Archive
September 2011
Vulnerabilities first published in this month (UTC), newest first.
387 results · Feed
-
Unscored —CVE-2010-4834 Public exploit
Multiple SQL injection vulnerabilities in index.php in OneOrZero AIMS 2.6.0 Members Edition and 2.7.0 Trial Edition all…
-
Unscored —CVE-2010-4836 Public exploit
Cross-site scripting (XSS) vulnerability in register.html in PHPShop 2.1 EE and earlier allows remote attackers to inje…
-
Unscored —CVE-2010-4839 Public exploit
SQL injection vulnerability in the Event Registration plugin 5.32 and earlier for WordPress allows remote attackers to …
-
Unscored —
Pentaho BI Server 1.7.0.1062 and earlier does not set the autocomplete tag to off on web pages using a password field, …
-
Unscored —
Pentaho BI Server 1.7.0.1062 and earlier includes the session ID (JSESSIONID) in the URL, which allows attackers to obt…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Flag Content module 5.x-2.x before 5.x-2.10 for Drupal allows remote at…
-
Unscored —
Cross-site scripting (XSS) vulnerability in ViewAction in Pentaho BI Server 1.7.0.1062 and earlier allows remote attack…
-
Unscored —
Palm Pre WebOS 1.1 and earlier processes JavaScript in email messages, which allows remote attackers to execute arbitra…
-
Unscored —CVE-2009-5098 Public exploit
The LunaSysMgr process in Palm Pre WebOS 1.1 and earlier, when not viewing web pages in landscape mode, allows remote a…
-
High 7.5
Apache Libcloud does not verify SSL certificates for HTTPS connections
libcloud before 0.4.1 does not verify SSL certificates for HTTPS connections, which allows remote attackers to spoof certificates and bypass intended access restrictions via a man-in-the-middle (MITM) attack.
-
Unscored —
Multiple unspecified vulnerabilities in Google Chrome before 14.0.835.157 on the Acer AC700, Samsung Series 5, and Cr-4…
-
Unscored —
The Keychain implementation in Apple Mac OS X 10.6.8 and earlier does not properly handle an untrusted attribute of a C…
-
Unscored —
Multiple unspecified vulnerabilities in Google Chrome before 14.0.835.125 on the Acer AC700, Samsung Series 5, and Cr-4…
-
Unscored —CVE-2009-5088 Public exploit
SQL injection vulnerability in secure/index.php in IdeaCart 0.02 allows remote attackers to execute arbitrary SQL comma…
-
Unscored —CVE-2009-5091 Public exploit
SQL injection vulnerability in page.php in Vlinks 1.0.3 and 1.1.6 allows remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2009-5090 Public exploit
SQL injection vulnerability in editcomments.php in Bloggeruniverse Beta 2, when magic_quotes_gpc is disabled, allows re…
-
Unscored —CVE-2009-5089 Public exploit
Directory traversal vulnerability in index.php in IdeaCart 0.02 and 0.02a allows remote attackers to read arbitrary fil…
-
Unscored —CVE-2009-5093 Public exploit
Directory traversal vulnerability in gastbuch.php in Gästebuch (Gastebuch) 1.6 allows remote attackers to read arbitrar…
-
Unscored —CVE-2009-5092 EPSS 13%
Cross-site scripting (XSS) vulnerability in the management interface in Microsoft FAST ESP 5.1.5 and earlier allows rem…
-
Unscored —CVE-2009-5095 Public exploit
PHP remote file inclusion vulnerability in index_inc.php in ea gBook 0.1 and 0.1.4 allows remote attackers to execute a…
-
Unscored —CVE-2009-5094 Public exploit
SQL injection vulnerability in info.php in CMS Faethon 2.2.0 Ultimate allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2009-5087 Public exploit
Directory traversal vulnerability in geohttpserver in Geovision Digital Video Surveillance System 8.2 allows remote att…
-
Unscored —
Cross-site scripting (XSS) vulnerability in control.php in the controlcenter in Phorum before 5.2.17 allows remote atta…
-
Unscored —
Multiple off-by-one errors in order_cmd.cpp in OpenTTD before 1.1.3 allow remote attackers to cause a denial of service…
-
Unscored —
Multiple buffer overflows in OpenTTD before 1.1.3 allow remote attackers to cause a denial of service (daemon crash) or…
-
Unscored —
Multiple buffer overflows in OpenTTD before 1.1.3 allow local users to cause a denial of service (daemon crash) or poss…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Phorum before 5.2.16 allows remote attackers to inject arbitrary web script…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Sage add-on 1.3.10 and earlier for Firefox allows remote attackers to i…
-
Unscored —
IBM Rational Build Forge 7.1.2 relies on client-side JavaScript code to enforce the EditSecurity permission requirement…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in Phorum before 5.2.16 allows remote attackers to hijack the authentic…
-
Unscored —
The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firef…
-
Unscored —
Opera before 11.51 allows remote attackers to cause an insecure site to appear secure or trusted via unspecified action…
-
Unscored —
The cifs_close function in fs/cifs/file.c in the Linux kernel before 2.6.39 allows local users to cause a denial of ser…
-
Unscored —
The is_gpt_valid function in fs/partitions/efi.c in the Linux kernel before 2.6.39 does not check the size of an Extens…
-
Unscored —
Stack-based buffer overflow in the parseLegacySyslogMsg function in tools/syslogd.c in rsyslogd in rsyslog 4.6.x before…
-
Unscored —
hammerhead.cc in Hammerhead 2.1.4 allows local users to write to arbitrary files via a symlink attack on (1) /tmp/hamme…
-
Unscored —
The key_replace_session_keyring function in security/keys/process_keys.c in the Linux kernel before 2.6.39.1 does not i…
-
Unscored —
The modify_resolvconf_suse script in the vpnc package before 0.5.1-55.10.1 in SUSE Linux Enterprise Desktop 11 SP1 migh…
-
Unscored —
The check_mtab function in client/mount.cifs.c in mount.cifs in smbfs in Samba 3.5.10 and earlier does not properly ver…
-
Unscored —
Apple QuickTime before 7.7 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (m…