|
268131
|
- |
|
mortbay_jetty
|
jetty
|
Mortbay Jetty before 6.1.6rc1 does not properly handle "certain quote sequences" in HTML cookie parameters, which allows remote attackers to hijack browser sessions via unspecified vectors.
|
NVD-CWE-Other
|
CVE-2007-5614
|
2009-06-10 14:09 |
2007-12-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268132
|
- |
|
mortbay_jetty
|
jetty
|
CRLF injection vulnerability in Mortbay Jetty before 6.1.6rc0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
|
CWE-94
Code Injection
|
CVE-2007-5615
|
2009-06-10 14:09 |
2007-12-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268133
|
- |
|
cgi_rescue
|
cgi_rescue_minibbs22
|
Unspecified vulnerability in CGI RESCUE MiniBBS22 before 1.01 allows remote attackers to send email to arbitrary recipients via unknown vectors.
|
NVD-CWE-noinfo
|
CVE-2009-1589
|
2009-06-10 13:00 |
2009-05-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268134
|
- |
|
ibm
|
db2
|
The DRDA Services component in IBM DB2 9.1 before FP7 and 9.5 before FP4 allows remote attackers to cause a denial of service (memory corruption and application crash) via an IPv6 address in the corr…
|
NVD-CWE-Other
|
CVE-2009-1906
|
2009-06-10 13:00 |
2009-06-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268135
|
- |
|
baofeng
|
storm
|
Unspecified vulnerability in Config.dll in Baofeng products 3.09.04.17 and earlier allows remote attackers to execute arbitrary code by calling the SetAttributeValue method, as exploited in the wild …
|
NVD-CWE-noinfo
|
CVE-2009-1807
|
2009-06-9 14:34 |
2009-05-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268136
|
- |
|
mt312
|
img-bbs
|
Cross-site scripting (XSS) vulnerability in MT312 IMG-BBS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to model.php with a timestamp before 20090521.
|
CWE-79
Cross-site Scripting
|
CVE-2009-1881
|
2009-06-9 14:34 |
2009-06-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268137
|
- |
|
cisco
|
ciscoworks_common_services
ciscoworks_health_and_utilization_monitor
ciscoworks_lan_management_solution
ciscoworks_qos_policy_manager
ciscoworks_voice_manager
security_manager
telep…
|
Directory traversal vulnerability in the TFTP service in Cisco CiscoWorks Common Services (CWCS) 3.0.x through 3.2.x on Windows, as used in Cisco Unified Service Monitor, Security Manager, TelePresen…
|
CWE-22
Path Traversal
|
CVE-2009-1161
|
2009-06-9 14:33 |
2009-05-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268138
|
- |
|
proftpd
|
proftpd
|
ProFTPD Server 1.3.1, with NLS support enabled, allows remote attackers to bypass SQL injection protection mechanisms via invalid, encoded multibyte characters, which are not properly handled in (1) …
|
CWE-89
SQL Injection
|
CVE-2009-0543
|
2009-06-9 14:32 |
2009-02-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268139
|
- |
|
redhat
|
certificate_system
dogtag_certificate_system
|
agent/request/op.cgi in the Registration Authority (RA) component in Red Hat Certificate System (RHCS) 7.3 and Dogtag Certificate System allows remote authenticated users to approve certificate reque…
|
NVD-CWE-noinfo
|
CVE-2009-0588
|
2009-06-9 14:32 |
2009-05-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268140
|
- |
|
znc
|
znc
|
Multiple CRLF injection vulnerabilities in webadmin in ZNC before 0.066 allow remote authenticated users to modify the znc.conf configuration file and gain privileges via CRLF sequences in the quit m…
|
CWE-94
Code Injection
|
CVE-2009-0759
|
2009-06-9 14:32 |
2009-03-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
