NVD List
Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
---|---|---|---|---|---|---|---|---|---|
48652 | CVE-2009-1367 | Cross-site scripting (XSS) vulnerability in index.php in moziloCMS 1.11 allows remote attackers to inject arbitrary web script or HTML via the query parameter in search action, a different issue than CVE-2008-6127.2a. | 2 | 4.3 | Medium | 2017-01-07 | 2009-04-23 | View | |
48908 | CVE-2009-1639 | Stack-based buffer overflow in Nucleus Data Recovery Kernel Recovery for Novell 4.03 allows user-assisted attackers to execute arbitrary code via a crafted .NKNT file. | 2 | 9.3 | High | 2017-01-07 | 2009-05-19 | View | |
49164 | CVE-2009-1899 | Unspecified vulnerability in the Administrative Configservice API in the System Management/Repository component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35, 6.1 before 6.1.0.25, and 7.0 before 7.0.0.5 on z/OS allows remote authenticated users to obtain sensitive information via unknown use of the wsadmin scripting tool, related to a "security exposure in wsadmin." | 2 | 10 | High | 2017-01-07 | 2009-08-15 | View | |
49420 | CVE-2009-2158 | account-recover.php in TorrentTrader Classic 1.09 chooses random passwords from an insufficiently large set, which makes it easier for remote attackers to obtain a password via a brute-force attack. | 2 | 7.5 | High | 2017-01-07 | 2009-06-25 | View | |
49676 | CVE-2009-2431 | WordPress 2.7.1 places the username of a post"s author in an HTML comment, which allows remote attackers to obtain sensitive information by reading the HTML source. | 2 | 5 | Medium | 2017-01-07 | 2009-07-13 | View |
Page 766 of 17672, showing 5 records out of 88360 total, starting on record 3826, ending on 3830