CVE List
| Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
|---|---|---|---|---|---|---|---|
| 41484 | CVE-2009-4049 | Candidate | Heap-based buffer overflow in aswRdr.sys (aka the TDI RDR driver) in avast! Home and Professional 4.8.1356.0 allows local users to cause a denial of service (memory corruption) or possibly gain privileges via crafted arguments to IOCTL 0x80002024. | Assigned (20091123) | None (candidate not yet proposed) | View | |
| 41740 | CVE-2009-4305 | Candidate | SQL injection vulnerability in the SCORM module in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 allows remote authenticated users to execute arbitrary SQL commands via vectors related to an "escaping issue when processing AICC CRS file (Course_Title)." | Assigned (20091211) | None (candidate not yet proposed) | View | |
| 41996 | CVE-2009-4561 | Candidate | Multiple SQL injection vulnerabilities in Admin/index.php in WebLeague 2.2.0, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters. | Assigned (20100104) | None (candidate not yet proposed) | View | |
| 42252 | CVE-2009-4817 | Candidate | Unrestricted file upload vulnerability in Element-IT Ultimate Uploader 1.3 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in upload/. | Assigned (20100427) | None (candidate not yet proposed) | View | |
| 42508 | CVE-2009-5073 | Candidate | IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.59 (aka 6.0.0.8-TIV-ITDS-IF0001) allows remote authenticated users to cause a denial of service (infinite loop and daemon hang) by adding a nested group that contains the Distinguished Name (DN) of its parent entry. | Assigned (20110420) | None (candidate not yet proposed) | View |
Page 1021 of 20943, showing 5 records out of 104715 total, starting on record 5101, ending on 5105
