CVEs published February 18, 2009
16 CVEs were published on February 18, 2009: 0 critical, 0 high. Browse them by severity, product and exploitation status.
- Published
- 16
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 16
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 16
- CVE-2009-0645Directory traversal vulnerability in index.php in Jaws 0.8.8 allows remote authenticated users to read arbitrary files via a ..
- CVE-2009-0646Multiple SQL injection vulnerabilities in 4Site CMS 2.6 and earlier allow remote attackers to execute arbitrary SQL commands via the (1)…
- CVE-2005-4878Multiple cross-site scripting (XSS) vulnerabilities in (1) acid_qry_main.php in Analysis Console for Intrusion Databases (ACID) 0.9.6b20…
- CVE-2009-0644The HTTP interface in Swann DVR4-SecuraNet has a certain default administrative username and password, which makes it easier for remote…
- CVE-2008-6162Bux.to Clone script allows remote attackers to bypass authentication and gain administrative access by setting the loggedin cookie to 1…
- CVE-2008-6163SQL injection vulnerability in www/delivery/ac.php in OpenX 2.6.1 allows remote attackers to execute arbitrary SQL commands via the…
- CVE-2008-6164Cross-site scripting (XSS) vulnerability in index.php in DreamCost HostAdmin 3.1.1 allows remote attackers to inject arbitrary web script…
- CVE-2009-0640Directory traversal vulnerability in the administrative web server in Swann DVR4-SecuraNet allows remote attackers to read arbitrary files…
- CVE-2009-0641sys_term.c in telnetd in FreeBSD 7.0-RELEASE and other 7.x versions deletes dangerous environment variables with a method that was valid…
- CVE-2009-0642ext/openssl/ossl_ocsp.c in Ruby 1.8 and 1.9 does not properly check the return value from the OCSP_basic_verify function, which might…
- CVE-2009-0643Static code injection vulnerability in post.php in Simple PHP News 1.0 final allows remote attackers to inject arbitrary PHP code into…
- CVE-2008-6159Content Management Made Easy (CMME) 1.19 allows remote attackers to obtain system information via a direct request to info.php, which…
- CVE-2008-6160Semantically-Interconnected Online Communities (SIOC) 5.x before 5.x-1.2 and 6.x before 6.x-1.1, a module for Drupal, does not properly…
- CVE-2008-6161Cross-site scripting (XSS) vulnerability in WOW Raid Manager (WRM) before 3.5.1 allows remote attackers to inject arbitrary web script or…
- CVE-2009-0310Buffer overflow in SUSE blinux (aka sbl) in SUSE openSUSE 10.3 through 11.0 has unknown impact and attack vectors related to "incoming…
- CVE-2009-0639PHP remote file inclusion vulnerability in moduli/libri/index.php in phpyabs 0.1.2 allows remote attackers to execute arbitrary PHP code…