|
297431
|
- |
|
adbnewssender
|
adbnewssender
|
Directory traversal vulnerability in maillinglist/setup/step1.php.inc in ADbNewsSender before 1.5.6, and 2.0 before RC2, allows remote attackers to include and execute arbitrary local files via a .. …
|
CWE-22
Path Traversal
|
CVE-2009-2444
|
2017-08-17 10:30 |
2009-07-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
297432
|
- |
|
novell
|
edirectory
|
The DS\NDSD component in Novell eDirectory 8.8 before SP5 allows remote attackers to cause a denial of service (ndsd core dump) via an LDAP request containing multiple . (dot) wildcard characters in …
|
NVD-CWE-noinfo
|
CVE-2009-2456
|
2017-08-17 10:30 |
2009-07-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
297433
|
- |
|
novell
|
edirectory
|
The DS\NDSD component in Novell eDirectory 8.8 before SP5 allows remote attackers to cause a denial of service (crash) via a malformed bind LDAP packet.
|
CWE-94
Code Injection
|
CVE-2009-2457
|
2017-08-17 10:30 |
2009-07-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
297434
|
- |
|
sun
|
sun_fire_server
|
Unspecified vulnerability in Sun Fire V215 Server, when using XVR-100 graphic cards on system boards with part number 375-3463 and a hardware dash level -04 or later, allows remote attackers to cause…
|
NVD-CWE-noinfo
|
CVE-2009-2458
|
2017-08-17 10:30 |
2009-07-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
297435
|
- |
|
sun
|
sun_fire_server
|
Per http://sunsolve.sun.com/search/document.do?assetkey=1-26-257329-1
"This issue only affects Sun Fire V215 servers which are equipped with system boards 375-3463 dash level -04 or later AND XVR-…
|
NVD-CWE-noinfo
|
CVE-2009-2458
|
2017-08-17 10:30 |
2009-07-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
297436
|
- |
|
movabletype
|
six_apart_movable_type
|
Cross-site scripting (XSS) vulnerability in mt-wizard.cgi in Six Apart Movable Type 4.24, and 4.25 when global templates are not initialized, allows remote attackers to inject arbitrary web script or…
|
CWE-79
Cross-site Scripting
|
CVE-2009-2480
|
2017-08-17 10:30 |
2009-07-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
297437
|
- |
|
six_apart
sixapart
|
movable_type
|
mt-wizard.cgi in Six Apart Movable Type before 4.261, when global templates are not initialized, allows remote attackers to bypass access restrictions and (1) send e-mail to arbitrary addresses or (2…
|
NVD-CWE-noinfo
CWE-287
Improper Authentication
|
CVE-2009-2481
|
2017-08-17 10:30 |
2009-07-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
297438
|
- |
|
netbsd
|
netbsd
|
The pam_unix module in OpenPAM in NetBSD 4.0 before 4.0.2 and 5.0 before 5.0.1 allows local users to change the current root password if it is already known, even when they are not in the wheel group.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2009-2482
|
2017-08-17 10:30 |
2009-07-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
297439
|
- |
|
netbsd
|
netbsd
|
libprop/prop_object.c in proplib in NetBSD 4.0 and 4.0.1 allows local users to cause a denial of service (NULL pointer dereference and kernel panic) via a malformed externalized plist (XML form) cont…
|
CWE-189
Numeric Errors
|
CVE-2009-2483
|
2017-08-17 10:30 |
2009-07-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
297440
|
- |
|
sun
|
ray_server_software
|
Unspecified vulnerability in the utdmsession program in Sun Ray Server Software (SRSS) 4.0 allows local users to access the sessions of arbitrary users via unknown vectors.
|
NVD-CWE-noinfo
|
CVE-2009-2489
|
2017-08-17 10:30 |
2009-07-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
