Skip to content
OpenAdvisories

Archive

10 February 2009

Vulnerabilities first published on this day (UTC), newest first.

16 results · Clear filters · Feed

  • Unscored —
    CVE-2009-0076 Public exploit EPSS 34%

    Microsoft Internet Explorer 7, when XHTML strict mode is used, allows remote attackers to execute arbitrary code via th…

  • Unscored —
    CVE-2009-0075 Public exploit EPSS 85%

    Microsoft Internet Explorer 7 does not properly handle errors during attempted access to deleted objects, which allows …

  • Unscored —
    CVE-2008-6099 Public exploit

    PHP remote file inclusion vulnerability in index.php in RPortal 1.1 and earlier allows remote attackers to execute arbi…

  • Unscored —
    CVE-2008-6103 Public exploit

    PHP remote file inclusion vulnerability in index.php in A4Desk Event Calendar, when magic_quotes_gpc is disabled, allow…

  • Unscored —
    CVE-2008-6102 Public exploit

    SQL injection vulnerability in ratelink.php in Link Trader Script allows remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2008-6101 Public exploit

    SQL injection vulnerability in click.php in Adult Banner Exchange Website allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2008-6100 Public exploit

    Multiple SQL injection vulnerabilities in Discussion Forums 2k 3.3, when magic_quotes_gpc is disabled, allow remote att…

  • Unscored —
    CVE-2008-6104 Public exploit

    SQL injection vulnerability in A4Desk PHP Event Calendar allows remote attackers to execute arbitrary SQL commands via …

  • Unscored —
    CVE-2009-0491 Public exploit

    Stack-based buffer overflow in Elecard MPEG Player 5.5 build 15884.081218 allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2009-0497 Public exploit

    Directory traversal vulnerability in log.jsp in Ignite Realtime Openfire 3.6.2 allows remote attackers to read arbitrar…

  • Unscored —
    CVE-2009-0490 Public exploit EPSS 17%

    Stack-based buffer overflow in the String_parse::get_nonspace_quoted function in lib-src/allegro/strparse.cpp in Audaci…

  • Unscored —
    CVE-2009-0496 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Ignite Realtime Openfire 3.6.2 allow remote attackers to inject …

  • Unscored —
    CVE-2009-0498 Public exploit

    Virtual GuestBook (vgbook) 2.1 stores sensitive information under the web root with insufficient access control, which …

  • Unscored —
    CVE-2009-0494 Public exploit

    SQL injection vulnerability in the Portfol (com_portfol) 1.2 component for Joomla! allows remote attackers to execute a…

  • Unscored —
    CVE-2009-0493 Public exploit

    SQL injection vulnerability in login.php in IT!CMS 2.1a and earlier allows remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2009-0495 Public exploit

    PHP remote file inclusion vulnerability in include/define.php in REALTOR 747 4.11 allows remote attackers to execute ar…