Skip to content
OpenAdvisories

Archive

9 February 2009

Vulnerabilities first published on this day (UTC), newest first.

← January 2009 2009 / February /9 March 2009 →
  1. 1 
  2. 225
  3. 351
  4. 421
  5. 540
  6. 650
  7. 7 
  8. 814
  9. 919
  10. 1040
  11. 1134
  12. 129
  13. 1338
  14. 148
  15. 15 
  16. 1628
  17. 1715
  18. 1816
  19. 1932
  20. 2051
  21. 216
  22. 2211
  23. 2328
  24. 2425
  25. 2536
  26. 2643
  27. 2745
  28. 28 
All Critical High Medium Low Exploited only Public exploit

19 results · Feed

  • Unscored —
    CVE-2009-0488

    Cross-site scripting (XSS) vulnerability in Phorum before 5.2.10 allows remote attackers to inject arbitrary web script…

  • Unscored —
    CVE-2009-0489

    The DBus configuration file for Wicd before 1.5.9 allows arbitrary users to own org.wicd.daemon, which allows local use…

  • Unscored —
    CVE-2009-0487

    Cross-site scripting (XSS) vulnerability in Mahara before 1.0.9 allows remote attackers to inject arbitrary web script …

  • Unscored —
    CVE-2008-6098

    Bugzilla 3.2 before 3.2 RC2, 3.0 before 3.0.6, 2.22 before 2.22.6, 2.20 before 2.20.7, and other versions after 2.17.4 …

  • Unscored —
    CVE-2008-6093 Public exploit

    SQL injection vulnerability in index.php in Noname CMS 1.0, when magic_quotes_gpc is disabled, allows remote attackers …

  • Unscored —
    CVE-2008-6096

    Cross-site scripting (XSS) vulnerability in Juniper NetScreen ScreenOS before 5.4r10, 6.0r6, and 6.1r2 allows remote at…

  • Unscored —
    CVE-2008-6095

    Cross-site scripting (XSS) vulnerability in surveillanceView.htm in OpenNMS 1.5.94 allows remote attackers to inject ar…

  • Unscored —
    CVE-2008-6091 Public exploit

    SQL injection vulnerability in plugins.php in BMForum 5.6, when magic_quotes_gpc is disabled, allows remote attackers t…

  • Unscored —
    CVE-2008-6094 Public exploit

    Cross-site scripting (XSS) vulnerability in user.do in Celoxis Technologies Celoxis allows remote attackers to inject a…

  • Unscored —
    CVE-2008-6097 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in WikyBlog before 1.7.1 allow remote attackers to inject arbitrary…

  • Unscored —
    CVE-2008-6092 Public exploit

    phpscripts Ranking Script allows remote attackers to bypass authentication and gain administrative access by sending an…

  • Unscored —
    CVE-2009-0485

    Cross-site request forgery (CSRF) vulnerability in Bugzilla 2.17 to 2.22.7, 3.0 before 3.0.7, 3.2 before 3.2.1, and 3.3…

  • Unscored —
    CVE-2009-0481

    Bugzilla 2.x before 2.22.7, 3.0 before 3.0.7, 3.2 before 3.2.1, and 3.3 before 3.3.2 allows remote authenticated users …

  • Unscored —
    CVE-2009-0482

    Cross-site request forgery (CSRF) vulnerability in Bugzilla before 3.2 before 3.2.1, 3.3 before 3.3.2, and other versio…

  • Unscored —
    CVE-2009-0483

    Cross-site request forgery (CSRF) vulnerability in Bugzilla 2.22 before 2.22.7, 3.0 before 3.0.7, 3.2 before 3.2.1, and…

  • Unscored —
    CVE-2009-0486

    Bugzilla 3.2.1, 3.0.7, and 3.3.2, when running under mod_perl, calls the srand function at startup time, which causes A…

  • Unscored —
    CVE-2009-0484

    Cross-site request forgery (CSRF) vulnerability in Bugzilla 3.0 before 3.0.7, 3.2 before 3.2.1, and 3.3 before 3.3.2 al…

  • Unscored —
    CVE-2009-0480

    The IP implementation in Sun Solaris 8 through 10, and OpenSolaris before snv_82, uses an improper arena when allocatin…

  • Unscored —
    CVE-2009-0479 Public exploit

    Multiple SQL injection vulnerabilities in admin/admin_login.php in Online Grades 3.2.4 allow remote attackers to execut…