Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
fedoraproject fedora 9 vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2008-2575
cbrPager prior to 0.9.17 allows user-assisted remote malicious users to execute arbitrary commands via shell metacharacters in a (1) ZIP (aka .cbz) or (2) RAR (aka .cbr) archive filename.
Jcoppens Cbrpager
Fedoraproject Fedora 9
Fedoraproject Fedora 8
Fedoraproject Fedora 7
NA
CVE-2009-1902
The multipart processor in ModSecurity prior to 2.5.9 allows remote malicious users to cause a denial of service (crash) via a multipart form datapost request with a missing part header name, which triggers a NULL pointer dereference.
Trustwave Modsecurity
Fedoraproject Fedora 10
Fedoraproject Fedora 9
1 EDB exploit
NA
CVE-2009-1903
The PDF XSS protection feature in ModSecurity prior to 2.5.8 allows remote malicious users to cause a denial of service (Apache httpd crash) via a request for a PDF file that does not use the GET method.
Trustwave Modsecurity
Fedoraproject Fedora 10
Fedoraproject Fedora 9
NA
CVE-2008-3218
Multiple cross-site scripting (XSS) vulnerabilities in Drupal 6.x prior to 6.3 allow remote malicious users to inject arbitrary web script or HTML via vectors related to (1) free tagging taxonomy terms, which are not properly handled on node preview pages, and (2) unspecified Ope...
Drupal Drupal
Fedoraproject Fedora 9
Fedoraproject Fedora 8
NA
CVE-2008-3219
The Drupal filter_xss_admin function in 5.x prior to 5.8 and 6.x prior to 6.3 does not "prevent use of the object HTML tag in administrator input," which has unknown impact and attack vectors, probably related to an insufficient cross-site scripting (XSS) protection mec...
Drupal Drupal
Fedoraproject Fedora 9
Fedoraproject Fedora 8
NA
CVE-2008-3220
Cross-site request forgery (CSRF) vulnerability in Drupal 5.x prior to 5.8 and 6.x prior to 6.3 allows remote malicious users to perform administrative actions via vectors involving deletion of "translated strings."
Drupal Drupal
Fedoraproject Fedora 9
Fedoraproject Fedora 8
NA
CVE-2008-3222
Session fixation vulnerability in Drupal 5.x prior to 5.9 and 6.x prior to 6.3, when contributed modules "terminate the current request during a login event," allows remote malicious users to hijack web sessions via unknown vectors.
Drupal Drupal
Fedoraproject Fedora 9
Fedoraproject Fedora 8
6.1
CVSSv3
CVE-2008-2951
Open redirect vulnerability in the search script in Trac prior to 0.10.5 allows remote malicious users to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the q parameter, possibly related to the quickjump function.
Edgewall Trac
Fedoraproject Fedora 9
Fedoraproject Fedora 8
NA
CVE-2008-3221
Cross-site request forgery (CSRF) vulnerability in Drupal 6.x prior to 6.3 allows remote malicious users to perform administrative actions via vectors involving deletion of OpenID identities.
Drupal Drupal
Fedoraproject Fedora 9
Fedoraproject Fedora 8
NA
CVE-2008-3223
SQL injection vulnerability in the Schema API in Drupal 6.x prior to 6.3 allows remote malicious users to execute arbitrary SQL commands via vectors related to "an inappropriate placeholder for 'numeric' fields."
Drupal Drupal
Fedoraproject Fedora 9
Fedoraproject Fedora 8
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
type confusion
IMAP
CVE-2024-36103
CVE-2024-28995
CVE-2024-37325
CVE-2024-30078
CVE-2024-30082
SQL injection
CVE-2024-30052
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
4
5
6
NEXT »