Browse CVEs

HIGH 7.5 CVE-2009-3307 Multiple PHP remote file inclusion vulnerabilities in FSphp 0.2.1 allow remote attackers to execute arbitrary PHP code via a URL in the FSPHP_LIB par… Fsphp No fix yet Fix from $1,9502009-09-23 MEDIUM 6.8 CVE-2009-3312 PHP remote file inclusion vulnerability in php/init.poll.php in phpPollScript 1.3 and earlier, when register_globals is enabled, allows remote attack… Phppollscript after 1.3 Fix from $1,6002009-09-23 HIGH 7.5 CVE-2009-3317 PHP remote file inclusion vulnerability in pages/pageHeader.php in OpenSiteAdmin 0.9.7 BETA allows remote attackers to execute arbitrary PHP code via… Opensiteadmin No fix yet Fix from $1,9502009-09-23 HIGH 7.5 CVE-2009-3323 Multiple PHP remote file inclusion vulnerabilities in BAnner ROtation System mini (BAROSmini) 0.32.595 allow remote attackers to execute arbitrary PH… Barosmini No fix yet Fix from $1,9502009-09-23 HIGH 7.5 CVE-2009-3324 PHP remote file inclusion vulnerability in include/prodler.class.php in ProdLer 2.0 and earlier allows remote attackers to execute arbitrary PHP code… Prodler after 2.0 Fix from $1,9502009-09-23 HIGH 7.5 CVE-2009-3331 Multiple PHP remote file inclusion vulnerabilities in DDL CMS 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the wwwRoot param… Ddl Cms No fix yet Fix from $1,9502009-09-23 HIGH 7.5 CVE-2009-3333 PHP remote file inclusion vulnerability in koesubmit.php in the koeSubmit (com_koesubmit) component 1.0 for Mambo allows remote attackers to execute … Com Koesubmit No fix yet Fix from $1,9502009-09-23 HIGH 7.5 CVE-2009-3306EPSS 6% PHP remote file inclusion vulnerability in include/header.php in ClearSite 4.50 allows remote attackers to execute arbitrary PHP code via a URL in th… Clearsite No fix yet Fix from $1,9502009-09-23 HIGH 7.5 CVE-2008-7240EPSS 6% Directory traversal vulnerability in include/unverified.inc.php in Linux Web Shop (LWS) php User Base 1.3beta allows remote attackers to include and … Php User Base No fix yet Fix from $1,9502009-09-17 HIGH 7.5 CVE-2009-3220 PHP remote file inclusion vulnerability in cp_html2txt.php in All In One Control Panel (AIOCP) 1.4.001 allows remote attackers to execute arbitrary P… Aiocp No fix yet Fix from $1,9502009-09-16 HIGH 7.5 CVE-2009-3188EPSS 6% PHP remote file inclusion vulnerability in save.php in phpSANE 0.5.0 allows remote attackers to execute arbitrary PHP code via a URL in the file_save… Phpsane No fix yet Fix from $1,9502009-09-15 MEDIUM 6.8 CVE-2009-2809 ImageIO in Apple Mac OS X 10.4.11 and 10.5.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a… Mac Os X Patch available Fix from $1,6002009-09-14 MEDIUM 6.8 CVE-2009-2811 Incomplete blacklist vulnerability in Launch Services in Apple Mac OS X 10.5.8 allows user-assisted remote attackers to execute arbitrary code via a … Mac Os X Patch available Fix from $1,6002009-09-14 HIGH 10.0 CVE-2007-6731EPSS 14% Extended Module Player (XMP) 2.5.1 and earlier allow remote attackers to execute arbitrary code via an OXM file with a negative value, which bypasses… Extended Module Player after 2.5.1 Fix from $1,9502009-09-13 HIGH 7.5 CVE-2009-3174 PHP remote file inclusion vulnerability in fonctions_racine.php in OBOphiX 2.7.0 and earlier allows remote attackers to execute arbitrary PHP code vi… Obophix after 2.7.0 Fix from $1,9502009-09-11 HIGH 9.3 CVE-2009-3077 Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, does not properly manage pointers for the columns (aka TreeColumns) of a XUL tree element, whi… Firefox after 3.0.13 Fix from $1,9502009-09-10 HIGH 10.0 CVE-2009-3079 Unspecified vulnerability in Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, allows remote attackers to execute arbitrary JavaScript with chro… Firefox after 3.0.13 Fix from $1,9502009-09-10 HIGH 7.5 CVE-2009-3114 The RSS reader widget in IBM Lotus Notes 8.0 and 8.5 saves items from an RSS feed as local HTML documents, which allows remote attackers to execute a… Lotus Notes Mitigation only Fix from $1,9502009-09-09 MEDIUM 6.8 CVE-2008-7183 PHP remote file inclusion vulnerability in eva/index.php in EVA CMS 2.3.1, when register_globals is enabled, allows remote attackers to execute arbit… Eva Cms No fix yet Fix from $1,6002009-09-08 HIGH 9.3 CVE-2009-2498EPSS 21% Microsoft Windows Media Format Runtime 9.0, 9.5, and 11 and Windows Media Services 9.1 and 2008 do not properly parse malformed headers in Advanced S… Windows Media Format Runtime Mitigation only Fix from $1,9502009-09-08 HIGH 8.5 CVE-2009-2499EPSS 16% Microsoft Windows Media Format Runtime 9.0, 9.5, and 11; and Microsoft Media Foundation on Windows Vista Gold, SP1, and SP2 and Server 2008; allows r… Windows Media Format Runtime Mitigation only Fix from $1,9502009-09-08 HIGH 9.3 CVE-2009-2628EPSS 6% The VMnc media codec in vmnc.dll in VMware Movie Decoder before 6.5.3 build 185404, VMware Workstation 6.5.x before 6.5.3 build 185404, VMware Player… Ace Patch available Fix from $1,9502009-09-08 HIGH 7.5 CVE-2009-3065 PHP remote file inclusion vulnerability in editor/edit_htmlarea.php in Ve-EDIT 0.1.4 allows remote attackers to execute arbitrary PHP code via a URL … Vedit No fix yet Fix from $1,9502009-09-03 HIGH 7.5 CVE-2009-3056 PHP remote file inclusion vulnerability in include/engine/content/elements/menu.php in KingCMS 0.6.0 allows remote attackers to execute arbitrary PHP… Kingcms No fix yet Fix from $1,9502009-09-03 HIGH 7.5 CVE-2009-3055 PHP remote file inclusion vulnerability in engine/api/api.class.php in DataLife Engine (DLE) 8.2 allows remote attackers to execute arbitrary PHP cod… Dle No fix yet Fix from $1,9502009-09-03 MEDIUM 6.8 CVE-2008-7152 Multiple PHP remote file inclusion vulnerabilities in Specimen Image Database (SID), when register_globals is enabled, allow remote attackers to exec… Sid No fix yet Fix from $1,6002009-09-01 MEDIUM 6.8 CVE-2008-7123 Static code injection vulnerability in admin/configuration/modifier.php in zKup CMS 2.0 through 2.3 allows remote attackers to inject arbitrary PHP c… Zkup Patch available Fix from $1,6002009-08-31 HIGH 7.5 CVE-2008-7087 PHP remote file inclusion vulnerability in search_wA.php in OpenPro 1.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the LIBP… Openpro No fix yet Fix from $1,9502009-08-26 HIGH 7.5 CVE-2008-7067 PHP remote file inclusion vulnerability in admin/plugins/Online_Users/main.php in PageTree CMS 0.0.2 BETA 0001 allows remote attackers to execute arb… Page Tree Cms No fix yet Fix from $1,9502009-08-25 HIGH 9.3 CVE-2008-7070EPSS 5% Argument injection vulnerability in the URI handler in KVIrc 3.4.2 Shiny allows remote attackers to execute arbitrary commands via a " (quote) follow… Kvirc No fix yet Fix from $1,9502009-08-25