Skip to content
OpenAdvisories

Archive

5 January 2009

Vulnerabilities first published on this day (UTC), newest first.

  1. 1 
  2. 224
  3. 3 
  4. 4 
  5. 512
  6. 617
  7. 715
  8. 820
  9. 913
  10. 10 
  11. 11 
  12. 1219
  13. 134
  14. 1445
  15. 1524
  16. 1621
  17. 17 
  18. 18 
  19. 19 
  20. 2019
  21. 2138
  22. 2231
  23. 2321
  24. 24 
  25. 25 
  26. 2614
  27. 2744
  28. 2837
  29. 2928
  30. 3020
  31. 31 

12 results · Feed

  • Critical 9.8
    CVE-2004-2761 Public exploit EPSS 10%

    The MD5 Message-Digest Algorithm is not collision resistant, which makes it easier for context-dependent attackers to c…

  • Unscored —

    Multiple untrusted search path vulnerabilities in pdfjam allow local users to gain privileges via a Trojan horse progra…

  • Unscored —
    CVE-2008-5847 Public exploit

    Constructr CMS 3.02.5 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent att…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Six Apart Movable Type (MT) before 4.23 allow remote attackers t…

  • Unscored —

    PHP 5.2.7 contains an incorrect change to the FILTER_UNSAFE_RAW functionality, and unintentionally disables magic_quote…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Fujitsu-Siemens WebTransactions 7.0, 7.1, and possibly other ver…

  • Unscored —

    Six Apart Movable Type (MT) before 4.23 allows remote authenticated users with create permission for posts to bypass in…

  • Unscored —

    Samba 3.2.0 through 3.2.6, when registry shares are enabled, allows remote authenticated users to access the root files…

  • Unscored —
    CVE-2008-5839 Public exploit

    Buffer overflow in Foxmail 6.5 allows remote attackers to execute arbitrary code via a long mailto URI in the HREF attr…

  • Unscored —
    CVE-2008-5840 Public exploit

    PHP iCalendar 2.24 and earlier allows remote attackers to bypass authentication by setting the phpicalendar and phpical…

  • Unscored —
    CVE-2008-5838 Public exploit

    SQL injection vulnerability in search_results.php in E-Php Scripts E-Shop (aka E-Php Shopping Cart) Shopping Cart Scrip…

  • Unscored —
    CVE-2008-5841 Public exploit

    Multiple SQL injection vulnerabilities in iGaming 1.5 and earlier allow remote attackers to execute arbitrary SQL comma…