Skip to content
OpenAdvisories

Archive

January 2009

Vulnerabilities first published in this month (UTC), newest first.

← December 2008 2009 / January February 2009 →
  1. 1 
  2. 224
  3. 3 
  4. 4 
  5. 512
  6. 617
  7. 715
  8. 820
  9. 913
  10. 10 
  11. 11 
  12. 1219
  13. 134
  14. 1445
  15. 1524
  16. 1621
  17. 17 
  18. 18 
  19. 19 
  20. 2019
  21. 2138
  22. 2231
  23. 2321
  24. 24 
  25. 25 
  26. 2614
  27. 2744
  28. 2837
  29. 2928
  30. 3020
  31. 31 
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High —
    CVE-2009-0258

    Indexed Search Engine for TYPO3 Command Execution via Metacharacter Injection

    The Indexed Search Engine (indexed_search) system extension in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allows remote attackers to execute arbitrary commands via a crafted filename containing shell metacharacters, which is not p…

    typo3/cms Packagist
  • High —
    CVE-2009-0256

    Authentication library in TYPO3 vulnerable to session fixation

    Session fixation vulnerability in the authentication library in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allows remote attackers to hijack web sessions via unspecified vectors related to (1) frontend and (2) backend authenticati…

    typo3/cms Packagist
  • High 7.5
    CVE-2009-0130

    lib/crypto/c_src/crypto_drv.c in erlang does not properly check the return value from the OpenSSL DSA_do_verify functio…

    erlang Debian
  • High 7.5
    CVE-2003-1567 EPSS 25%

    The undocumented TRACK method in Microsoft Internet Information Services (IIS) 5.0 returns the content of the original …