| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2009-2933 | 7.5 | SQL injection vulnerability in comments.php in Piwigo before 2.0.3 allows remote attackers to execute arbitrary SQL commands via the items_number parameter. | 2018-10-10 19:42:00 | 2009-08-21 20:30:00 |
| CVE-2009-2932 | 4.3 | Cross-site scripting (XSS) vulnerability in uddiclient/process in the UDDI client in SAP NetWeaver Application Server (Java) 7.0 allows remote attackers to inject arbitrary web script or HTML via the TModel Key field. | 2018-10-10 19:42:00 | 2009-08-21 20:30:00 |
| CVE-2009-2931 | 7.8 | Directory traversal vulnerability in p.php in SlideShowPro Director 1.1 through 1.3.8 allows remote attackers to read arbitrary files via directory traversal sequences in the a parameter. | 2018-10-10 19:42:00 | 2009-08-21 20:30:00 |
| CVE-2009-2930 | 4.3 | Cross-site scripting (XSS) vulnerability in the Search feature in elka CMS (aka Elkapax) allows remote attackers to inject arbitrary web script or HTML via the q parameter to the default URI. | 2018-10-10 19:42:00 | 2009-08-21 20:30:00 |
| CVE-2009-2918 | 2.1 | The tgbvpn.sys driver in TheGreenBow IPSec VPN Client 4.61.003 allows local users to cause a denial of service (NULL pointer dereference and system crash) via a crafted request to the 0x80000034 IOCTL, probably involving an input or output buffer siz | 2018-10-10 19:42:00 | 2009-08-21 11:30:00 |
| CVE-2009-2732 | 5.0 | The checkHTTPpassword function in http.c in ntop 3.3.10 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an Authorization HTTP header that lacks a : (colon) character in the base64-decod | 2018-10-10 19:42:00 | 2009-08-21 11:02:00 |
| CVE-2009-2740 | 5.0 | kmxIds.sys before 7.3.1.18 in CA Host-Based Intrusion Prevention System (HIPS) 8.1 allows remote attackers to cause a denial of service (system crash) via a malformed packet. | 2018-10-10 19:42:00 | 2009-08-19 17:30:00 |
| CVE-2009-2730 | 7.5 | libgnutls in GnuTLS before 2.8.2 does not properly handle a '\0' character in a domain name in the subject's (1) Common Name (CN) or (2) Subject Alternative Name (SAN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof a | 2018-10-10 19:42:00 | 2009-08-12 10:30:00 |
| CVE-2009-2724 | 9.3 | Race condition in the java.lang package in Sun Java SE 5.0 before Update 20 has unknown impact and attack vectors, related to a "3Y Race condition in reflection checks." | 2018-10-10 19:42:00 | 2009-08-10 20:30:00 |
| CVE-2009-2723 | 10.0 | Unspecified vulnerability in deserialization in the Provider class in Sun Java SE 5.0 before Update 20 has unknown impact and attack vectors, aka BugId 6444262. | 2018-10-10 19:42:00 | 2009-08-10 20:30:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: