Skip to content
OpenAdvisories

Archive

18 February 2009

Vulnerabilities first published on this day (UTC), newest first.

16 results · Feed

  • Unscored —
    CVE-2009-0645 Public exploit

    Directory traversal vulnerability in index.php in Jaws 0.8.8 allows remote authenticated users to read arbitrary files …

  • Unscored —
    CVE-2009-0646 Public exploit

    Multiple SQL injection vulnerabilities in 4Site CMS 2.6 and earlier allow remote attackers to execute arbitrary SQL com…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in (1) acid_qry_main.php in Analysis Console for Intrusion Database…

  • Unscored —

    The HTTP interface in Swann DVR4-SecuraNet has a certain default administrative username and password, which makes it e…

  • Unscored —
    CVE-2008-6164 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in DreamCost HostAdmin 3.1.1 allows remote attackers to inject ar…

  • Unscored —
    CVE-2008-6163 Public exploit

    SQL injection vulnerability in www/delivery/ac.php in OpenX 2.6.1 allows remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2008-6162 Public exploit

    Bux.to Clone script allows remote attackers to bypass authentication and gain administrative access by setting the logg…

  • Unscored —
    CVE-2009-0641 Public exploit

    sys_term.c in telnetd in FreeBSD 7.0-RELEASE and other 7.x versions deletes dangerous environment variables with a meth…

  • Unscored —

    ext/openssl/ossl_ocsp.c in Ruby 1.8 and 1.9 does not properly check the return value from the OCSP_basic_verify functio…

  • Unscored —
    CVE-2009-0640 Public exploit

    Directory traversal vulnerability in the administrative web server in Swann DVR4-SecuraNet allows remote attackers to r…

  • Unscored —
    CVE-2009-0643 Public exploit

    Static code injection vulnerability in post.php in Simple PHP News 1.0 final allows remote attackers to inject arbitrar…

  • Unscored —

    Semantically-Interconnected Online Communities (SIOC) 5.x before 5.x-1.2 and 6.x before 6.x-1.1, a module for Drupal, d…

  • Unscored —

    Content Management Made Easy (CMME) 1.19 allows remote attackers to obtain system information via a direct request to i…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in WOW Raid Manager (WRM) before 3.5.1 allows remote attackers to inject arbit…

  • Unscored —
    CVE-2009-0639 Public exploit

    PHP remote file inclusion vulnerability in moduli/libri/index.php in phpyabs 0.1.2 allows remote attackers to execute a…

  • Unscored —

    Buffer overflow in SUSE blinux (aka sbl) in SUSE openSUSE 10.3 through 11.0 has unknown impact and attack vectors relat…