CVE List
| Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
|---|---|---|---|---|---|---|---|
| 40940 | CVE-2009-3505 | Candidate | SQL injection vulnerability in view_news.php in Vastal I-Tech MMORPG Zone allows remote attackers to execute arbitrary SQL commands via the news_id parameter. NOTE: the game_id vector is already covered by CVE-2008-4460. | Assigned (20090930) | None (candidate not yet proposed) | View | |
| 41196 | CVE-2009-3761 | Candidate | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. | Assigned (20091023) | None (candidate not yet proposed) | View | |
| 41452 | CVE-2009-4017 | Candidate | PHP before 5.2.12 and 5.3.x before 5.3.1 does not restrict the number of temporary files created when handling a multipart/form-data POST request, which allows remote attackers to cause a denial of service (resource exhaustion), and makes it easier for remote attackers to exploit local file inclusion vulnerabilities, via multiple requests, related to lack of support for the max_file_uploads directive. | Assigned (20091120) | None (candidate not yet proposed) | View | |
| 41708 | CVE-2009-4273 | Candidate | stap-server in SystemTap before 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in stap command-line arguments in a request. | Assigned (20091210) | None (candidate not yet proposed) | View | |
| 41964 | CVE-2009-4529 | Candidate | InterVations NaviCOPA Web Server 3.0.1.2 and earlier allows remote attackers to obtain the source code for a web page via a trailing encoded space character in a URI, as demonstrated by /index.html%20 and /index.php%20 URIs. | Assigned (20091231) | None (candidate not yet proposed) | View |
Page 19413 of 20943, showing 5 records out of 104715 total, starting on record 97061, ending on 97065
