| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2009-1464 | 6.8 | Multiple cross-site request forgery (CSRF) vulnerabilities in index.aas in Application Access Server (A-A-S) 2.0.48 allow remote attackers to hijack the authentication of administrators for requests that (1) execute arbitrary programs via a command j | 2018-10-10 19:36:00 | 2009-05-14 17:30:00 |
| CVE-2009-1467 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in IceWarp eMail Server and WebMail Server before 9.4.2 allow remote attackers to inject arbitrary web script or HTML via (1) the body of a message, related to the email view and incorrect HTML filt | 2018-10-10 19:36:00 | 2009-05-05 20:30:00 |
| CVE-2009-1348 | 7.6 | The AV engine before DAT 5600 in McAfee VirusScan, Total Protection, Internet Security, SecurityShield for Microsoft ISA Server, Security for Microsoft Sharepoint, Security for Email Servers, Email Gateway, and Active Virus Defense allows remote atta | 2018-10-10 19:36:00 | 2009-04-30 20:30:00 |
| CVE-2009-1430 | 9.3 | Multiple stack-based buffer overflows in IAO.EXE in the Intel Alert Originator Service in Symantec Alert Management System 2 (AMS2), as used in Symantec System Center (SSS); Symantec AntiVirus Server; Symantec AntiVirus Central Quarantine Server; Sym | 2018-10-10 19:36:00 | 2009-04-29 15:30:00 |
| CVE-2009-1456 | 6.5 | Directory traversal vulnerability in admin.php in Malleo 1.2.3 allows remote authenticated administrators to include and execute arbitrary local files via a .. (dot dot) in the module parameter. | 2018-10-10 19:36:00 | 2009-04-28 16:30:00 |
| CVE-2009-1453 | 6.8 | SQL injection vulnerability in class.eport.php in Tiny Blogr 1.0.0 rc4, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the txtUsername parameter (aka the Username field). NOTE: some of these details | 2018-10-10 19:36:00 | 2009-04-28 16:30:00 |
| CVE-2009-1435 | 2.1 | NTRtScan.exe in Trend Micro OfficeScan Client 8.0 SP1 and 8.0 SP1 Patch 1 allows local users to cause a denial of service (application crash) via directories with long pathnames. NOTE: some of these details are obtained from third party information. | 2018-10-10 19:36:00 | 2009-04-27 18:00:00 |
| CVE-2009-1408 | 4.3 | Cross-site scripting (XSS) vulnerability in webSPELL 4.2.0c allows remote attackers to inject arbitrary web script or HTML allows remote attackers to inject arbitrary web script or HTML via Javascript events such as onmouseover in nested BBcode tags, | 2018-10-10 19:36:00 | 2009-04-24 14:30:00 |
| CVE-2009-1357 | 6.8 | CRLF injection vulnerability in da/DA/Login in Sun Java System Delegated Administrator 6.2 through 6.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the HELP_PAGE parameter. | 2018-10-10 19:36:00 | 2009-04-23 17:30:00 |
| CVE-2009-1354 | 4.0 | Directory traversal vulnerability in Mongoose 2.4 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI. | 2018-10-10 19:36:00 | 2009-04-21 16:24:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: