20941 matches found
CVE-2009-3887
ytnef has directory traversal...
CVE-2009-4899
creationtimestamp| type| source ---|---|--- 2019-10-28 17:26:42+00:00| seen| https://t.me/cibsecurity/7702...
CVE-2009-4900
creationtimestamp| type| source ---|---|--- 2019-10-28 17:26:41+00:00| seen| https://t.me/cibsecurity/7701...
CVE-2009-4899
pixelpost 1.7.1 has SQL injection...
CVE-2009-4899
pixelpost 1.7.1 has SQL injection...
CVE-2009-4900
Pixelpost 1.7.1 is affected by an XSS vulnerability caused by insufficient validation of client-side data in the web application. The issue is documented across multiple sources (e.g., CVE-2009-4900, CNVD-2019-39941, Red Hat advisories, Ubuntu CVE page) as a cross-site scripting flaw in the WEB i...
CVE-2009-4899
The CVE-2009-4899 entry concerns pixelpost 1.7.1 (and related 1.7.1-5 per CNVD) with a SQL injection vulnerability. The root cause is a lack of validation of externally entered SQL statements in the PHP/MySQL-based application, allowing an attacker to execute arbitrary SQL commands. Impact indica...
Solaris 10 (x86) : 125216-08
SunOS 5.10x86: wget patch. Date this patch was last updated by Sun : Oct/14/19 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid129875; scriptversion"1.3"; scriptcvsdate"Date:...
Solaris 10 (x86) : 119758-44
SunOS 5.10x86: Samba patch. Date this patch was last updated by Sun : Oct/14/19 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'compat.inc'; if description scriptid129873; scriptversion"1.4";...
Solaris 10 (sparc) : 119783-43
Vulnerability in the Solaris component of Oracle Sun Products Suite subcomponent: Bind/Postinstall script for Bind package. The supported version that is affected is 10. Very difficult to exploit vulnerability requiring logon to Operating System plus additional login/authentication to component o...
NewStart CGSL CORE 5.04 / MAIN 5.04 : pam Multiple Vulnerabilities (NS-SA-2019-0198)
The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has pam packages installed that are affected by multiple vulnerabilities: - pamunix.so in Linux-PAM 0.99.7.0 allows context- dependent attackers to log into accounts whose password hash, as stored in /etc/passwd or /etc/shadow,...
CVE-2009-3896
src/http/ngxhttpparse.c in nginx aka Engine X 0.1.0 through 0.4.14, 0.5.x before 0.5.38, 0.6.x before 0.6.39, 0.7.x before 0.7.62, and 0.8.x before 0.8.14 allows remote attackers to cause a denial of service NULL pointer dereference and worker process crash via a long URI...
CVE-2009-3696
Cross-site scripting XSS vulnerability in phpMyAdmin 2.11.x before 2.11.9.6 and 3.x before 3.2.2.1 allows remote attackers to inject arbitrary web script or HTML via a crafted name for a MySQL table...
CVE-2009-3697
SQL injection vulnerability in the PDF schema generator functionality in phpMyAdmin 2.11.x before 2.11.9.6 and 3.x before 3.2.2.1 allows remote attackers to execute arbitrary SQL commands via unspecified interface parameters...
CVE-2009-2937
Cross-site scripting XSS vulnerability in Planet 2.0 and Planet Venus allows remote attackers to inject arbitrary web script or HTML via the SRC attribute of an IMG element in a feed...
CVE-2009-1959
Off-by-one error in the eventwallops function in fe-common/irc/fe-events.c in irssi 0.8.13 allows remote IRC servers to cause a denial of service crash via an empty command, which triggers a one-byte buffer under-read and a one-byte buffer underflow...
CVE-2009-1148
Directory traversal vulnerability in bsdispasmimetype.php in the BLOB streaming feature in phpMyAdmin before 3.1.3.1 allows remote attackers to read arbitrary files via directory traversal sequences in the filepath parameter $filename variable...
CVE-2009-1149
CRLF injection vulnerability in bsdispasmimetype.php in the BLOB streaming feature in phpMyAdmin before 3.1.3.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the 1 ctype and possibly 2 filetype parameters...