2009

The Net Guys ASPired2poll stores sensitive information under the web root with insufficient access control, which allows

The Net Guys ASPired2Protect stores sensitive information under the web root with insufficient access control, which all

evCal Events Calendar stores sensitive information under the web root with insufficient access control, which allows rem

MyCal Personal Events Calendar stores sensitive information under the web root with insufficient access control, which a

Unspecified vulnerability in Nagios before 3.0.6 has unspecified impact and remote attack vectors related to CGI program

CodefixerSoftware MailingListPro Free Edition stores sensitive information under the web root with insufficient access c

JBook stores sensitive information under the web root with insufficient access control, which allows remote attackers to

ASP Portal 3.2.5 stores sensitive information under the web root with insufficient access control, which allows remote a

Quick Tree View .NET 3.1 stores sensitive information under the web root with insufficient access control, which allows

Rapid Classified 3.1 and 3.15 stores sensitive information under the web root with insufficient access control, which al

Yaws before 1.80 allows remote attackers to cause a denial of service (memory consumption and crash) via a request with

Absolute path traversal vulnerability in MLDonkey 2.8.4 through 2.9.7 allows remote attackers to read arbitrary files vi

The FormWidgetChoice::loadDefaults function in Poppler before 0.10.4 allows remote attackers to cause a denial of servic

The JBIG2Stream::readSymbolDictSeg function in Poppler before 0.10.4 allows remote attackers to cause a denial of servic

The aspath_prepend function in rde_attr.c in bgpd in OpenBSD 4.3 and 4.4 allows remote attackers to cause a denial of se

The jumpUrl mechanism in class.tslib_fe.php in TYPO3 3.3.x through 3.8.x, 4.0 before 4.0.12, 4.1 before 4.1.10, 4.2 befo

Mozilla Firefox 2.0.0.20 and earlier allows remote attackers to cause a denial of service (application crash) via nested

BlogHelper stores common_db.inc under the web root with insufficient access control, which allows remote attackers to do

PollHelper stores poll.inc under the web root with insufficient access control, which allows remote attackers to downloa

QuoteBook stores quotes.inc under the web root with insufficient access control, which allows remote attackers to obtain

Team Board 1.x and 2.x stores sensitive information under the web root with insufficient access control, which allows re

Kipper 2.01 stores sensitive information under the web root with insufficient access control, which allows remote attack

dkim-milter 2.6.0 through 2.8.0 allows remote attackers to cause a denial of service (crash) by signing a message with a

Unspecified vulnerability in GreenSQL-Console before 0.3.5 allows attackers to obtain the "installation directory" via u

Social Site Generator (SSG) 2.0 allows remote attackers to read arbitrary files via the file parameter to (1) filedload.

Directory traversal vulnerability in passwiki.php in PassWiki 0.9.16 RC3 and earlier allows remote attackers to read arb

Cerberus Helpdesk before 4.0 (Build 600) allows remote attackers to obtain sensitive information via direct requests for

showme.php in CelerBB 0.0.2 allows remote attackers to obtain "reserved information" via the user parameter.

The request handler in JBossWS in JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP06 a

pHNews Alpha 1 stores sensitive information under the web root with insufficient access control, which allows remote att

The HRM-S service in Fujitsu Enhanced Support Facility 3.0 and 3.0.1 allows remote attackers to obtain (1) hardware and

Unspecified vulnerability in WMI Mapper for HP Systems Insight Manager before 2.5.2.0 allows remote attackers to obtain

The read_game_map function in src/terrain_translation.cpp in Wesnoth before r32987 allows remote attackers to cause a de

The CIM server in IBM Director before 5.20.3 Service Update 2 on Windows allows remote attackers to cause a denial of se

Directory traversal vulnerability in login.php in OneOrZero Helpdesk 1.6.5.7 and earlier allows remote attackers to read

Multiple unspecified vulnerabilities in ClanSphere before 2008.2.1 allow remote attackers to obtain sensitive informatio

Apple iTunes before 8.1 on Windows allows remote attackers to cause a denial of service (infinite loop) via a Digital Au

Directory traversal vulnerability in the media manager in Nucleus CMS before 3.40 allows remote attackers to read arbitr

Unspecified vulnerability in Tor before 0.2.0.34 allows attackers to cause a denial of service (infinite loop) via "corr

Unspecified vulnerability in Tor before 0.2.0.34 allows directory mirrors to cause a denial of service via unknown vecto

Unspecified vulnerability in Tor before 0.2.0.34 allows directory mirrors to cause a denial of service (exit node crash)

Wee Enhanced Environment for Chat (WeeChat) 0.2.6 allows remote attackers to cause a denial of service (crash) via an IR

Easy Content Management Publishing stores sensitive information under the web root with insufficient access control, whi

ASP User Engine.NET stores sensitive information under the web root with insufficient access control, which allows remot

Unspecified vulnerability in the Send by e-mail module in the "Printer, e-mail and PDF versions" module 5.x before 5.x-4

ParametersInterceptor in OpenSymphony XWork 2.0.x before 2.0.6 and 2.1.x before 2.1.2, as used in Apache Struts and othe

Multiple directory traversal vulnerabilities in Apache Struts 2.0.x before 2.0.12 and 2.1.x before 2.1.3 allow remote at

Unspecified vulnerability in phpBB before 3.0.4 allows attackers to bypass intended access restrictions and activate de-

Unspecified vulnerability in phpBB before 3.0.4 allows attackers to obtain sensitive information via unknown vectors rel

requests/status.xml in VLC 0.9.8a allows remote attackers to cause a denial of service (stack consumption and crash) via