| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2009-1090 | 6.8 | Directory traversal vulnerability in upload.php in Rapidleech rev.36 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the uploaded parameter. | 2018-10-10 19:33:00 | 2009-03-25 18:30:00 |
| CVE-2009-1089 | 5.0 | Absolute path traversal vulnerability in upload.php in Rapidleech rev.36 and earlier allows remote attackers to read arbitrary files via a base64-encoded absolute path in the filename parameter. | 2018-10-10 19:33:00 | 2009-03-25 18:30:00 |
| CVE-2009-1088 | 9.0 | Hannon Hill Cascade Server 5.7 and other versions allows remote authenticated users to execute arbitrary programs or Java code via a crafted XSLT stylesheet with "extension elements and extension functions" that trigger code execution by Xalan-Java, | 2018-10-10 19:33:00 | 2009-03-25 18:30:00 |
| CVE-2009-0950 | 9.3 | Stack-based buffer overflow in Apple iTunes before 8.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an itms: URL with a long URL component after a colon. | 2018-10-10 19:32:00 | 2009-06-02 18:30:00 |
| CVE-2009-0945 | 9.3 | Array index error in the insertItemBefore method in WebKit, as used in Apple Safari before 3.2.3 and 4 Public Beta, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Google Chrome Stable before 1.0.154.65, and possibly other pr | 2018-10-10 19:32:00 | 2009-05-13 17:30:00 |
| CVE-2009-0992 | 5.5 | Unspecified vulnerability in the Advanced Queuing component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect confidentiality and integrity, related to DBMS_AQIN. NOTE: the previous information was obtain | 2018-10-10 19:32:00 | 2009-04-15 10:30:00 |
| CVE-2009-0981 | 4.0 | Unspecified vulnerability in the Application Express component in Oracle Database 11.1.0.7 allows remote authenticated users to affect confidentiality, related to APEX. NOTE: the previous information was obtained from the April 2009 CPU. Oracle has | 2018-10-10 19:32:00 | 2009-04-15 10:30:00 |
| CVE-2009-0977 | 5.5 | Unspecified vulnerability in the Advanced Queuing component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to affect confidentiality and integrity, related to DBMS_AQIN. NOTE: the previous information | 2018-10-10 19:32:00 | 2009-04-15 10:30:00 |
| CVE-2009-0847 | 4.3 | The asn1buf_imbed function in the ASN.1 decoder in MIT Kerberos 5 (aka krb5) 1.6.3, when PK-INIT is used, allows remote attackers to cause a denial of service (application crash) via a crafted length value that triggers an erroneous malloc call, rela | 2018-10-10 19:32:00 | 2009-04-09 00:30:00 |
| CVE-2009-1070 | 4.3 | Cross-site scripting (XSS) vulnerability in system/index.php in ExpressionEngine 1.6.4 through 1.6.6, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via the avatar parameter. | 2018-10-10 19:32:00 | 2009-03-26 05:51:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: