Vuldb Updates

A vulnerability was found in pixaria Pixaria Gallery up to 2.3.5. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file pixaria.image.php. The manipulation of the argument file leads to path traversal. This vulnerability is known as CVE-2009-2922. The attack can be launched remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as problematic, was found in Microsoft Internet Explorer 7/8 on Win XP. Affected is an unknown function in the library mshtml.dll. The manipulation of the argument second leads to improper input validation. This vulnerability is traded as CVE-2009-2655. It is possible to launch the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Scripteen Free Image Hosting Script 2.3. It has been classified as critical. Affected is an unknown function of the file header.php. The manipulation leads to sql injection. This vulnerability is traded as CVE-2009-2892. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as critical, has been found in Alexandre Amaral XOOPS Celepar 1.0.1. This issue affects some unknown processing of the file aviso.php. The manipulation of the argument cod_categoria leads to sql injection. The identification of this vulnerability is CVE-2009-4698. The attack may be initiated remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as problematic, has been found in Mozilla Firefox up to 3.5.1. Affected by this issue is some unknown functionality of the component Proxy Server. The manipulation leads to improper input validation. This vulnerability is handled as CVE-2009-2470. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as very critical, was found in Subversion up to 0.35.0. Affected is an unknown function. The manipulation leads to numeric error. This vulnerability is traded as CVE-2009-2411. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Mozilla Firefox 3.5. It has been declared as very critical. This vulnerability affects the function escape. The manipulation leads to code injection. This vulnerability was named CVE-2009-2477. The attack can be initiated remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in DameWare Mini Remote Control up to 4.9.0. This affects the function lstrcpyA of the component User ID Handler. The manipulation leads to memory corruption. This vulnerability is uniquely identified as CVE-2005-2842. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Web Reference Database up to 0.9.6. This affects an unknown part of the file install.php. The manipulation of the argument adminPassword leads to os command injection. This vulnerability is uniquely identified as CVE-2015-6008. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability has been found in Web Reference Database up to 0.9.6 and classified as critical. This vulnerability affects unknown code of the file rss.php/search.php. The manipulation of the argument where/sqlQuery leads to sql injection. This vulnerability was named CVE-2015-6009. The attack can be initiated remotely. Furthermore, there is an exploit available.

A vulnerability has been found in ZyXEL PMG5318-B20A up to 1.00 and classified as critical. Affected by this vulnerability is an unknown functionality of the component diagnostic-ping. The manipulation of the argument PingIPAddr leads to improper access controls. This vulnerability is known as CVE-2015-6018. The attack can be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, was found in Chyrp 2.0/2.1. Affected is an unknown function. The manipulation of the argument body leads to cross site scripting. This vulnerability is traded as CVE-2011-2743. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as critical, has been found in Hughes mSQL 2.0/2.0.10. Affected by this issue is some unknown functionality of the file w3-msql. The manipulation leads to improper privilege management. This vulnerability is handled as CVE-1999-0753. The attack may be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Oracle Rapid Planning 12.1/12.2. It has been declared as very critical. Affected by this vulnerability is an unknown functionality of the component Middle Tier. The manipulation leads to improper access controls. This vulnerability is known as CVE-2019-2729. The attack can be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in mpg123 0.59r/0.59s. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file httpget.c of the component HTTP Request Handler. The manipulation leads to memory corruption. This vulnerability is known as CVE-2003-0865. The attack can be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, has been found in Linux Kernel up to 4.15.4. Affected by this issue is the function show_floppy of the file drivers/block/floppy.c of the component Floppy Driver. The manipulation as part of Variable leads to information disclosure (KASLR). This vulnerability is handled as CVE-2018-7273. An attack has to be approached locally. Furthermore, there is an exploit available.

A vulnerability was found in Belkin F5D7230-4 9.01.10. It has been rated as very critical. This issue affects some unknown processing. The manipulation leads to improper access controls. The identification of this vulnerability is CVE-2008-1242. The attack may be initiated remotely. Furthermore, there is an exploit available.

A vulnerability was found in ESRI ArcGIS 10.1. It has been classified as critical. Affected is an unknown function. The manipulation of the argument where leads to sql injection. This vulnerability is traded as CVE-2012-4949. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

A vulnerability was found in Larry Wall Perl 5.4.5/5.5/5.5.3/5.6 and classified as critical. This issue affects some unknown processing of the file /bin/mail. The manipulation of the argument interactive with the input ~! as part of Environment Variable leads to improper privilege management. The identification of this vulnerability is CVE-2000-0703. The attack needs to be approached locally. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in PineApp Mail-SeCure. Affected by this issue is some unknown functionality of the component Networking. The manipulation of the argument pinghost leads to code injection. This vulnerability is handled as CVE-2013-6829. The attack may be launched remotely. Furthermore, there is an exploit available.