Skip to content
OpenAdvisories

Archive

23 January 2009

Vulnerabilities first published on this day (UTC), newest first.

← December 2008 2009 / January /23 February 2009 →
  1. 1 
  2. 224
  3. 3 
  4. 4 
  5. 512
  6. 617
  7. 715
  8. 820
  9. 913
  10. 10 
  11. 11 
  12. 1219
  13. 134
  14. 1445
  15. 1524
  16. 1621
  17. 17 
  18. 18 
  19. 19 
  20. 2019
  21. 2138
  22. 2231
  23. 2321
  24. 24 
  25. 25 
  26. 2614
  27. 2744
  28. 2837
  29. 2928
  30. 3020
  31. 31 
All Critical High Medium Low Exploited only Public exploit

18 results · Clear filters · Feed

  • Unscored —
    CVE-2008-5959 Public exploit

    Multiple SQL injection vulnerabilities in start.asp in Active Test 2.1 allow remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2008-5949 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in ccTiddly 1.7.4 and 1.7.6 allow remote attackers to execute arbitr…

  • Unscored —
    CVE-2008-5962 Public exploit

    Directory traversal vulnerability in library/setup/rpc.php in Gravity Getting Things Done (GTD) 0.4.5 and earlier allow…

  • Unscored —
    CVE-2008-5948 Public exploit

    Directory traversal vulnerability in index.php in BNCwi 1.04 and earlier allows remote attackers to include and execute…

  • Unscored —
    CVE-2008-5958 Public exploit

    Multiple SQL injection vulnerabilities in Active Test 2.1 allow remote attackers to execute arbitrary SQL commands via …

  • Unscored —
    CVE-2008-5957 Public exploit

    SQL injection vulnerability in the Mydyngallery (com_mydyngallery) component 1.4.2 for Joomla! allows remote attackers …

  • Unscored —
    CVE-2008-5950 Public exploit

    SQL injection vulnerability in media/media_level.asp in ASP Template Creature allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2008-5956 Public exploit

    Wbstreet (aka PHPSTREET Webboard) 1.0 stores sensitive information under the web root with insufficient access control,…

  • Unscored —
    CVE-2008-5955 Public exploit

    SQL injection vulnerability in show.php in Wbstreet (aka PHPSTREET Webboard) 1.0 allows remote attackers to execute arb…

  • Unscored —
    CVE-2008-5951 Public exploit

    ASP Template Creature stores sensitive information under the web root with insufficient access control, which allows re…

  • Unscored —
    CVE-2008-5953 Public exploit

    Directory traversal vulnerability in KTP Computer Customer Database (KTPCCD) CMS, when magic_quotes_gpc is disabled, al…

  • Unscored —
    CVE-2008-5963 Public exploit

    Eval injection vulnerability in library/setup/rpc.php in Gravity Getting Things Done (GTD) 0.4.5 and earlier allows rem…

  • Unscored —
    CVE-2008-5954 Public exploit

    SQL injection vulnerability in KTP Computer Customer Database (KTPCCD) CMS, when magic_quotes_gpc is disabled, allows r…

  • Unscored —
    CVE-2008-5952 Public exploit

    SQL injection vulnerability in KTP Computer Customer Database (KTPCCD) CMS, when magic_quotes_gpc is disabled, allows r…

  • Unscored —
    CVE-2009-0263 Public exploit EPSS 17%

    Multiple buffer overflows in Winamp 5.541 and earlier allow remote attackers to cause a denial of service and possibly …

  • Medium —
    CVE-2009-0260 Public exploit

    MoinMoin Multiple cross-site scripting (XSS) vulnerabilities

    Multiple cross-site scripting (XSS) vulnerabilities in action/AttachFile.py in MoinMoin before 1.8.1 allow remote attackers to inject arbitrary web script or HTML via an AttachFile action to the WikiSandBox component with (1) the rename parameter or (2) the d…

    moin PyPI
  • Unscored —
    CVE-2009-0261 Public exploit EPSS 13%

    Stack-based buffer overflow in EffectMatrix Total Video Player 1.31 allows user-assisted attackers to execute arbitrary…

  • Unscored —
    CVE-2009-0262 Public exploit

    Stack-based buffer overflow in Triologic Media Player 7 and 8.0.0.0 allows user-assisted remote attackers to execute ar…