| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2009-3368 | 4.3 | Cross-site scripting (XSS) vulnerability in the Hotel Booking Reservation System (aka HBS or com_hbssearch) component for Joomla! allows remote attackers to inject arbitrary web script or HTML via the adult parameter in a showhoteldetails action to i | 2018-10-10 19:43:00 | 2009-09-24 16:30:00 |
| CVE-2009-3357 | 7.5 | Multiple SQL injection vulnerabilities in the Hotel Booking Reservation System (aka HBS or com_hbssearch) component for Joomla! allow remote attackers to execute arbitrary SQL commands via the (1) h_id, (2) id, and (3) rid parameters to longDesc.php, | 2018-10-10 19:43:00 | 2009-09-24 16:30:00 |
| CVE-2009-3322 | 7.8 | The Siemens Gigaset SE361 WLAN router allows remote attackers to cause a denial of service (device reboot) via a flood of crafted TCP packets to port 1723. | 2018-10-10 19:43:00 | 2009-09-23 12:08:00 |
| CVE-2009-3319 | 7.5 | SQL injection vulnerability in poems.php in DCI-Designs Dawaween 1.03 allows remote attackers to execute arbitrary SQL commands via the id parameter in a sec list action, a different vector than CVE-2006-1018. | 2018-10-10 19:43:00 | 2009-09-23 12:08:00 |
| CVE-2009-3306 | 7.5 | PHP remote file inclusion vulnerability in include/header.php in ClearSite 4.50 allows remote attackers to execute arbitrary PHP code via a URL in the cs_base_path parameter. | 2018-10-10 19:43:00 | 2009-09-23 12:08:00 |
| CVE-2009-3279 | 4.9 | The QNAP TS-239 Pro and TS-639 Pro with firmware 2.1.7 0613, 3.1.0 0627, and 3.1.1 0815 create a LUKS partition by using the AES-256 cipher in plain CBC mode, which allows local users to obtain sensitive information via a watermark attack. | 2018-10-10 19:43:00 | 2009-09-21 19:30:00 |
| CVE-2009-3277 | 5.0 | DataVault.Tesla/Impl/TypeSystem/AssociationHelper.cs in datavault allows context-dependent attackers to cause a denial of service (CPU consumption) via an input string composed of an [ (open bracket) followed by many commas, related to a certain regu | 2018-10-10 19:43:00 | 2009-09-21 19:30:00 |
| CVE-2009-3276 | 5.0 | Zoran/WinFormsAdvansed/RegeularDataToXML/Form1.cs in WinFormsAdvansed in NASD CORE.NET Terelik (aka corenet1) allows context-dependent attackers to cause a denial of service (CPU consumption) via an input string composed of many alphabetic characters | 2018-10-10 19:43:00 | 2009-09-21 19:30:00 |
| CVE-2009-3275 | 5.0 | Blocks/Common/Src/Configuration/Manageability/Adm/AdmContentBuilder.cs in Microsoft patterns & practices Enterprise Library (aka EntLib) allows context-dependent attackers to cause a denial of service (CPU consumption) via an input string composed of | 2018-10-10 19:43:00 | 2009-09-21 19:30:00 |
| CVE-2009-3200 | 5.9 | The QNAP TS-239 Pro and TS-639 Pro with firmware 2.1.7 0613, 3.1.0 0627, and 3.1.1 0815 create an undocumented recovery key and store it in the ENCK variable in flash memory, which allows local users to bypass the passphrase requirement and decrypt t | 2018-10-10 19:43:00 | 2009-09-21 19:30:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: