261681
|
- |
|
process-one
|
ejabberd
|
Cross-site scripting (XSS) vulnerability in ejabberd before 2.0.4 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to links and MUC logs.
|
CWE-79
Cross-site Scripting
|
CVE-2009-0934
|
2017-08-17 10:30 |
2009-03-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
261682
|
- |
|
tor
|
tor
|
Unspecified vulnerability in Tor before 0.2.0.34 allows directory mirrors to cause a denial of service (exit node crash) via "malformed input."
|
NVD-CWE-noinfo
|
CVE-2009-0938
|
2017-08-17 10:30 |
2009-03-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
261683
|
- |
|
apple
|
mac_os_x mac_os_x_server
|
Help Viewer in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 does not verify that certain Cascading Style Sheets (CSS) are located in a registered help book, which allows remote attackers to execute …
|
CWE-20
Improper Input Validation
|
CVE-2009-0942
|
2017-08-17 10:30 |
2009-05-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
261684
|
- |
|
apple
|
mac_os_x mac_os_x_server
|
Help Viewer in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 does not verify that HTML pathnames are located in a registered help book, which allows remote attackers to execute arbitrary code via a h…
|
CWE-20
Improper Input Validation
|
CVE-2009-0943
|
2017-08-17 10:30 |
2009-05-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
261685
|
- |
|
futomi
|
mp_form_mail_cgi
|
Unspecified vulnerability in Futomi's CGI Cafe MP Form Mail CGI eCommerce 1.3.0 and earlier, and CGI Professional 3.2.2 and earlier, allows remote attackers to gain administrative privileges via unkn…
|
NVD-CWE-noinfo
|
CVE-2009-0962
|
2017-08-17 10:30 |
2009-03-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
261686
|
- |
|
phpfox
|
phpfox
|
Cross-site request forgery (CSRF) vulnerability in account/settings/account/index.php in phpFoX 1.6.21 allows remote attackers to hijack the authentication of administrators for requests that change …
|
CWE-352
Origin Validation Error
|
CVE-2009-0969
|
2017-08-17 10:30 |
2009-03-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
261687
|
- |
|
phpprobid
|
php_pro_bid
|
PHP remote file inclusion vulnerability in includes/class_image.php in PHP Pro Bid 6.05, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the fileE…
|
CWE-94
Code Injection
|
CVE-2009-0970
|
2017-08-17 10:30 |
2009-03-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
261688
|
- |
|
futomi
|
access_analyzer_cgi
|
Cross-site scripting (XSS) vulnerability in futomi's CGI Cafe Access Analyzer CGI Standard Version 3.8.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
|
CWE-79
Cross-site Scripting
|
CVE-2009-0971
|
2017-08-17 10:30 |
2009-03-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
261689
|
- |
|
oracle
|
database_server
|
Unspecified vulnerability in the Upgrade component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to affect confidentiality and integrity via unknown …
|
NVD-CWE-noinfo
|
CVE-2009-0987
|
2017-08-17 10:30 |
2009-07-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
261690
|
- |
|
oracle
|
database_10g database_11g database_9i
|
Unspecified vulnerability in the Listener component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote attackers to affect availability via unknown vectors, a diffe…
|
NVD-CWE-noinfo
|
CVE-2009-0991
|
2017-08-17 10:30 |
2009-04-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|