Skip to content
OpenAdvisories

Archive

17 February 2009

Vulnerabilities first published on this day (UTC), newest first.

15 results · Feed

  • Unscored —

    Unspecified vulnerability in the Performance Monitoring Infrastructure (PMI) feature in the Servlet Engine/Web Containe…

  • Unscored —
    CVE-2008-6157 Public exploit

    SepCity Classified Ads stores the admin password in cleartext in data/classifieds.mdb, which allows context-dependent a…

  • Unscored —
    CVE-2008-6158 Public exploit

    Multiple unspecified vulnerabilities in the admin backend in w3b>cms (aka w3blabor CMS) before 3.2.0 have unknown impac…

  • Unscored —
    CVE-2009-0611 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in qfsearch/AdminServlet in QuickFinder Server in Novell Open Enter…

  • Unscored —
    CVE-2009-0610 Public exploit

    Multiple static code injection vulnerabilities in post.php in Simple PHP News 1.0 final allow remote attackers to injec…

  • Unscored —

    Multiple buffer overflows in (a) BarnOwl before 1.0.5 and (b) owl 2.1.11 allow remote attackers to execute arbitrary co…

  • Unscored —

    Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 3.x and InterScan Web Security Suite (IWSS) 3.x, when basi…

  • Unscored —

    Sun Java System Directory Proxy Server in Sun Java System Directory Server Enterprise Edition 6.0 through 6.3, when a J…

  • Unscored —

    Multiple integer overflows in malloc_leak.c in Bionic in Open Handset Alliance Android 1.0 have unknown impact and atta…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Samizdat before 0.6.2 allow remote authenticated users to inject…

  • Unscored —

    The link_image function in linker/linker.c in the dynamic linker in Bionic in Open Handset Alliance Android 1.0 on the …

  • Unscored —

    WSPolicy in the Web Services component in IBM WebSphere Application Server (WAS) 7.0.x before 7.0.0.1 does not properly…

  • Unscored —

    Integer overflow in the showLog function in fake_log_device.c in liblog in Open Handset Alliance Android 1.0 allows att…

  • Unscored —

    Trend Micro InterScan Web Security Suite (IWSS) 3.1 before build 1237 allows remote authenticated Auditor and Report On…

  • Unscored —

    Stack consumption vulnerability in the do_page_fault function in arch/x86/mm/fault.c in the Linux kernel before 2.6.28.…