
-
Unscored —
Integer overflow in kvolefio.dll 8.5.0.8339 and 10.5.0.0 in the Autonomy KeyView Filter SDK, as used in IBM Lotus Notes…
-
Unscored —
OpenSSL before 0.9.8m does not check for a NULL return value from bn_wexpand function calls in (1) crypto/bn/bn_div.c, …
-
Unscored —CVE-2009-4672 Public exploit
Directory traversal vulnerability in main.php in the WP-Lytebox plugin 1.3 for WordPress allows remote attackers to inc…
-
Unscored —CVE-2009-4671 Public exploit
Login.php in RoomPHPlanning 1.6 allows remote attackers to bypass authentication and obtain administrative access by se…
-
Unscored —CVE-2009-4674 Public exploit
admin/admin.php in Mole Group Sky Hunter Airline Ticket Sale Script and Bus Ticket Script allows remote attackers to ch…
-
Medium —CVE-2009-4665 Public exploit
CuteSoft CuteEditor Path Traversal vulnerability
Directory traversal vulnerability in CuteSoft_Client/CuteEditor/Load.ashx in CuteSoft Components Cute Editor for ASP.NET allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.
-
Unscored —CVE-2009-4670 Public exploit
admin/delitem.php in RoomPHPlanning 1.6 does not require authentication, which allows remote attackers to (1) delete ar…
-
Unscored —CVE-2009-4667 Public exploit
SQL injection vulnerability in form.php in WebMember 1.0 allows remote authenticated users to execute arbitrary SQL com…
-
Unscored —CVE-2009-4673 Public exploit
SQL injection vulnerability in profile.php in Mole Group Adult Portal Script allows remote attackers to execute arbitra…
-
Unscored —CVE-2009-4668 Public exploit
Stack-based buffer overflow in JetCast.exe 2.0.4.1109 in jetAudio 7.5.2 and 7.5.3.15 allows remote attackers to execute…
-
Unscored —CVE-2009-4675 Public exploit
admin/admin_info/index.php in the Mole Group Gastro Portal (Restaurant Directory) Script does not require administrativ…
-
Unscored —CVE-2009-4666 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Webradev Download Protect 1.0 allow remote attackers to execute a…
-
Unscored —CVE-2009-4669 Public exploit
Multiple SQL injection vulnerabilities in RoomPHPlanning 1.6 allow remote attackers to execute arbitrary SQL commands v…
-
Unscored —
Cross-site scripting (XSS) vulnerability in help/readme.nsf/Header in the Help component in IBM Lotus Domino 7.x before…
-
Unscored —
Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x before 4.3(2)SR2, 6.x before 6.1(5), 7.x befo…
-
Unscored —
Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5), 7.x before 7.1(3b)SU2, and 8.x…
-
Unscored —
The x86 emulator in KVM 83, when a guest is configured for Symmetric Multiprocessing (SMP), does not properly restrict …
-
Unscored —CVE-2010-0408 EPSS 21%
The ap_proxy_ajp_request function in mod_proxy_ajp.c in mod_proxy_ajp in the Apache HTTP Server 2.2.x before 2.2.15 doe…
-
Unscored —
The CTI Manager service in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x before 4.3(2)sr1a,…
-
Unscored —
The CMSIPUtility component in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 7.x before 7.1(3a)s…
-
Unscored —
Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5), 7.x before 7.1(3a)su1, and 8.x…
-
Unscored —
Integer signedness error in the authentication functionality in librpc.dll in the Informix Storage Manager (ISM) Portma…
-
Unscored —
Multiple buffer overflows in the authentication functionality in librpc.dll in the Informix Storage Manager (ISM) Portm…
-
Unscored —
Stack-based buffer overflow in E-Soft DJ Studio Pro 4.2 including 4.2.2.7.5, and 5.x including 5.1.4.3.1, allows user-a…
-
Unscored —CVE-2009-4658 Public exploit
Xerver 4.32 allows remote authenticated users to cause a denial of service (daemon crash) via a non-numeric web port as…
-
Unscored —
Firewall Builder 3.0.4, 3.0.5, and 3.0.6, when running on Linux, allows local users to gain privileges via a symlink at…
-
Unscored —CVE-2009-4659 Public exploit
Unspecified vulnerability in MP3-Cutter Ease Audio Cutter 1.20 allows user-assisted remote attackers to cause a denial …
-
Unscored —
Heap-based buffer overflow in the Quiksoft EasyMail Objects 6 ActiveX control allows remote attackers to execute arbitr…
-
Unscored —CVE-2009-4657 Public exploit
The administrator package for Xerver 4.32 does not require authentication, which allows remote attackers to alter appli…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the WebAccess component in Novell GroupWise 7.0 before 7.03 HP4 and 8.0 bef…
-
Unscored —CVE-2009-4661 Public exploit
Multiple buffer overflows in BigAnt Server 2.50 SP6 and earlier allow user-assisted remote attackers to cause a denial …