271061
|
- |
|
darren_reed
|
ipfilter
|
IPFilter 3.1.1 through 3.4.28 allows remote attackers to bypass firewall rules by sending a PASV command string as the argument of another command to an FTP server, which generates a response that co…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2002-1978
|
2009-04-3 13:00 |
2002-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
271062
|
- |
|
watchguard
|
legacy_rssa soho vclass
|
WatchGuard SOHO products running firmware 5.1.6 and earlier, and Vclass/RSSA using 3.2 SP1 and earlier, allows remote attackers to bypass firewall rules by sending a PASV command string as the argume…
|
CWE-20
Improper Input Validation
|
CVE-2002-1979
|
2009-04-3 13:00 |
2002-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
271063
|
- |
|
platinumprofitzone
|
turnkey_ebook_store
|
Cross-site scripting (XSS) vulnerability in index.php in Turnkey Ebook Store 1.1 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter in a search action.
|
CWE-79
Cross-site Scripting
|
CVE-2009-1225
|
2009-04-3 00:30 |
2009-04-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
271064
|
- |
|
sun
|
opensolaris solaris
|
Multiple unspecified vulnerabilities in the Doors subsystem in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv_94, allow local users to cause a denial of service (process hang), or…
|
CWE-399
Resource Management Errors
|
CVE-2009-0874
|
2009-04-2 14:45 |
2009-03-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
271065
|
- |
|
sun
|
opensolaris solaris
|
Race condition in the Doors subsystem in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv_94, allows local users to cause a denial of service (process hang), or possibly bypass file…
|
CWE-362
Race Condition
|
CVE-2009-0875
|
2009-04-2 14:45 |
2009-03-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
271066
|
- |
|
ibm
|
rational_appscan
|
IBM Rational AppScan Enterprise before 5.5 FP1 allows remote attackers to read arbitrary exported reports by "forcefully browsing."
|
NVD-CWE-noinfo
|
CVE-2009-1056
|
2009-04-2 14:45 |
2009-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
271067
|
- |
|
banshee-project
|
banshee
|
Cross-site scripting (XSS) vulnerability in apps/web/vs_diag.cgi in the DAAP extension in Banshee 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the server parameter, which …
|
CWE-79
Cross-site Scripting
|
CVE-2009-1175
|
2009-04-2 14:45 |
2009-03-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
271068
|
- |
|
citadel
|
webcit
|
Format string vulnerability in the mini_calendar component in Citadel.org WebCit 7.22, and other versions before 7.39, allows remote attackers to execute arbitrary code via unspecified vectors.
|
CWE-134
Use of Externally-Controlled Format String
|
CVE-2009-0364
|
2009-04-2 14:44 |
2009-03-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
271069
|
- |
|
netatalk
|
netatalk
|
The papd daemon in Netatalk before 2.0.4-beta2, when using certain variables in a pipe command for the print file, allows remote attackers to execute arbitrary commands via shell metacharacters in a …
|
CWE-78
OS Command
|
CVE-2008-5718
|
2009-04-2 13:00 |
2008-12-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
271070
|
- |
|
drupal
|
drupal print
|
Cross-site scripting (XSS) vulnerability in the Send by e-mail module in the "Printer, e-mail and PDF versions" module 5.x before 5.x-4.4 and 6.x before 6.x-1.4, a module for Drupal, allows remote at…
|
CWE-79
Cross-site Scripting
|
CVE-2009-1047
|
2009-04-1 14:43 |
2009-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|