Skip to content
OpenAdvisories

Archive

2 March 2009

Vulnerabilities first published on this day (UTC), newest first.

← February 2009 2009 / March /2 April 2009 →
  1. 1 
  2. 250
  3. 320
  4. 419
  5. 532
  6. 641
  7. 7 
  8. 8 
  9. 924
  10. 1019
  11. 1113
  12. 1217
  13. 1321
  14. 149
  15. 15 
  16. 1617
  17. 1711
  18. 1819
  19. 1915
  20. 2031
  21. 21 
  22. 22 
  23. 2319
  24. 2427
  25. 2558
  26. 2613
  27. 2715
  28. 28 
  29. 29 
  30. 3028
  31. 3135
All Critical High Medium Low Exploited only Public exploit

50 results · Feed

  • Unscored —
    CVE-2009-0750 Public exploit

    SQL injection vulnerability in login.php in the smNews example script for txtSQL 2.2 Final allows remote attackers to e…

  • Unscored —
    CVE-2009-0751 Public exploit EPSS 10%

    Yaws before 1.80 allows remote attackers to cause a denial of service (memory consumption and crash) via a request with…

    yaws Debian
  • Unscored —
    CVE-2009-0368 Public exploit

    OpenSC before 0.11.7 allows physically proximate attackers to bypass intended PIN requirements and read private data ob…

    opensc Debian
  • Unscored —
    CVE-2009-0749

    Use-after-free vulnerability in the GIFReadNextExtension function in lib/pngxtern/gif/gifread.c in OptiPNG 0.6.2 and ea…

    optipng Debian
  • Unscored —
    CVE-2008-6383

    SQL injection vulnerability in SpeedTech Organization and Resource Manager (Storm) 5.x before 5.x-1.14 and 6.x before 6…

    Web / CMS
  • Unscored —
    CVE-2008-6380 Public exploit

    SQL injection vulnerability in default.aspx in Active Web Helpdesk 2.0 allows remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2008-6389 Public exploit

    SQL injection vulnerability in asadmin/default.asp in Rae Media Contact Management Software SOHO, Standard, and Enterpr…

  • Unscored —
    CVE-2008-6387 Public exploit

    Quick Tree View .NET 3.1 stores sensitive information under the web root with insufficient access control, which allows…

  • Unscored —
    CVE-2008-6375

    JBook stores sensitive information under the web root with insufficient access control, which allows remote attackers t…

  • Unscored —
    CVE-2008-6376 Public exploit

    SQL injection vulnerability in main.asp in Jbook allows remote attackers to execute arbitrary SQL commands via the pass…

  • Unscored —
    CVE-2008-6367 Public exploit

    Unrestricted file upload vulnerability in Photos/create_album.php in Social Groupie allows remote authenticated users t…

  • Unscored —
    CVE-2008-6390 Public exploit

    SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2008-6374 Public exploit

    CodefixerSoftware MailingListPro Free Edition stores sensitive information under the web root with insufficient access …

  • Unscored —
    CVE-2008-6377 Public exploit

    PHP remote file inclusion vulnerability in include/global.php in Multi SEO phpBB 1.1.0 allows remote attackers to execu…

  • Unscored —
    CVE-2008-6372 Public exploit

    SQL injection vulnerability in default.asp in Ocean12 FAQ Manager Pro 1.0 allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2008-6373

    Unspecified vulnerability in Nagios before 3.0.6 has unspecified impact and remote attack vectors related to CGI progra…

  • Unscored —
    CVE-2008-6368

    SQL injection vulnerability in index.php in Chipmunk Guestbook 1.4m allows remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2008-6388 Public exploit

    Rapid Classified 3.1 and 3.15 stores sensitive information under the web root with insufficient access control, which a…

  • Unscored —
    CVE-2008-6379 Public exploit

    SQL injection vulnerability in pics_pre.asp in Gallery MX 2.0.0 allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2008-6384

    Multiple cross-site request forgery (CSRF) vulnerabilities in Comment Mail 5.x before 5.x-1.1, a module for Drupal, all…

    Web / CMS
  • Unscored —
    CVE-2008-6369 Public exploit

    SQL injection vulnerability in default.asp in Ocean12 Contact Manager Pro 1.02 allows remote attackers to execute arbit…

  • Unscored —
    CVE-2008-6378 Public exploit

    SQL injection vulnerability in calendar_Eventupdate.asp in Calendar Mx Professional 2.0.0 allows remote attackers to ex…

  • Unscored —
    CVE-2008-6371 Public exploit

    SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2008-6385 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in W3matter RevSense 1.0 allows remote attackers to inject arbitr…

  • Unscored —
    CVE-2008-6370 Public exploit

    Cross-site scripting (XSS) vulnerability in default.asp in Ocean12 Contact Manager Pro 1.02 allows remote attackers to …

  • Unscored —
    CVE-2008-6386 Public exploit

    Cross-site scripting (XSS) vulnerability in showads.php in Z1Exchange 1.0 allows remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2008-6391 Public exploit

    SQL injection vulnerability in main.asp in Jbook allows remote attackers to execute arbitrary SQL commands via the user…

  • Unscored —
    CVE-2008-6392 Public exploit

    SQL injection vulnerability in showads.php in Z1Exchange allows remote attackers to execute arbitrary SQL commands via …

  • Unscored —
    CVE-2008-6381 Public exploit

    SQL injection vulnerability in modules/adresses/viewcat.php in bcoos 1.0.13, and possibly earlier, allows remote authen…

  • Unscored —
    CVE-2008-6382 Public exploit

    ASP Portal 3.2.5 stores sensitive information under the web root with insufficient access control, which allows remote …

  • Unscored —
    CVE-2008-6366 Public exploit

    SQL injection vulnerability in logon.jsp in Ad Server Solutions Affiliate Software Java 4.0 allows remote attackers to …

  • Unscored —
    CVE-2008-6349 Public exploit

    SQL injection vulnerability in survey_results_text.php in TurnkeyForms Business Survey Pro 1.0 allows remote attackers …

  • Unscored —
    CVE-2008-6358 Public exploit

    SQL injection vulnerability in group_index.php in Social Groupie allows remote attackers to execute arbitrary SQL comma…

  • Unscored —
    CVE-2008-6350 Public exploit

    SQL injection vulnerability in listtest.php in TurnkeyForms Local Classifieds allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2008-6357 Public exploit

    MyCal Personal Events Calendar stores sensitive information under the web root with insufficient access control, which …

  • Unscored —
    CVE-2008-6355 Public exploit

    The Net Guys ASPired2Protect stores sensitive information under the web root with insufficient access control, which al…

  • Unscored —
    CVE-2008-6362 Public exploit

    SQL injection vulnerability in sitepage.php in Multiple Membership Script 2.5 allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2008-6363 Public exploit

    Stack-based buffer overflow in DesignWorks Professional 4.3.1 and 5.0.7 allows remote attackers to execute arbitrary co…

  • Unscored —
    CVE-2008-6351 Public exploit

    Cross-site scripting (XSS) vulnerability in listtest.php in TurnkeyForms Local Classifieds allows remote attackers to i…

  • Unscored —
    CVE-2008-6361 Public exploit

    Directory traversal vulnerability in index.php in InSun Feed CMS 1.7.3 19Beta allows remote attackers to include and ex…