Skip to content
OpenAdvisories

Archive

January 2009

Vulnerabilities first published in this month (UTC), newest first.

← December 2008 2009 / January February 2009 →
  1. 1 
  2. 224
  3. 3 
  4. 4 
  5. 512
  6. 617
  7. 715
  8. 820
  9. 913
  10. 10 
  11. 11 
  12. 1219
  13. 134
  14. 1445
  15. 1524
  16. 1621
  17. 17 
  18. 18 
  19. 19 
  20. 2019
  21. 2138
  22. 2231
  23. 2321
  24. 24 
  25. 25 
  26. 2614
  27. 2744
  28. 2837
  29. 2928
  30. 3020
  31. 31 
All Critical High Medium Low Exploited only Public exploit

466 results · Feed

  • Unscored —
    CVE-2008-5451

    Unspecified vulnerability in the JD Edwards Tools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOn…

  • Unscored —
    CVE-2008-5450

    Unspecified vulnerability in the Oracle Applications Platform Engineering component in Oracle E-Business Suite 11.5.10 …

  • Unscored —
    CVE-2008-5455

    Unspecified vulnerability in the PeopleSoft Enterprise HRMS - ePerformance component in Oracle PeopleSoft Enterprise an…

  • Unscored —
    CVE-2008-5457 Public exploit EPSS 61%

    Unspecified vulnerability in the Oracle BEA WebLogic Server Plugins for Apache, Sun and IIS web servers component in BE…

  • Unscored —
    CVE-2008-4006

    Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.1.0.3 allows remote attacker…

  • Unscored —
    CVE-2008-4015

    Unspecified vulnerability in the Oracle Streams component in Oracle Database 10.1.0.5 allows remote authenticated users…

  • Unscored —
    CVE-2008-3997

    Unspecified vulnerability in the Oracle OLAP component in Oracle Database 10.1.0.5 and 10.2.0.3 allows remote authentic…

  • Unscored —
    CVE-2008-3978

    Unspecified vulnerability in the Oracle Spatial component in Oracle Database 10.1.0.5 allows remote authenticated users…

  • Unscored —
    CVE-2008-3999

    Unspecified vulnerability in the Oracle OLAP component in Oracle Database 9.2.0.8, 9.2.0.8DV, and 10.1.0.5 allows remot…

  • Unscored —
    CVE-2008-3981

    Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.1.0.1 allows remote attacker…

  • Unscored —
    CVE-2008-3974

    Unspecified vulnerability in the Oracle OLAP component in Oracle Database 9.0.2.8 and 9.2.0.8DV allows remote authentic…

  • Unscored —
    CVE-2008-3979 Public exploit EPSS 32%

    Unspecified vulnerability in the Oracle Spatial component in Oracle Database 10.1.0.5 and 10.2.0.2 allows remote authen…

  • Unscored —
    CVE-2008-3973

    Unspecified vulnerability in the SQL*Plus Windows GUI component in Oracle Database allows local users to affect confide…

  • Unscored —
    CVE-2008-5442

    Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attacker…

  • Unscored —
    CVE-2008-5436

    Unspecified vulnerability in the Oracle OLAP component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.4 al…

  • Unscored —
    CVE-2008-5437

    Unspecified vulnerability in the Job Queue component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.…

  • Unscored —
    CVE-2008-5439

    Unspecified vulnerability in the SQL*Plus Windows GUI component in Oracle Database 10.2.0.4 allows remote authenticated…

  • Unscored —
    CVE-2008-5441

    Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attacker…

  • Unscored —
    CVE-2008-5449

    Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attacker…

  • Unscored —
    CVE-2008-5444 Public exploit EPSS 61%

    Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attacker…

  • Unscored —
    CVE-2008-5448 Public exploit EPSS 41%

    Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attacker…

  • Unscored —
    CVE-2008-5440 EPSS 12%

    Unspecified vulnerability in the TimesTen Data Server component in Oracle Database 7.0.5.0.0 allows remote attackers to…

  • Unscored —
    CVE-2008-4307

    Race condition in the do_setlk function in fs/nfs/file.c in the Linux kernel before 2.6.26 allows local users to cause …

  • Unscored —
    CVE-2008-5262

    Multiple stack-based buffer overflows in the iGetHdrHeader function in src-IL/src/il_hdr.c in DevIL 1.7.4 allow context…

    devil Debian
  • Unscored —
    CVE-2008-5517 Public exploit EPSS 12%

    The web interface in git (gitweb) 1.5.x before 1.5.6 allows remote attackers to execute arbitrary commands via shell me…

  • Unscored —
    CVE-2009-0024

    The sys_remap_file_pages function in mm/fremap.c in the Linux kernel before 2.6.24.1 allows local users to cause a deni…

  • Unscored —
    CVE-2008-5888 Public exploit

    Multiple SQL injection vulnerabilities in Click&Rank allow remote attackers to execute arbitrary SQL commands via the i…

  • Unscored —
    CVE-2008-5892 Public exploit

    Multiple SQL injection vulnerabilities in ClickAndEmail allow remote attackers to execute arbitrary SQL commands via (1…

  • Unscored —
    CVE-2008-5890 Public exploit

    SQL injection vulnerability in feeds.php in Injader before 2.1.2 allows remote attackers to execute arbitrary SQL comma…

  • Unscored —
    CVE-2008-5885 Public exploit

    The Net Guys ASPired2Quote stores sensitive information under the web root with insufficient access control, which allo…

  • Unscored —
    CVE-2008-5900 Public exploit

    CodeAvalanche Articles stores sensitive information under the web root with insufficient access control, which allows r…

  • Unscored —
    CVE-2008-5891 Public exploit

    Cross-site scripting (XSS) vulnerability in the profile editing functionality in Injader before 2.1.2 allows remote att…

  • Unscored —
    CVE-2008-5898 Public exploit

    CodeAvalanche Directory stores sensitive information under the web root with insufficient access control, which allows …

  • Unscored —
    CVE-2008-5883 Public exploit

    Absolute path traversal vulnerability in front-end/dir.php in mini-pub 0.3 and earlier allows remote attackers to list …

  • Unscored —
    CVE-2008-5896 Public exploit

    CodeAvalanche RateMySite stores sensitive information under the web root with insufficient access control, which allows…

  • Unscored —
    CVE-2008-5889 Public exploit

    Cross-site scripting (XSS) vulnerability in user.asp in Click&Rank allows remote attackers to inject arbitrary web scri…

  • Unscored —
    CVE-2008-5897 Public exploit

    CodeAvalanche FreeWallpaper stores sensitive information under the web root with insufficient access control, which all…

  • Unscored —
    CVE-2008-5901 Public exploit

    iyzi Forum 1.0 beta 3 stores sensitive information under the web root with insufficient access control, which allows re…

  • Unscored —
    CVE-2008-5894 Public exploit

    Directory traversal vulnerability in index.php in Mediatheka 4.2 allows remote attackers to include and execute arbitra…

  • Unscored —
    CVE-2008-5886 Public exploit

    TAKempis Discussion Web 4.0 stores sensitive information under the web root with insufficient access control, which all…