CVE-2008-5945
Published Jan 22, 2009Nukeviet 2.0 Beta allows remote attackers to bypass authentication and gain administrative access by setting the admf cookie to 1. NOTE: the provenance of this information is unk…
Year archive
CVEs published in 2009
Archive summary5,732 CVEs published in 2009 — 1,013 Critical, 1,736 High, 2,786 Medium, 197 Low, 0 Unrated.
CVE-2008-5944
Published Jan 22, 2009Cross-site scripting (XSS) vulnerability in modules.php in NavBoard 16 (2.6.0) allows remote attackers to inject arbitrary web script or HTML via the module parameter.
CVE-2008-5943
Published Jan 22, 2009Multiple directory traversal vulnerabilities in NavBoard 16 (2.6.0) allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the module parameter…
CVE-2008-5942
Published Jan 22, 2009Multiple cross-site scripting (XSS) vulnerabilities in MODx before 0.9.6.3 allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) the preserveUrl…
CVE-2008-5941
Published Jan 22, 2009Cross-site request forgery (CSRF) vulnerability in MODx 0.9.6.1p2 and earlier allows remote attackers to perform unauthorized actions as other users via unknown vectors.
CVE-2008-5940
Published Jan 22, 2009SQL injection vulnerability in index.php in MODx 0.9.6.2 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the searchid…
CVE-2008-5939
Published Jan 22, 2009Cross-site scripting (XSS) vulnerability in index.php in MODx CMS 0.9.6.2 and earlier allows remote attackers to inject arbitrary web script or HTML via a JavaScript event in the…
CVE-2008-5938
Published Jan 22, 2009PHP remote file inclusion vulnerability in assets/snippets/reflect/snippet.reflect.php in MODx CMS 0.9.6.2 and earlier, when magic_quotes_gpc is disabled, allows remote attackers…
CVE-2009-0245
Published Jan 22, 2009Cross-site scripting (XSS) vulnerability in Usagi Project MyNETS 1.2.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a diff…
CVE-2008-5937
Published Jan 22, 2009AyeView 2.20 allows user-assisted attackers to cause a denial of service (memory consumption or application crash) via a bitmap (aka .bmp) file with large height and width values.
CVE-2008-5936
Published Jan 22, 2009front-end/edit.php in mini-pub 0.3 and earlier allows remote attackers to read files and obtain PHP source code via a filename in the sFileName parameter.
CVE-2009-0244
Published Jan 21, 2009Directory traversal vulnerability in the OBEX FTP Service in the Microsoft Bluetooth stack in Windows Mobile 6 Professional, and probably Windows Mobile 5.0 for Pocket PC and 5.0…
CVE-2009-0243
Published Jan 21, 2009Microsoft Windows does not properly enforce the Autorun and NoDriveTypeAutoRun registry values, which allows physically proximate attackers to execute arbitrary code by (1) insert…
CVE-2009-0030
Published Jan 21, 2009A certain Red Hat patch for SquirrelMail 1.4.8 sets the same SQMSESSID cookie value for all sessions, which allows remote authenticated users to access other users' folder lists a…
CVE-2009-0026
Published Jan 21, 2009Multiple cross-site scripting (XSS) vulnerabilities in Apache Jackrabbit before 1.5.2 allow remote attackers to inject arbitrary web script or HTML via the q parameter to (1) sear…
CVE-2009-0007
Published Jan 21, 2009Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a Q…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2009-0006
Published Jan 21, 2009Integer signedness error in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a Cin…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2009-0005
Published Jan 21, 2009Unspecified vulnerability in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a cr…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2009-0004
Published Jan 21, 2009Buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a crafted MP3…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2009-0003
Published Jan 21, 2009Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and execute arbitrary code via an AVI movie…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2009-0002
Published Jan 21, 2009Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a Q…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2009-0001
Published Jan 21, 2009Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a c…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2008-3866
Published Jan 21, 2009The Trend Micro Personal Firewall service (aka TmPfw.exe) in Trend Micro Network Security Component (NSC) modules, as used in Trend Micro OfficeScan 8.0 SP1 Patch 1 and Internet S…
CVE-2008-3865
Published Jan 21, 2009Multiple heap-based buffer overflows in the ApiThread function in the firewall service (aka TmPfw.exe) in Trend Micro Network Security Component (NSC) modules, as used in Trend Mi…
CVE-2008-3864
Published Jan 21, 2009The ApiThread function in the firewall service (aka TmPfw.exe) in Trend Micro Network Security Component (NSC) modules, as used in Trend Micro OfficeScan 8.0 SP1 Patch 1 and Inter…
Showing 5,451-5,475 of 5,732 CVEsPage 219 of 230