Code injection

Unspecified vulnerability in the Skin Manager in DotNetNuke before 4.8.2 allows remote authenticated administrators to perform "server-side execution of application logic" by uploading a static file that is converted into a dynamic script via unknown vectors related to HTM or HTML files...

CVE-2009-0207

Unspecified vulnerability in HP-UX B.11.11 running VERITAS Oracle Disk Manager VRTSodm 3.5, B.11.23 running VRTSodm 4.1 or VERITAS File System VRTSvxfs 4.1, B.11.23 running VRTSodm 5.0 or VRTSvxfs 5.0, and B.11.31 running VRTSodm 5.0 allows local users to gain root privileges via unknown vectors...

CVE-2009-0207

CVE-2009-0207 describes a local privilege-escalation vulnerability affecting HP-UX systems with VERITAS File System (VRTSvxfs) or VERITAS Oracle Disk Manager (VRTSodm). The Initial document notes vulnerable HP-UX B.11.11/ B.11.23/ B.11.31 configurations with VRTSodm/VRTSvxfs up to versions 5.0;Im...

CVE-2009-1054

Unspecified vulnerability in JustSystems Ichitaro 13, 2004 through 2008, Lite2, and Ichitaro viewer 5.1.5.0 and earlier allows remote attackers to execute arbitrary code via a crafted file, as exploited in the wild by Trojan.Tarodrop.H in March 2009...

Design/Logic Flaw

Unspecified vulnerability in Microsoft Internet Explorer 8 on Windows 7 allows remote attackers to execute arbitrary code via unknown vectors triggered by clicking on a link, as demonstrated by Nils during a PWN2OWN competition at CanSecWest 2009...

CVE-2009-0924

CVE-2009-0924 affects Sun OpenSolaris (snv_39–snv_45) on x86 in 64-bit mode, enabling local users to hang the UFS filesystem write via ufs_getpage/ufs_putapage routines (CR 6442712). Related notes for Solaris 10/OpenSolaris variants indicate OS-level UFS denial of service; stack traces in Seebug ...

Authentication flaw

Unspecified vulnerability in YourPlace before 1.0.1 has unknown impact and attack vectors, possibly related to improper authentication and the ability to upload arbitrary PHP code. NOTE: some of these details are obtained from third party information...

CVE-2008-6445

Technical details about CVE-2008-6445 are not publicly available in the provided documents. The entries repeat generic vulnerability notes with no concrete affected versions, exploit vectors, or remediation steps.

CVE-2008-6445

Unspecified vulnerability in YourPlace before 1.0.1 has unknown impact and attack vectors, possibly related to improper authentication and the ability to upload arbitrary PHP code. NOTE: some of these details are obtained from third party information...

CVE-2008-6417

Unspecified vulnerability in GreenSQL-Console before 0.3.5 allows attackers to obtain the "installation directory" via unknown vectors...

Code injection

Unspecified vulnerability in Vignette Content Management 7.3.0.5, 7.3.1, 7.3.1.1, 7.4, and 7.5 allows "low privileged" users to gain administrator privileges via unknown attack vectors...

CVE-2008-6412

Unspecified vulnerability in Vignette Content Management 7.3.0.5, 7.3.1, 7.3.1.1, 7.4, and 7.5 allows "low privileged" users to gain administrator privileges via unknown attack vectors...

CVE-2008-6399

Unspecified vulnerability in DotNetNuke 4.5.2 through 4.9 allows remote attackers to "add additional roles to their user account" via unknown attack vectors...

PHP 5.x < 5.2.9 Multiple Vulnerabilities

Binary data 4943.prm...

Authorization

Unspecified vulnerability in the queue manager in IBM WebSphere MQ WMQ 5.3, 6.0 before 6.0.2.6, and 7.0 before 7.0.0.2 allows local users to gain privileges via vectors related to the 1 setmqaut, 2 dmpmqaut, and 3 dspmqaut authorization commands...

CVE-2009-0439

Unspecified vulnerability in the queue manager in IBM WebSphere MQ WMQ 5.3, 6.0 before 6.0.2.6, and 7.0 before 7.0.0.2 allows local users to gain privileges via vectors related to the 1 setmqaut, 2 dmpmqaut, and 3 dspmqaut authorization commands...

CVE-2009-0439

Unspecified vulnerability in the queue manager in IBM WebSphere MQ WMQ 5.3, 6.0 before 6.0.2.6, and 7.0 before 7.0.0.2 allows local users to gain privileges via vectors related to the 1 setmqaut, 2 dmpmqaut, and 3 dspmqaut authorization commands...

CVE-2008-6125

Unspecified vulnerability in the user editing interface in Moodle 1.5.x, 1.6 before 1.6.6, and 1.7 before 1.7.3 allows remote authenticated users to gain privileges via unknown vectors...

Memory corruption

Unspecified vulnerability in CarbonCore in Apple Mac OS X 10.4.11 and 10.5.6 allows remote attackers to cause a denial of service application termination and execute arbitrary code via a crafted resource fork that triggers memory corruption...

CVE-2009-0009

CVE-2009-0009 affects Apple Mac OS X 10.4.11 and 10.5.6 via the Pixlet codec. A crafted movie file can trigger memory corruption, enabling remote denial of service (application termination) and potentially arbitrary code execution. Documents consistently describe the vulnerability as memory corru...