Skip to content
OpenAdvisories

Archive

21 January 2009

Vulnerabilities first published on this day (UTC), newest first.

← December 2008 2009 / January /21 February 2009 →
  1. 1 
  2. 224
  3. 3 
  4. 4 
  5. 512
  6. 617
  7. 715
  8. 820
  9. 913
  10. 10 
  11. 11 
  12. 1219
  13. 134
  14. 1445
  15. 1524
  16. 1621
  17. 17 
  18. 18 
  19. 19 
  20. 2019
  21. 2138
  22. 2231
  23. 2321
  24. 24 
  25. 25 
  26. 2614
  27. 2744
  28. 2837
  29. 2928
  30. 3020
  31. 31 
All Critical High Medium Low Exploited only Public exploit

17 results · Clear filters · Feed

  • Medium —
    CVE-2009-0026 Public exploit EPSS 27%

    Apache Jackrabbit contains Cross-site Scripting

    Multiple cross-site scripting (XSS) vulnerabilities in Apache Jackrabbit before 1.5.2 allow remote attackers to inject arbitrary web script or HTML via the q parameter to (1) search.jsp or (2) swr.jsp.

    org.apache.jackrabbit:jackrabbit Maven
  • Unscored —
    CVE-2008-5921 Public exploit

    SQL injection vulnerability in albums.php in Umer Inc Songs Portal allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2008-5922 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in themes/default/index.php in Cant Find A Gaming CMS (CFAGCMS) 1 al…

  • Unscored —
    CVE-2008-5931 Public exploit

    The Net Guys ASPired2Blog stores sensitive information under the web root with insufficient access control, which allow…

  • Unscored —
    CVE-2008-5934 Public exploit

    SQL injection vulnerability in index.php in CMS ISWEB 3.0 allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2008-5928 Public exploit

    SQL injection vulnerability in redir.php in Free Links Directory Script (FLDS) 1.2a allows remote attackers to execute …

  • Unscored —
    CVE-2008-5930 Public exploit

    SQL injection vulnerability in admin/blog_comments.asp in The Net Guys ASPired2Blog allows remote attackers to execute …

  • Unscored —
    CVE-2008-5932 Public exploit

    CodeAvalanche FreeForum stores sensitive information under the web root with insufficient access control, which allows …

  • Unscored —
    CVE-2008-5929 Public exploit

    VP-ASP Shopping Cart 6.50 stores sensitive information under the web root with insufficient access control, which allow…

  • Unscored —
    CVE-2008-5927 Public exploit

    Multiple SQL injection vulnerabilities in admin/usercheck.php in FlexPHPNews 0.0.6 allow remote attackers to execute ar…

  • Unscored —
    CVE-2008-5933 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in index.php in CMS ISWEB 3.0 allow remote attackers to inject arbi…

  • Unscored —
    CVE-2008-5926 Public exploit

    Multiple SQL injection vulnerabilities in login.asp in ASP-DEv Internal E-Mail System allow remote attackers to execute…

  • Unscored —
    CVE-2008-5923 Public exploit

    SQL injection vulnerability in default.asp in ASP-DEv XM Events Diary allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2009-0241 Public exploit

    Stack-based buffer overflow in the process_path function in gmetad/server.c in Ganglia 3.1.1 allows remote attackers to…

  • Unscored —
    CVE-2008-5919 Public exploit

    Directory traversal vulnerability in rss.php in WebSVN 2.0 and earlier, when magic_quotes_gpc is disabled, allows remot…

  • Unscored —
    CVE-2008-5920 Public exploit

    The create_anchors function in utils.inc in WebSVN 1.x allows remote attackers to execute arbitrary PHP code via a craf…

  • Unscored —
    CVE-2008-5918 Public exploit

    Cross-site scripting (XSS) vulnerability in the getParameterisedSelfUrl function in index.php in WebSVN 2.0 and earlier…