2009

mxCamArchive 2.2 stores sensitive information under the web root with insufficient access control, which allows remote a

The web interface (CobblerWeb) in Cobbler before 1.2.9 allows remote authenticated users to execute arbitrary Python cod

Buffer overflow in oovoo.exe in ooVoo 1.7.1.35, and possibly other versions before 1.7.1.59, allows remote attackers to

SQL injection vulnerability in Rss.php in MauryCMS 0.53.2 and earlier allows remote attackers to execute arbitrary SQL c

MauryCMS 0.53.2 and earlier does not require administrative authentication for Editors/fckeditor/editor/filemanager/brow

Multiple SQL injection vulnerabilities in login.asp in Bankoi WebHosting Control Panel 1.20 allow remote attackers to ex

Multiple cross-site request forgery (CSRF) vulnerabilities in Collabtive 0.4.8 allow remote attackers to hijack the auth

Unrestricted file upload vulnerability in Collabtive 0.4.8 allows remote authenticated users to execute arbitrary code b

Collabtive 0.4.8 allows remote attackers to bypass authentication and create new users, including administrators, via un

Cross-site scripting (XSS) vulnerability in manageproject.php in Collabtive 0.4.8 allows user-assisted remote attackers

Multiple cross-site scripting (XSS) vulnerabilities in Interchange 5.7 before 5.7.1, 5.6 before 5.6.1, and 5.4 before 5.

Unrestricted file upload vulnerability in ScriptsFeed Auto Classifieds allows remote authenticated users to execute arbi

Unrestricted file upload vulnerability in ScriptsFeed Recipes Listing Portal allows remote authenticated users to execut

Unrestricted file upload vulnerability in ScriptsFeed Realtor Classifieds System (aka Real Estate Classifieds) allows re

SQL injection vulnerability in the login functionality in TurnkeyForms Web Hosting Directory allows remote attackers to

TurnkeyForms Web Hosting Directory stores sensitive information under the web root with insufficient access control, whi

TurnkeyForms Web Hosting Directory allows remote attackers to bypass authentication and (1) gain administrative privileg

Pi3Web 2.0.3 before PL2, when installed on Windows as a desktop application and without using the Pi3Web/Conf/Intenet.pi

Argument injection vulnerability in Exodus 0.10 allows remote attackers to inject arbitrary command line arguments, over

Argument injection vulnerability in Exodus 0.10 allows remote attackers to inject arbitrary command line arguments, over

Argument injection vulnerability in Exodus 0.10 allows remote attackers to inject arbitrary command line arguments, over

Static code injection vulnerability in Sanus|artificium (aka Sanusart) Free simple guestbook PHP script, when downloaded

Directory traversal vulnerability in index.php in MiniGal b13 (aka MG2) allows remote attackers to read the source code

Unrestricted file upload vulnerability in submit_file.php in AlstraSoft SendIt Pro allows remote attackers to execute ar

Unrestricted file upload vulnerability in PHPStore Job Search (aka PHPCareers) allows remote authenticated users to exec

Unrestricted file upload vulnerability in PHPStore Real Estate allows remote authenticated users to execute arbitrary co

Unrestricted file upload vulnerability in PHPStore Auto Classifieds allows remote authenticated users to execute arbitra

Unrestricted file upload vulnerability in PHPStore Complete Classifieds allows remote authenticated users to execute arb

Cross-site scripting (XSS) vulnerability in FreeNAS before 0.69.2 allows remote attackers to inject arbitrary web script

Cross-site request forgery (CSRF) vulnerability in the WebGUI in FreeNAS before 0.7RC1 allows remote attackers to hijack

Multiple use-after-free vulnerabilities in libxml2 2.5.10, 2.6.16, 2.6.26, 2.6.27, and 2.6.32, and libxml 1.8.17, allow

Stack consumption vulnerability in libxml2 2.5.10, 2.6.16, 2.6.26, 2.6.27, and 2.6.32, and libxml 1.8.17, allows context

Stack consumption vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ 2.7.0 and 2.8.0 allows context-dep

The EditCSVAction function in cgi/actions.py in Roundup 1.2 before 1.2.1, 1.4 through 1.4.6, and possibly other versions

Static code injection vulnerability in admin.php in sun-jester OpenNews 1.0 allows remote authenticated administrators t

SQL injection vulnerability in admin.php in sun-jester OpenNews 1.0, when magic_quotes_gpc is disabled, allows remote at

CA SiteMinder allows remote attackers to bypass cross-site scripting (XSS) protections for J2EE applications via a reque

CA SiteMinder allows remote attackers to bypass cross-site scripting (XSS) protections for J2EE applications via a reque

The pf_test_rule function in OpenBSD Packet Filter (PF), as used in OpenBSD 4.2 through 4.5, NetBSD 5.0 before RC3, MirO

Stack-based buffer overflow in the _tt_internal_realpath function in the ToolTalk library (libtt.a) in IBM AIX 5.2.0, 5.

Race condition in the java.lang package in Sun Java SE 5.0 before Update 20 has unknown impact and attack vectors, relat

Unspecified vulnerability in deserialization in the Provider class in Sun Java SE 5.0 before Update 20 has unknown impac

Multiple unspecified vulnerabilities in the Provider class in Sun Java SE 5.0 before Update 20 have unknown impact and a

Multiple unspecified vulnerabilities in the Provider class in Sun Java SE 5.0 before Update 20 have unknown impact and a

Unspecified vulnerability in the javax.swing.plaf.synth.SynthContext.isSubregion method in the Swing implementation in S

The Java Web Start implementation in Sun Java SE 6 before Update 15 allows context-dependent attackers to cause a denial

The Abstract Window Toolkit (AWT) implementation in Sun Java SE 6 before Update 15 on X11 does not impose the intended c

The Abstract Window Toolkit (AWT) implementation in Sun Java SE 6 before Update 15 on Windows 2000 Professional does not

The plugin functionality in Sun Java SE 6 before Update 15 does not properly implement version selection, which allows c

Multiple cross-site scripting (XSS) vulnerabilities in autoinstall4imagesgalleryupgrade.php in the Fantastico De Luxe Mo