| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2009-1027 | 7.5 | SQL injection vulnerability in OpenCart 1.1.8 allows remote attackers to execute arbitrary SQL commands via the order parameter. | 2018-10-10 19:32:00 | 2009-03-20 00:30:00 |
| CVE-2009-1022 | 9.3 | Heap-based buffer overflow in the Preview/ Set Segment function in Gretech GOMlab GOM Encoder 1.0.0.11 and earlier allows user-assisted remote attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code | 2018-10-10 19:32:00 | 2009-03-20 00:30:00 |
| CVE-2009-0963 | 7.5 | Multiple SQL injection vulnerabilities in PHPRunner 4.2, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the SearchField parameter to (1) UserView_list.php, (2) orders_list.php, (3) users_list.php, and (4) Administr | 2018-10-10 19:32:00 | 2009-03-19 10:30:00 |
| CVE-2009-0941 | 7.6 | The HP Embedded Web Server (EWS) on HP LaserJet Printers, Edgeline Printers, and Digital Senders has no management password by default, which makes it easier for remote attackers to obtain access. | 2018-10-10 19:32:00 | 2009-03-18 21:00:00 |
| CVE-2009-0940 | 5.1 | Multiple cross-site request forgery (CSRF) vulnerabilities in the HP Embedded Web Server (EWS) on HP LaserJet Printers, Edgeline Printers, and Digital Senders allow remote attackers to hijack the intranet connectivity of arbitrary users for requests | 2018-10-10 19:32:00 | 2009-03-18 21:00:00 |
| CVE-2009-0922 | 4.0 | PostgreSQL before 8.3.7, 8.2.13, 8.1.17, 8.0.21, and 7.4.25 allows remote authenticated users to cause a denial of service (stack consumption and crash) by triggering a failure in the conversion of a localized error message to a client-specified enco | 2018-10-10 19:32:00 | 2009-03-17 17:30:00 |
| CVE-2009-0882 | 7.5 | Multiple SQL injection vulnerabilities in nForum 1.5 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to showtheme.php and the (2) user parameter to userinfo.php. | 2018-10-10 19:32:00 | 2009-03-12 15:20:00 |
| CVE-2009-0880 | 6.8 | Directory traversal vulnerability in the CIM server in IBM Director before 5.20.3 Service Update 2 on Windows allows remote attackers to load and execute arbitrary local DLL code via a .. (dot dot) in a /CIMListener/ URI in an M-POST request. | 2018-10-10 19:32:00 | 2009-03-12 15:20:00 |
| CVE-2009-0879 | 5.0 | The CIM server in IBM Director before 5.20.3 Service Update 2 on Windows allows remote attackers to cause a denial of service (daemon crash) via a long consumer name, as demonstrated by an M-POST request to a long /CIMListener/ URI. | 2018-10-10 19:32:00 | 2009-03-12 15:20:00 |
| CVE-2009-0877 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Communications Express allow remote attackers to inject arbitrary web script or HTML via the (1) Full Name or (2) Subject field. | 2018-10-10 19:32:00 | 2009-03-12 15:20:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: