|
266451
|
- |
|
angrydonuts
|
views
|
Drupal 6.x before 6.x-2.6, a module for Drupal, allows remote authenticated users to bypass access restrictions and (1) read unpublished content from anonymous users when a view is already configured…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2009-2077
|
2009-06-19 13:00 |
2009-06-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266452
|
- |
|
squid
|
squid_web_proxy_cache
|
Squid, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight,…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2009-0801
|
2009-06-18 13:00 |
2009-03-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266453
|
- |
|
qbik
|
wingate
|
Qbik WinGate, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silve…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2009-0802
|
2009-06-18 13:00 |
2009-03-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266454
|
- |
|
smoothwall
|
networkguardian
schoolguardian
smoothguardian
|
SmoothWall SmoothGuardian, as used in SmoothWall Firewall, NetworkGuardian, and SchoolGuardian 2008, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote e…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2009-0803
|
2009-06-18 13:00 |
2009-03-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266455
|
- |
|
ziproxy
|
ziproxy
|
Ziproxy 2.6.0, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silv…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2009-0804
|
2009-06-18 13:00 |
2009-03-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266456
|
- |
|
bookelves
|
kipper
|
Multiple cross-site scripting (XSS) vulnerabilities in Kipper 2.01 allow remote attackers to inject arbitrary web script or HTML via the charm parameter to (1) index.php and (2) kipper.php. NOTE: th…
|
CWE-79
Cross-site Scripting
|
CVE-2009-0764
|
2009-06-17 13:00 |
2009-03-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266457
|
- |
|
ibm
|
tivoli_storage_manager_hsm
|
Buffer overflow in the client in IBM Tivoli Storage Manager (TSM) HSM 5.3.2.0 through 5.3.5.0, 5.4.0.0 through 5.4.2.5, and 5.5.0.0 through 5.5.1.4 on Windows allows remote attackers to cause a denia…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2009-0869
|
2009-06-17 13:00 |
2009-03-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266458
|
- |
|
heine.familiedeelstra
|
booktree
|
Multiple cross-site scripting (XSS) vulnerabilities in Booktree 5.x before 5.x-7.3 and 6.x before 6.x-1.1, a module for Drupal, allow remote attackers to inject arbitrary web script or HTML via the (…
|
CWE-79
Cross-site Scripting
|
CVE-2009-2078
|
2009-06-17 13:00 |
2009-06-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266459
|
- |
|
creative_web_solutions
|
multi-level_cms
|
SQL injection vulnerability in insidepage.php in Creative Web Solutions Multi-Level CMS 1.21 allows remote attackers to execute arbitrary SQL commands via the catid parameter. NOTE: some of these de…
|
CWE-89
SQL Injection
|
CVE-2009-2082
|
2009-06-17 13:00 |
2009-06-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266460
|
- |
|
drupal
|
services_module_for_drupal
|
Unspecified vulnerability in Services 6.x before 6.x-0.14, a module for Drupal, when key-based access is enabled, allows remote attackers to read or add keys and access unauthorized services via unsp…
|
NVD-CWE-noinfo
|
CVE-2009-2035
|
2009-06-15 13:00 |
2009-06-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
