| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2009-2294 | 7.5 | Integer overflow in the Png_datainfo_callback function in Dillo 2.1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PNG image with crafted (1) width or (2) height values. | 2018-10-10 19:39:00 | 2009-07-05 16:30:00 |
| CVE-2009-2304 | 5.0 | index.php in Aardvark Topsites PHP 5.2.0 and earlier allows remote attackers to obtain sensitive information via a nonexistent account name in the u parameter in a rate action, which reveals the installation path in an error message. | 2018-10-10 19:39:00 | 2009-07-02 10:30:00 |
| CVE-2009-2303 | 5.0 | index.php in Aardvark Topsites PHP 5.2.1 and earlier allows remote attackers to obtain sensitive information via a negative integer value for the start parameter in a search action, which reveals the installation path in an error message. | 2018-10-10 19:39:00 | 2009-07-02 10:30:00 |
| CVE-2009-2302 | 4.3 | Cross-site scripting (XSS) vulnerability in index.php in Aardvark Topsites PHP 5.2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the q parameter in a search action. NOTE: it was later reported that 5.2.1 is also aff | 2018-10-10 19:39:00 | 2009-07-02 10:30:00 |
| CVE-2009-2301 | 7.8 | The radware AppWall Web Application Firewall (WAF) 1.0.2.6, with Gateway 4.6.0.2, allows remote attackers to read source code via a direct request to (1) funcs.inc, (2) defines.inc, or (3) msg.inc in Management/. | 2018-10-10 19:39:00 | 2009-07-02 10:30:00 |
| CVE-2009-2300 | 10.0 | The management interface in the phion airlock Web Application Firewall (WAF) 4.1-10.41 does not properly handle CGI requests that specify large width and height parameters for an image, which allows remote attackers to execute arbitrary commands or c | 2018-10-10 19:39:00 | 2009-07-02 10:30:00 |
| CVE-2009-2290 | 7.5 | SQL injection vulnerability in the Boy Scout Advancement (com_bsadv) component 0.3 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a (1) account or (2) event task to index.php. | 2018-10-10 19:39:00 | 2009-07-01 13:00:00 |
| CVE-2009-2289 | 4.3 | Cross-site scripting (XSS) vulnerability in index.php in Arcade Trade Script 1.0 beta allows remote attackers to inject arbitrary web script or HTML via the q parameter in a gamelist action. | 2018-10-10 19:39:00 | 2009-07-01 13:00:00 |
| CVE-2009-2274 | 7.8 | The Huawei D100 allows remote attackers to obtain sensitive information via a direct request to (1) lan_status_adv.asp, (2) wlan_basic_cfg.asp, or (3) lancfg.asp in en/, related to use of JavaScript to protect against reading file contents. | 2018-10-10 19:39:00 | 2009-07-01 13:00:00 |
| CVE-2009-2271 | 10.0 | The Huawei D100 has (1) a certain default administrator password for the web interface, and does not force a password change; and has (2) a default password of admin for the admin account in the telnet interface; which makes it easier for remote atta | 2018-10-10 19:39:00 | 2009-07-01 13:00:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: