Code injection

Unspecified vulnerability in ashWsFtr.dll in avast! Home and Professional for Windows before 4.8.1356 has unknown impact and local attack vectors...

CVE-2009-3524

Avast! avast4.ini insecure permissions in the Avast4 Data folder allowed a local attacker to modify avast4.ini (ISAPIFilter1) to point to a malicious DLL, which could load with SYSTEM privileges after restart. The issue was addressed in Avast! Professional/Home editions up to 4.8.1356; another ve...

Information disclosure

A certain interface in the iCRM Basic comicrmbasic component 1.4.2.31 for Joomla! does not require administrative authentication, which has unspecified impact and remote attack vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party informati...

CVE-2009-3481

CVE-2009-3481 affects the Joomla! iCRM Basic component com_icrmbasic version 1.4.2.31. The root cause is an interface that does not require administrative authentication, enabling potential remote access without credentials. Impact is described as unspecified in the sources. The vulnerability is ...

Authorization

IBM DB2 9.1 before FP8 does not require the SETSESSIONUSER privilege for the SET SESSION AUTHORIZATION statement, which has unspecified impact and remote attack vectors...

Design/Logic Flaw

IBM DB2 8 before FP18, 9.1 before FP8, 9.5 before FP4, and 9.7 before FP2 does not perform the expected drops of certain table functions upon a loss of privileges by the functions' definers, which has unspecified impact and remote attack vectors...

CVE-2009-3473

IBM DB2 9.1 before FP8 does not require the SETSESSIONUSER privilege for the SET SESSION AUTHORIZATION statement, which has unspecified impact and remote attack vectors...

CVE-2009-3471

IBM DB2 8 before FP18, 9.1 before FP8, 9.5 before FP4, and 9.7 before FP2 does not perform the expected drops of certain table functions upon a loss of privileges by the functions' definers, which has unspecified impact and remote attack vectors...

Mandrake Security Advisory MDVSA-2009:248 (php)

The remote host is missing an update to php announced via advisory MDVSA-2009:248. OpenVAS Vulnerability Test $Id: mdksa2009248.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:248 php Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

CVE-2009-3354

Multiple unspecified vulnerabilities in the Rest API module for Drupal have unknown impact and attack vectors...

CVE-2009-3353

Multiple unspecified vulnerabilities in the Node2Node module for Drupal have unknown impact and attack vectors...

CVE-2009-3350

Multiple unspecified vulnerabilities in the Subdomain Manager module for Drupal have unknown impact and attack vectors...

CVE-2009-3351

Multiple unspecified vulnerabilities in the Node Browser module for Drupal have unknown impact and attack vectors...

CVE-2009-3352

Multiple unspecified vulnerabilities in the quotabyrole Quota by role module for Drupal have unknown impact and attack vectors...

Design/Logic Flaw

Multiple unspecified vulnerabilities in the Node2Node module for Drupal have unknown impact and attack vectors...

Code injection

Multiple unspecified vulnerabilities in the Subdomain Manager module for Drupal have unknown impact and attack vectors...

Design/Logic Flaw

Multiple unspecified vulnerabilities in the Node Browser module for Drupal have unknown impact and attack vectors...

Design/Logic Flaw

Multiple unspecified vulnerabilities in the Rest API module for Drupal have unknown impact and attack vectors...

CVE-2009-3353

Multiple unspecified vulnerabilities in the Node2Node module for Drupal have unknown impact and attack vectors...

CVE-2009-3351

Multiple unspecified vulnerabilities in the Node Browser module for Drupal have unknown impact and attack vectors...