Skip to content
OpenAdvisories

Archive

February 2009

Vulnerabilities first published in this month (UTC), newest first.

← January 2009 2009 / February March 2009 →
  1. 1 
  2. 225
  3. 351
  4. 421
  5. 540
  6. 650
  7. 7 
  8. 814
  9. 919
  10. 1040
  11. 1134
  12. 129
  13. 1338
  14. 148
  15. 15 
  16. 1628
  17. 1715
  18. 1816
  19. 1932
  20. 2051
  21. 216
  22. 2211
  23. 2328
  24. 2425
  25. 2536
  26. 2643
  27. 2745
  28. 28 
All Critical High Medium Low Exploited only Public exploit

685 results · Feed

  • Unscored —
    CVE-2008-6317 Public exploit

    Directory traversal vulnerability in _conf/_php-core/common-tpl-vars.php in PHPmyGallery 1.5 beta allows remote attacke…

  • Unscored —
    CVE-2008-6318 Public exploit

    PHP remote file inclusion vulnerability in _conf/_php-core/common-tpl-vars.php in PHPmyGallery 1.5 beta allows remote a…

  • Unscored —
    CVE-2008-6308 Public exploit

    Multiple directory traversal vulnerabilities in Private Messaging System (PMS) 1.2.3 and earlier for PunBB allow remote…

  • Unscored —
    CVE-2008-6310 Public exploit

    SQL injection vulnerability in index.php in W3matter RevSense 1.0 allows remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2008-6309 Public exploit

    SQL injection vulnerability in index.php in W3matter AskPert allows remote attackers to execute arbitrary SQL commands …

  • Low —
    CVE-2008-4308

    Apache Tomcat information disclosure vulnerability

    The doRead method in Apache Tomcat 4.1.32 through 4.1.34 and 5.5.10 through 5.5.20 does not return a -1 to indicate when a certain error condition has occurred, which can cause Tomcat to send POST content from one request to a different request.

    org.apache.tomcat:tomcat Maven
  • Unscored —
    CVE-2008-6304

    SQL injection vulnerability in xt:Commerce before 3.0.4 Sp2.1, when magic_quotes_gpc is enabled and the SEO URLs are ac…

  • Unscored —
    CVE-2008-6306 Public exploit

    Cross-site scripting (XSS) vulnerability in signinform.php in Softbiz Classifieds Script allows remote attackers to inj…

  • Unscored —
    CVE-2008-6302 Public exploit

    TurnkeyForms Local Classifieds allows remote attackers to bypass authentication and gain administrative access via a di…

  • Unscored —
    CVE-2008-6305 Public exploit

    PHP remote file inclusion vulnerability in init.php in Free Directory Script 1.1.1, when register_globals is enabled, a…

  • Unscored —
    CVE-2008-6303 Public exploit

    SQL injection vulnerability in tourview.php in ToursManager allows remote attackers to execute arbitrary SQL commands v…

  • Unscored —
    CVE-2008-6307 Public exploit

    E-topbiz Link Back Checker 1 allows remote attackers to bypass authentication and gain administrative access by setting…

  • Unscored —
    CVE-2009-0208

    Unspecified vulnerability in HP Virtual Rooms Client before 7.0.1, when running on Windows, allows remote attackers to …

  • Unscored —
    CVE-2008-6298

    Unspecified vulnerability in sISAPILocation before 1.0.2.2 allows remote attackers to bypass intended access restrictio…

  • Unscored —
    CVE-2008-6294 Public exploit

    admin/Index.php in Acc Statistics 1.1 allows remote attackers to bypass authentication and gain administrative access b…

  • Unscored —
    CVE-2008-6297 Public exploit

    Cross-site scripting (XSS) vulnerability in order.php in DHCart allows remote attackers to inject arbitrary web script …

  • Unscored —
    CVE-2008-6293 Public exploit

    admin/Index.php in Acc Real Estate 4.0 allows remote attackers to bypass authentication and gain administrative access …

  • Unscored —
    CVE-2008-6289 Public exploit

    SQL injection vulnerability in cityview.php in Tours Manager 1.0 allows remote attackers to execute arbitrary SQL comma…

  • Unscored —
    CVE-2008-6299

    Multiple cross-site scripting (XSS) vulnerabilities in Joomla! 1.5.7 and earlier allow remote authenticated users with …

  • Unscored —
    CVE-2008-6300 Public exploit

    Galatolo WebManager 1.3a allows remote attackers to bypass authentication and gain administrative access by setting the…

  • Unscored —
    CVE-2008-6295

    Multiple cross-site scripting (XSS) vulnerabilities in Camera Life 2.6.2b8 allow remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2008-6292 Public exploit

    Acc Autos 4.0 allows remote attackers to bypass authentication and gain administrative access by setting the (1) userna…

  • Unscored —
    CVE-2008-6296 Public exploit

    admin.php in Maran PHP Shop allows remote attackers to bypass authentication and gain administrative access by setting …

  • Unscored —
    CVE-2008-6301 Public exploit

    SQL injection vulnerability in shoutbox_view.php in the Small ShoutBox module 1.4 for phpBB allows remote attackers to …

  • Unscored —
    CVE-2008-6290 Public exploit

    Directory traversal vulnerability in includefile.php in nicLOR Sito, when register_globals is enabled or magic_quotes_g…

  • Unscored —
    CVE-2008-6291 Public exploit

    Acc PHP eMail 1.1 allows remote attackers to bypass authentication and gain administrative access by setting the NEWSLE…

  • Unscored —
    CVE-2008-5263

    Multiple stack-based buffer overflows in the mt_codec::getHdrHead function in kernel/kls_hdr/fmt_codec_hdr.cpp in ksqui…

  • Unscored —
    CVE-2009-0520 Public exploit EPSS 28%

    Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 does not properly remove references to destroyed obj…

  • Unscored —
    CVE-2009-0621

    Cisco ACE 4710 Application Control Engine Appliance before A1(8a) uses default (1) usernames and (2) passwords for (a) …

  • Unscored —
    CVE-2009-0522

    Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 on Windows allows remote attackers to trick a user i…

  • Unscored —
    CVE-2009-0622

    Unspecified vulnerability in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers be…

  • Unscored —
    CVE-2009-0114

    Unspecified vulnerability in the Settings Manager in Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87…

  • Unscored —
    CVE-2009-0617

    Cisco Application Networking Manager (ANM) before 2.0 uses a default MySQL root password, which makes it easier for rem…

  • Unscored —
    CVE-2009-0187 Public exploit EPSS 40%

    Stack-based buffer overflow in Orbit Downloader 2.8.2 and 2.8.3, and possibly other versions before 2.8.5, allows remot…

  • Unscored —
    CVE-2009-0521

    Untrusted search path vulnerability in Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 on Linux allo…

  • Unscored —
    CVE-2009-0614

    Unspecified vulnerability in the Web Server in Cisco Unified MeetingPlace Web Conferencing 6.0 before 6.0(517.0) (aka 6…

  • Unscored —
    CVE-2009-0618

    Unspecified vulnerability in the Java agent in Cisco Application Networking Manager (ANM) before 2.0 Update A allows re…

  • Unscored —
    CVE-2009-0507

    IBM WebSphere Process Server (WPS) 6.1.2 before 6.1.2.3 and 6.2 before 6.2.0.1 does not properly restrict configuration…

  • Unscored —
    CVE-2009-0623

    Unspecified vulnerability in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers be…

  • Unscored —
    CVE-2009-0524

    Cross-site scripting (XSS) vulnerability in Adobe RoboHelp 6 and 7, and RoboHelp Server 6 and 7, allows remote attacker…