261251
|
- |
|
kegel
|
winetricks
|
winetricks before 20081223 allows local users to overwrite arbitrary files via a symlink attack on the x_showmenu.txt temporary file.
|
CWE-59
Link Following
|
CVE-2009-0313
|
2017-08-8 10:33 |
2009-01-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
261252
|
- |
|
vim
|
vim
|
Untrusted search path vulnerability in src/if_python.c in the Python interface in Vim before 7.2.045 allows local users to execute arbitrary code via a Trojan horse Python file in the current working…
|
NVD-CWE-Other
|
CVE-2009-0316
|
2017-08-8 10:33 |
2009-01-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
261253
|
- |
|
dark_age_cms
|
dark_age_cms
|
SQL injection vulnerability in login.php in Dark Age CMS 0.2c beta allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters. NOTE: the provenance of…
|
CWE-89
SQL Injection
|
CVE-2009-0326
|
2017-08-8 10:33 |
2009-01-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
261254
|
- |
|
avbooklibrary
|
avbooklibrary
|
Multiple SQL injection vulnerabilities in AV Book Library before 1.1 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) admin/edit.php, (2) admin/add.php, (3) …
|
CWE-89
SQL Injection
|
CVE-2009-0332
|
2017-08-8 10:33 |
2009-01-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
261255
|
- |
|
autonomy
|
ultraseek
|
Open redirect vulnerability in cs.html in the Autonomy (formerly Verity) Ultraseek search engine allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the …
|
CWE-59
Link Following
|
CVE-2009-0347
|
2017-08-8 10:33 |
2009-01-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
261256
|
- |
|
sun
|
java_system_access_manager
|
The login module in Sun Java System Access Manager 6 2005Q1 (aka 6.3), 7 2005Q4 (aka 7.0), and 7.1 responds differently to a failed login attempt depending on whether the user account exists, which a…
|
CWE-200
Information Exposure
|
CVE-2009-0348
|
2017-08-8 10:33 |
2009-01-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
261257
|
- |
|
wesnoth
|
wesnoth
|
The Python AI module in Wesnoth 1.4.x and 1.5 before 1.5.11 allows remote attackers to escape the sandbox and execute arbitrary code by using a whitelisted module that imports an unsafe module, then …
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2009-0367
|
2017-08-8 10:33 |
2009-03-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
261258
|
- |
|
opensc-project
|
opensc
|
OpenSC before 0.11.7 allows physically proximate attackers to bypass intended PIN requirements and read private data objects via a (1) low level APDU command or (2) debugging tool, as demonstrated by…
|
CWE-310
Cryptographic Issues
|
CVE-2009-0368
|
2017-08-8 10:33 |
2009-03-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
261259
|
- |
|
ephpscripts
|
e-php_cms
|
SQL injection vulnerability in browsecats.php in E-Php CMS allows remote attackers to execute arbitrary SQL commands via the cid parameter.
|
CWE-89
SQL Injection
|
CVE-2009-0401
|
2017-08-8 10:33 |
2009-02-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
261260
|
- |
|
bioinformatics
|
htmlawed
|
Multiple cross-site scripting (XSS) vulnerabilities in Bioinformatics htmLawed 1.1.3 and 1.1.4 allow remote attackers to inject arbitrary web script or HTML via invalid Cascading Style Sheets (CSS) e…
|
CWE-79
Cross-site Scripting
|
CVE-2009-0404
|
2017-08-8 10:33 |
2009-02-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|