| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2009-0755 | 5.0 | The FormWidgetChoice::loadDefaults function in Poppler before 0.10.4 allows remote attackers to cause a denial of service (crash) via a PDF file with an invalid Form Opt entry. | 2018-10-10 19:30:00 | 2009-03-03 16:30:00 |
| CVE-2009-0744 | 5.0 | Apple Safari 4 Beta build 528.16 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a feeds: URI beginning with a (1) % (percent), (2) { (open curly bracket), (3) } (close curly bracket), (4) ^ ( | 2018-10-10 19:30:00 | 2009-02-27 17:30:00 |
| CVE-2009-0741 | 7.5 | SQL injection vulnerability in Login.asp in Craft Silicon Banking@Home 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the LoginName parameter. | 2018-10-10 19:30:00 | 2009-02-25 20:30:00 |
| CVE-2009-0734 | 9.3 | Heap-based buffer overflow in MultimediaPlayer.exe 6.86.240.7 in Nokia PC Suite 6.86.9.3 allows remote attackers to execute arbitrary code via a long string in a .m3u playlist file. | 2018-10-10 19:30:00 | 2009-02-25 20:30:00 |
| CVE-2009-0730 | 6.8 | Multiple SQL injection vulnerabilities in the GigCalendar (com_gigcal) component 1.0 for Mambo and Joomla!, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via (1) the gigcal _venues_id parameter in a detai | 2018-10-10 19:30:00 | 2009-02-24 23:30:00 |
| CVE-2009-0727 | 7.5 | SQL injection vulnerability in jobdetails.php in taifajobs 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the jobid parameter. | 2018-10-10 19:30:00 | 2009-02-24 23:30:00 |
| CVE-2009-0698 | 7.5 | Integer overflow in the 4xm demuxer (demuxers/demux_4xm.c) in xine-lib 1.1.16.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a 4X movie file with a large current_track value, a similar issue to | 2018-10-10 19:30:00 | 2009-02-23 15:30:00 |
| CVE-2009-0678 | 5.0 | images/captcha.php in RavenNuke 2.30 allows remote attackers to obtain sensitive information via an aFonts array parameter value that does not correspond to a valid font file, which reveals the installation path in an error message. | 2018-10-10 19:30:00 | 2009-02-22 22:30:00 |
| CVE-2009-0677 | 6.5 | avatarlist.php in the Your Account module, reached through modules.php, in Raven Web Services RavenNuke 2.30 allows remote authenticated users to execute arbitrary code via PHP sequences in an element of the replacements array, which is processed by | 2018-10-10 19:30:00 | 2009-02-22 22:30:00 |
| CVE-2009-0674 | 6.0 | images/captcha.php in Raven Web Services RavenNuke 2.30, when register_globals and display_errors are enabled, allows remote attackers to determine the existence of local files by sending requests with full pathnames in the aFonts array parameter, an | 2018-10-10 19:30:00 | 2009-02-22 22:30:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: