Skip to content
OpenAdvisories

Archive

4 February 2009

Vulnerabilities first published on this day (UTC), newest first.

← January 2009 2009 / February /4 March 2009 →
  1. 1 
  2. 225
  3. 351
  4. 421
  5. 540
  6. 650
  7. 7 
  8. 814
  9. 919
  10. 1040
  11. 1134
  12. 129
  13. 1338
  14. 148
  15. 15 
  16. 1628
  17. 1715
  18. 1816
  19. 1932
  20. 2051
  21. 216
  22. 2211
  23. 2328
  24. 2425
  25. 2536
  26. 2643
  27. 2745
  28. 28 
All Critical High Medium Low Exploited only Public exploit

21 results · Feed

  • Unscored —
    CVE-2009-0353

    Unspecified vulnerability in Mozilla Firefox 3.x before 3.0.6, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15…

  • Unscored —
    CVE-2009-0352

    Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.6, Thunderbird before 2.0.0.21, and SeaMonkey be…

  • Unscored —
    CVE-2009-0418

    The IPv6 Neighbor Discovery Protocol (NDP) implementation in HP HP-UX B.11.11, B.11.23, and B.11.31 does not validate t…

  • Unscored —
    CVE-2009-0419 EPSS 15%

    Microsoft XML Core Services, as used in Microsoft Expression Web, Office, Internet Explorer 6 and 7, and other products…

  • Unscored —
    CVE-2009-0357

    Mozilla Firefox before 3.0.6 and SeaMonkey before 1.1.15 do not properly restrict access from web pages to the (1) Set-…

  • Unscored —
    CVE-2009-0388 Public exploit EPSS 13%

    Multiple integer signedness errors in (1) UltraVNC 1.0.2 and 1.0.5 and (2) TightVnc 1.3.9 allow remote VNC servers to c…

  • Unscored —
    CVE-2009-0358

    Mozilla Firefox 3.x before 3.0.6 does not properly implement the (1) no-store and (2) no-cache Cache-Control directives…

  • Unscored —
    CVE-2009-0354

    Cross-domain vulnerability in js/src/jsobj.cpp in Mozilla Firefox 3.x before 3.0.6 allows remote attackers to bypass th…

  • Unscored —
    CVE-2009-0355

    components/sessionstore/src/nsSessionStore.js in Mozilla Firefox before 3.0.6 does not block changes of INPUT elements …

  • Unscored —
    CVE-2009-0356

    Mozilla Firefox before 3.0.6 and SeaMonkey do not block links to the (1) about:plugins and (2) about:config URIs from .…

  • Unscored —
    CVE-2008-6057 Public exploit

    Doug Luxem Liberum Help Desk 0.97.3 stores db/helpdesk2000.mdb under the web root with insufficient access control, whi…

  • Unscored —
    CVE-2008-6053

    PreProjects Pre Resume Submitter stores onlineresume.mdb under the web root with insufficient access control, which all…

  • Unscored —
    CVE-2008-6054

    PreProjects Pre Courier and Cargo Business stores dbcourior.mdb under the web root with insufficient access control, wh…

  • Unscored —
    CVE-2008-6052

    PreProjects Pre E-Learning Portal stores db_elearning.mdb under the web root with insufficient access control, which al…

  • Unscored —
    CVE-2008-6046

    SQL injection vulnerability in ADbNewsSender before 1.5.2 allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2008-6055

    PreProjects Pre Classified Listings stores pclasp.mdb under the web root with insufficient access control, which allows…

  • Unscored —
    CVE-2008-6056

    Multiple cross-site scripting (XSS) vulnerabilities in World Recipe 2.11 allow remote attackers to inject arbitrary web…

  • Unscored —
    CVE-2008-6047

    Cross-site scripting (XSS) vulnerability in ADbNewsSender before 1.5.2 allows remote attackers to inject arbitrary web …

  • Unscored —
    CVE-2008-6048

    Multiple cross-site request forgery (CSRF) vulnerabilities in TangoCMS before 2.2.0 allow remote attackers to hijack th…

  • Unscored —
    CVE-2008-6051

    MetaCart Free stores metacart.mdb under the web root with insufficient access control, which allows remote attackers to…

  • Unscored —
    CVE-2008-6050 Public exploit

    SQL injection vulnerability in the Tech Articles (com_tech_article) 1.0 component for Joomla! allows remote attackers t…