| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2009-4001 | 9.3 | Integer overflow in XnView before 1.97.2 might allow remote attackers to execute arbitrary code via a DICOM image with crafted dimensions, leading to a heap-based buffer overflow. | 2018-10-10 19:47:00 | 2010-03-15 13:28:00 |
| CVE-2009-3989 | 4.3 | Bugzilla before 3.0.11, 3.2.x before 3.2.6, 3.4.x before 3.4.5, and 3.5.x before 3.5.3 does not block access to files and directories that are used by custom installations, which allows remote attackers to obtain sensitive information via requests fo | 2018-10-10 19:47:00 | 2010-02-03 19:30:00 |
| CVE-2009-3739 | 10.0 | Multiple unspecified vulnerabilities on the Rockwell Automation AB Micrologix 1100 and 1400 controllers allow remote attackers to obtain privileged access or cause a denial of service (halt) via unknown vectors. | 2018-10-10 19:47:00 | 2010-01-19 16:30:00 |
| CVE-2009-3637 | 10.0 | Stack-based buffer overflow in the M_AddToServerList function in client/menu.c in Red Planet Arena Alien Arena 7.30 allows remote attackers to execute arbitrary code via a packet with a crafted server description to UDP port 27901 followed by a packe | 2018-10-10 19:47:00 | 2010-01-13 11:30:00 |
| CVE-2009-3584 | 5.0 | SQL-Ledger 2.8.24 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session. | 2018-10-10 19:47:00 | 2009-12-23 18:30:00 |
| CVE-2009-3583 | 5.1 | Directory traversal vulnerability in the Preferences menu item in SQL-Ledger 2.8.24 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the countrycode field. | 2018-10-10 19:47:00 | 2009-12-23 18:30:00 |
| CVE-2009-3582 | 6.5 | Multiple SQL injection vulnerabilities in the delete subroutine in SQL-Ledger 2.8.24 allow remote authenticated users to execute arbitrary SQL commands via the (1) id and possibly (2) db parameters in a Delete action to the output of a Vendors>Report | 2018-10-10 19:47:00 | 2009-12-23 18:30:00 |
| CVE-2009-3581 | 3.5 | Multiple cross-site scripting (XSS) vulnerabilities in SQL-Ledger 2.8.24 allow remote authenticated users to inject arbitrary web script or HTML via (1) the DCN Description field in the Accounts Receivables menu item for Add Transaction, (2) the Desc | 2018-10-10 19:47:00 | 2009-12-23 18:30:00 |
| CVE-2009-3580 | 6.8 | Cross-site request forgery (CSRF) vulnerability in am.pl in SQL-Ledger 2.8.24 allows remote attackers to hijack the authentication of arbitrary users for requests that change a password via the login, new_password, and confirm_password parameters in | 2018-10-10 19:47:00 | 2009-12-23 18:30:00 |
| CVE-2009-3702 | 7.5 | Multiple absolute path traversal vulnerabilities in PHP-Calendar 1.1 allow remote attackers to include and execute arbitrary local files via a full pathname in the configfile parameter to (1) update08.php or (2) update10.php. NOTE: in some environme | 2018-10-10 19:47:00 | 2009-12-22 19:30:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: