cve.nowby Sazabi

CVEs published March 2, 2009

50 CVEs were published on March 2, 2009: 0 critical, 0 high. Browse them by severity, product and exploitation status.

Published: 50
Critical: 0
High: 0
Medium: 0
Low: 0
Unrated: 50
Now in CISA KEV: 0
Fix available: 0

Medium, low and unrated 50

CVE-2009-0368OpenSC before 0.11.7 allows physically proximate attackers to bypass intended PIN requirements and read private data objects via a (1) low…UnratedMar 2, 2009
CVE-2009-0750SQL injection vulnerability in login.php in the smNews example script for txtSQL 2.2 Final allows remote attackers to execute arbitrary…UnratedMar 2, 2009
CVE-2009-0751Yaws before 1.80 allows remote attackers to cause a denial of service (memory consumption and crash) via a request with a large number of…UnratedMar 2, 2009
CVE-2009-0749Use-after-free vulnerability in the GIFReadNextExtension function in lib/pngxtern/gif/gifread.c in OptiPNG 0.6.2 and earlier allows…UnratedMar 2, 2009
CVE-2008-6367Unrestricted file upload vulnerability in Photos/create_album.php in Social Groupie allows remote authenticated users to execute arbitrary…UnratedMar 2, 2009
CVE-2008-6368SQL injection vulnerability in index.php in Chipmunk Guestbook 1.4m allows remote attackers to execute arbitrary SQL commands via the…UnratedMar 2, 2009
CVE-2008-6369SQL injection vulnerability in default.asp in Ocean12 Contact Manager Pro 1.02 allows remote attackers to execute arbitrary SQL commands…UnratedMar 2, 2009
CVE-2008-6370Cross-site scripting (XSS) vulnerability in default.asp in Ocean12 Contact Manager Pro 1.02 allows remote attackers to inject arbitrary…UnratedMar 2, 2009
CVE-2008-6371SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote attackers to execute arbitrary SQL commands via…UnratedMar 2, 2009
CVE-2008-6372SQL injection vulnerability in default.asp in Ocean12 FAQ Manager Pro 1.0 allows remote attackers to execute arbitrary SQL commands via…UnratedMar 2, 2009
CVE-2008-6373Unspecified vulnerability in Nagios before 3.0.6 has unspecified impact and remote attack vectors related to CGI programs, "adaptive…UnratedMar 2, 2009
CVE-2008-6374CodefixerSoftware MailingListPro Free Edition stores sensitive information under the web root with insufficient access control, which…UnratedMar 2, 2009
CVE-2008-6375JBook stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the…UnratedMar 2, 2009
CVE-2008-6376SQL injection vulnerability in main.asp in Jbook allows remote attackers to execute arbitrary SQL commands via the password (pass…UnratedMar 2, 2009
CVE-2008-6377PHP remote file inclusion vulnerability in include/global.php in Multi SEO phpBB 1.1.0 allows remote attackers to execute arbitrary PHP…UnratedMar 2, 2009
CVE-2008-6378SQL injection vulnerability in calendar_Eventupdate.asp in Calendar Mx Professional 2.0.0 allows remote attackers to execute arbitrary SQL…UnratedMar 2, 2009
CVE-2008-6379SQL injection vulnerability in pics_pre.asp in Gallery MX 2.0.0 allows remote attackers to execute arbitrary SQL commands via the ID…UnratedMar 2, 2009
CVE-2008-6380SQL injection vulnerability in default.aspx in Active Web Helpdesk 2.0 allows remote attackers to execute arbitrary SQL commands via the…UnratedMar 2, 2009
CVE-2008-6381SQL injection vulnerability in modules/adresses/viewcat.php in bcoos 1.0.13, and possibly earlier, allows remote authenticated users with…UnratedMar 2, 2009
CVE-2008-6382ASP Portal 3.2.5 stores sensitive information under the web root with insufficient access control, which allows remote attackers to…UnratedMar 2, 2009
CVE-2008-6383SQL injection vulnerability in SpeedTech Organization and Resource Manager (Storm) 5.x before 5.x-1.14 and 6.x before 6.x-1.18, a module…UnratedMar 2, 2009
CVE-2008-6384Multiple cross-site request forgery (CSRF) vulnerabilities in Comment Mail 5.x before 5.x-1.1, a module for Drupal, allow remote attackers…UnratedMar 2, 2009
CVE-2008-6385Cross-site scripting (XSS) vulnerability in index.php in W3matter RevSense 1.0 allows remote attackers to inject arbitrary web script or…UnratedMar 2, 2009
CVE-2008-6386Cross-site scripting (XSS) vulnerability in showads.php in Z1Exchange 1.0 allows remote attackers to inject arbitrary web script or HTML…UnratedMar 2, 2009
CVE-2008-6387Quick Tree View .NET 3.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers…UnratedMar 2, 2009

Show all 50 entriesShow fewer entries