CVE-2009-3473

IBM DB2 9.1 before FP8 does not require the SETSESSIONUSER privilege for the SET SESSION AUTHORIZATION statement, which has unspecified impact and remote attack vectors...

Mandrake Security Advisory MDVSA-2009:247 (php)

The remote host is missing an update to php announced via advisory MDVSA-2009:247. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-on...

Format string

Multiple format string vulnerabilities in WhiteDune before 0.29beta851 have unspecified impact and attack vectors, a different vulnerability than CVE-2008-0101...

CVE-2008-7228

Multiple format string vulnerabilities in WhiteDune before 0.29beta851 have unspecified impact and attack vectors, a different vulnerability than CVE-2008-0101...

CVE-2008-7228

CVE-2008-7228 concerns format string vulnerabilities in White_Dune prior to 0.29beta851. The connected sources identify the flaw in the swDebugf function of DuneApp.cpp, enabling arbitrary code execution via format string specifiers in a .WRL file. This entry is noted as a different vulnerability...

CVE-2008-7228

Multiple format string vulnerabilities in WhiteDune before 0.29beta851 have unspecified impact and attack vectors, a different vulnerability than CVE-2008-0101...

Memory corruption

IBM WebSphere MQ 6.x through 6.0.2.7, 7.0.0.0, 7.0.0.1, 7.0.0.2, and 7.0.1.0, when read ahead or asynchronous message consumption is enabled, allows attackers to have an unspecified impact via unknown vectors, related to a "memory overwrite" issue...

CVE-2009-3161

The server in IBM WebSphere MQ 7.0.0.1, 7.0.0.2, and 7.0.1.0 allows attackers to cause a denial of service trap or possibly have unspecified other impact via malformed data...

Mandrake Security Advisory MDVSA-2009:179 (mysql)

The remote host is missing an update to mysql announced via advisory MDVSA-2009:179. OpenVAS Vulnerability Test $Id: mdksa2009179.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:179 mysql Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

CVE-2009-2716

The plugin functionality in Sun Java SE 6 before Update 15 does not properly implement version selection, which allows context-dependent attackers to leverage vulnerabilities in "old zip and certificate handling" and have unspecified other impact via unknown vectors...

Mandrake Security Advisory MDVSA-2009:159 (mysql)

The remote host is missing an update to mysql announced via advisory MDVSA-2009:159. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Tor 'relay.c' DNS Spoofing Vulnerability - July09 (Linux)

This host is installed with Tor and is prone to DNS Spoofing vulnerability. OpenVAS Vulnerability Test $Id: gbtordnsspoofingvulnjul09lin.nasl 4892 2016-12-30 15:39:07Z teissa $ Tor 'relay.c' DNS Spoofing Vulnerability - July09 Linux Authors: Sharath S Copyright: Copyright c 2009 Greenbone Network...

CVE-2009-2460

Multiple stack-based buffer overflows in mathtex.cgi in mathTeX, when downloaded before 20090713, have unspecified impact and remote attack vectors...

CVE-2009-2426

Technical details about CVE-2009-2426 are not publicly provided in the supplied documents; monitor for updates.

Input validation

admin/index.php in Virtuenetz Virtue Online Test Generator does not require administrative privileges, which allows remote authenticated users to have an unknown impact via unspecified vectors...

Code injection

The web interface on the Axesstel MV 410R relies on client-side JavaScript code to validate input, which allows remote attackers to send crafted data, and possibly have unspecified other impact, via a client that does not process JavaScript...

Design/Logic Flaw

Use-after-free vulnerability in the dtls1retrievebufferedfragment function in ssl/d1both.c in OpenSSL 1.0.0 Beta 2 allows remote attackers to cause a denial of service openssl sclient crash and possibly have unspecified other impact via a DTLS packet, as demonstrated by a packet from a server tha...

Default credentials

razorCMS before 0.4 uses weak permissions for 1 admin/core/adminconfig.php, which allows local users to obtain the administrator's password hash and FTP user credentials; and 2 the root directory, 3 datastore/, and 4 admin/core/, which allows local users to have an unspecified impact...

Design/Logic Flaw

The Security Manager in razorCMS before 0.4 does not verify the permissions of every file owned by the apache user account, which is inconsistent with the documentation and allows local users to have an unspecified impact...

Integer overflow

Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, as used in Poppler and other products, when running on Mac OS X, has unspecified impact, related to "gallocn."...