|
287721
|
- |
|
cubecart
|
cubecart
|
classes/session/cc_admin_session.php in CubeCart 4.3.4 does not properly restrict administrative access permissions, which allows remote attackers to bypass restrictions and gain administrative acces…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2009-3904
|
2018-10-11 04:47 |
2009-11-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
287722
|
- |
|
xerox
|
fiery_webtools
|
SQL injection vulnerability in summary.php in Xerox Fiery Webtools allows remote attackers to execute arbitrary SQL commands via the select parameter.
|
CWE-89
SQL Injection
|
CVE-2009-3913
|
2018-10-11 04:47 |
2009-11-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
287723
|
- |
|
rim
|
blackberry_browser blackberry_8800
|
Research In Motion (RIM) BlackBerry Browser on the BlackBerry 8800 allows remote attackers to cause a denial of service (application hang) via a JavaScript loop that configures the home page by using…
|
NVD-CWE-Other
|
CVE-2009-3944
|
2018-10-11 04:47 |
2009-11-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
287724
|
- |
|
bract
|
suntrack
|
Multiple cross-site scripting (XSS) vulnerabilities in Bractus SunTrack allow remote attackers to inject arbitrary web script or HTML via the (1) title parameter to newprofile.html; the (2) firstname…
|
CWE-79
Cross-site Scripting
|
CVE-2009-3950
|
2018-10-11 04:47 |
2009-11-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
287725
|
- |
|
2wire
|
1700hg 1701hg 1800hw 2071 2700hg 2701hg-t
|
The management interface on the 2wire Gateway 1700HG, 1701HG, 1800HW, 2071, 2700HG, and 2701HG-T with software before 5.29.52 allows remote attackers to cause a denial of service (reboot) via a %0d%0…
|
CWE-20
Improper Input Validation
|
CVE-2009-3962
|
2018-10-11 04:47 |
2009-11-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
287726
|
- |
|
mozilla
|
bugzilla
|
Bugzilla before 3.0.11, 3.2.x before 3.2.6, 3.4.x before 3.4.5, and 3.5.x before 3.5.3 does not block access to files and directories that are used by custom installations, which allows remote attack…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2009-3989
|
2018-10-11 04:47 |
2010-02-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
287727
|
- |
|
denton_woods
|
devil
|
Stack-based buffer overflow in the GetUID function in src-IL/src/il_dicom.c in DevIL 1.7.8 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a cra…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2009-3994
|
2018-10-11 04:47 |
2009-12-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
287728
|
- |
|
nullsoft raphael_assenat
|
winamp libmikmod
|
Multiple heap-based buffer overflows in IN_MOD.DLL (aka the Module Decoder Plug-in) in Winamp before 5.57, and libmikmod 3.1.12, might allow remote attackers to execute arbitrary code via (1) crafted…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2009-3995
|
2018-10-11 04:47 |
2009-12-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
287729
|
- |
|
nullsoft raphael_assenat
|
winamp libmikmod
|
Heap-based buffer overflow in IN_MOD.DLL (aka the Module Decoder Plug-in) in Winamp before 5.57, and libmikmod 3.1.12, might allow remote attackers to execute arbitrary code via an Ultratracker file.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2009-3996
|
2018-10-11 04:47 |
2009-12-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
287730
|
- |
|
nullsoft
|
winamp
|
Integer overflow in IN_MOD.DLL (aka the Module Decoder Plug-in) in Winamp before 5.57 might allow remote attackers to execute arbitrary code via an Oktalyzer file that triggers a heap-based buffer ov…
|
CWE-189
Numeric Errors
|
CVE-2009-3997
|
2018-10-11 04:47 |
2009-12-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|