266291
|
- |
|
babe_logger
|
babe_logger
|
SQL injection vulnerability in Babe Logger 2 allows remote attackers to execute arbitrary SQL commands via the (1) gal parameter to index.php or (2) id parameter to comments.php.
|
NVD-CWE-Other
|
CVE-2005-3920
|
2009-10-9 13:33 |
2005-11-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
266292
|
- |
|
socketkb
|
socketkb
|
PHP file include vulnerability in SocketKB 1.1.0 and earlier allows remote attackers to include arbitrary local files via the __f parameter.
|
NVD-CWE-Other
|
CVE-2005-3936
|
2009-10-9 13:33 |
2005-12-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
266293
|
- |
|
softbiz
|
b2b_trading_marketplace_script
|
SQL injection vulnerability in Softbiz B2B Trading Marketplace Script 1.1 and earler allows remote attackers to execute arbitrary SQL commands via the cid parameter in (1) selloffers.php, (2) buyoffe…
|
NVD-CWE-Other
|
CVE-2005-3937
|
2009-10-9 13:33 |
2005-12-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
266294
|
- |
|
softbiz
|
faq
|
SQL injection vulnerability in Softbiz FAQ Script 1.1 and earler allows remote attackers to execute arbitrary SQL commands via the id parameter in (1) index.php, (2) faq_qanda.php, (3) refer_friend.p…
|
NVD-CWE-Other
|
CVE-2005-3938
|
2009-10-9 13:33 |
2005-12-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
266295
|
- |
|
inotify
|
incron
|
incron 0.5.5 does not initialize supplementary groups when running a process from a user's incrontabs, which causes the process to be run with the incrond supplementary groups and allows local users …
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2009-3589
|
2009-10-9 00:30 |
2009-10-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
266296
|
- |
|
dave_reid gabor_hojtsy
|
commentrss
|
Comment RSS 5.x before 5.x-2.2 and 6.x before 6.x-2.2, a module for Drupal, does not properly enforce permissions when a link is added to the RSS feed, which allows remote attackers to obtain the nod…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2009-3568
|
2009-10-8 13:00 |
2009-10-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
266297
|
- |
|
openbsd
|
openbsd
|
OpenBSD 4.4, 4.5, and 4.6, when running on an i386 kernel, does not properly handle XMM exceptions, which allows local users to cause a denial of service (kernel panic) via unspecified vectors.
|
NVD-CWE-Other
|
CVE-2009-3572
|
2009-10-8 13:00 |
2009-10-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
266298
|
- |
|
openbsd
|
openbsd
|
Per: http://marc.info/?l=openbsd-security-announce&m=125474331811594
XMM exceptions are incorrectly handled in the OpenBSD/i386 kernel, resulting
in a kernel panic that can be triggered by a loca…
|
NVD-CWE-Other
|
CVE-2009-3572
|
2009-10-8 13:00 |
2009-10-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
266299
|
- |
|
freebsd
|
freebsd
|
Race condition in the Pipe (IPC) close function in FreeBSD 6.3 and 6.4 allows local users to cause a denial of service (crash) or gain privileges via vectors related to kqueues, which triggers a use …
|
CWE-362
Race Condition
|
CVE-2009-3527
|
2009-10-7 13:00 |
2009-10-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
266300
|
- |
|
sun
|
java_system_identity_manager
|
Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not use SSL in all expected circumstances, which makes it easier for remote attackers to obtain sensitive information by sniffing the netwo…
|
CWE-310
Cryptographic Issues
|
CVE-2009-1074
|
2009-10-6 13:00 |
2009-03-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|