|
266131
|
- |
|
white_dune
|
white_dune
|
Multiple format string vulnerabilities in White_Dune before 0.29beta851 have unspecified impact and attack vectors, a different vulnerability than CVE-2008-0101.
|
CWE-134
Use of Externally-Controlled Format String
|
CVE-2008-7228
|
2009-12-17 14:00 |
2009-09-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266132
|
- |
|
sun
|
ray_server_software
|
Sun Ray Server Software 4.1 on Solaris 10, when Automatic Multi-Group Hotdesking (AMGH) is enabled, responds to a logout action by immediately logging the user in again, which makes it easier for phy…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2009-4314
|
2009-12-15 14:00 |
2009-12-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266133
|
- |
|
zeeways
|
zeelyrics
|
Cross-site scripting (XSS) vulnerability in searchresults_main.php in ZeeLyrics 3x allows remote attackers to inject arbitrary web script or HTML via the keyword parameter. NOTE: the provenance of t…
|
CWE-79
Cross-site Scripting
|
CVE-2009-4316
|
2009-12-15 14:00 |
2009-12-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266134
|
- |
|
realestatephp
|
real_estate_manager
|
Cross-site scripting (XSS) vulnerability in index.php in Real Estate Manager 1.0.1 allows remote attackers to inject arbitrary web script or HTML via the lang parameter. NOTE: some of these details …
|
CWE-79
Cross-site Scripting
|
CVE-2009-4318
|
2009-12-15 14:00 |
2009-12-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266135
|
- |
|
eocms
|
eocms
|
PHP remote file inclusion vulnerability in js/bbcodepress/bbcode-form.php in eoCMS 0.9.03 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a UR…
|
CWE-94
Code Injection
|
CVE-2009-4319
|
2009-12-15 14:00 |
2009-12-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266136
|
- |
|
zen-cart
|
zen_cart
|
The installation for Zen Cart stores sensitive information and insecure programs under the (1) docs, (2) extras, and (3) zc_install folders, and (4) install.txt, which allows remote attackers to obta…
|
NVD-CWE-Other
|
CVE-2009-4323
|
2009-12-15 14:00 |
2009-12-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266137
|
- |
|
sun
|
ray_server_software
|
Unspecified vulnerability in the Authentication Manager (aka utauthd) in Sun Ray Server Software 4.0 and 4.1 allows remote attackers to execute arbitrary code or cause a denial of service via unknown…
|
NVD-CWE-noinfo
|
CVE-2009-4294
|
2009-12-14 14:00 |
2009-12-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266138
|
- |
|
sun
|
ray_server_software
|
Sun Ray Server Software 4.0 and 4.1 does not generate a unique DSA private key for the firmware on each Sun Ray 1, 1g, 100, and 150 DTU device, which makes it easier for remote attackers to obtain se…
|
CWE-310
Cryptographic Issues
|
CVE-2009-4295
|
2009-12-14 14:00 |
2009-12-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266139
|
- |
|
brian_miller
|
taxonomy_timer
|
SQL injection vulnerability in the Taxonomy Timer module 5.x-1.8 and earlier and 6.x-alpha1 and earlier for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
|
CWE-89
SQL Injection
|
CVE-2009-4296
|
2009-12-14 14:00 |
2009-12-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266140
|
- |
|
aroundme
barnraiser
|
aroundme
|
PHP remote file inclusion vulnerability in components/core/connect.php in AROUNDMe 1.1 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL i…
|
CWE-94
Code Injection
|
CVE-2009-4264
|
2009-12-11 14:00 |
2009-12-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
