Skip to content
OpenAdvisories

Archive

4 March 2009

Vulnerabilities first published on this day (UTC), newest first.

← February 2009 2009 / March /4 April 2009 →
  1. 1 
  2. 250
  3. 320
  4. 419
  5. 532
  6. 641
  7. 7 
  8. 8 
  9. 924
  10. 1019
  11. 1113
  12. 1217
  13. 1321
  14. 149
  15. 15 
  16. 1617
  17. 1711
  18. 1819
  19. 1915
  20. 2031
  21. 21 
  22. 22 
  23. 2319
  24. 2427
  25. 2558
  26. 2613
  27. 2715
  28. 28 
  29. 29 
  30. 3028
  31. 3135
All Critical High Medium Low Exploited only Public exploit

19 results · Feed

  • Unscored —
    CVE-2008-6394 Public exploit

    SQL injection vulnerability in core/user.php in CS-Cart 1.3.5 and earlier allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2008-6396 Public exploit

    Cross-site scripting (XSS) vulnerability in account.php in Celerondude Uploader 6.1 allows remote attackers to inject a…

  • Unscored —
    CVE-2008-6395

    The web management interface in 3Com Wireless 8760 Dual Radio 11a/b/g PoE Access Point allows remote attackers to cause…

  • Unscored —
    CVE-2008-6397

    rlatex in AlcoveBook sgml2x 1.0.0 allows local users to overwrite arbitrary files via a symlink attack on temporary fil…

    sgml2x Debian
  • Unscored —
    CVE-2008-6398

    sng_regress in SNG 1.0.2 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/recompile…

    sng Debian
  • Unscored —
    CVE-2009-0807 Public exploit

    zFeeder 1.6 allows remote attackers to gain administrative access via a direct request to admin.php.

  • Unscored —
    CVE-2009-0810 Public exploit

    SQL injection vulnerability in login.php in xGuestbook 2.0 allows remote attackers to execute arbitrary SQL commands vi…

  • Unscored —
    CVE-2009-0805

    Cross-site scripting (XSS) vulnerability in piCal 0.91h and earlier, a module for XOOPS, allows remote attackers to inj…

  • Unscored —
    CVE-2009-0812 Public exploit

    Stack-based buffer overflow in BreakPoint Software Hex Workshop 4.23, 6.0.1.4603, and other 6.x and earlier versions al…

  • Unscored —
    CVE-2009-0809

    The Web Editor in Dassault Systemes ENOVIA SmarTeam V5 before Release 18 Service Pack 8, and possibly CATIA and other p…

  • Unscored —
    CVE-2009-0808

    Multiple SQL injection vulnerabilities in SimpleCMMS before 0.1.0 allow remote attackers to execute arbitrary SQL comma…

  • Unscored —
    CVE-2009-0811 Public exploit

    Insecure method vulnerability in the SopCast SopCore ActiveX control in sopocx.ocx 3.0.3.501 allows remote attackers to…

  • Unscored —
    CVE-2009-0806

    Unspecified vulnerability in OpenGoo before 1.2.1 allows remote authenticated users to modify their own permissions via…

  • Unscored —
    CVE-2009-0802

    Qbik WinGate, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint…

  • Unscored —
    CVE-2009-0803

    SmoothWall SmoothGuardian, as used in SmoothWall Firewall, NetworkGuardian, and SchoolGuardian 2008, when transparent i…

  • Unscored —
    CVE-2009-0801

    Squid, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which…

    squid Debian
  • Unscored —
    CVE-2009-0804

    Ziproxy 2.6.0, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoin…

    ziproxy Debian
  • Unscored —
    CVE-2009-0779

    Buffer overflow in pppdial in IBM AIX 5.3 and 6.1 allows local users to gain privileges via a long "input string."

  • Unscored —
    CVE-2009-0780

    The aspath_prepend function in rde_attr.c in bgpd in OpenBSD 4.3 and 4.4 allows remote attackers to cause a denial of s…