Skip to content
OpenAdvisories

Archive

5 March 2009

Vulnerabilities first published on this day (UTC), newest first.

← February 2009 2009 / March /5 April 2009 →
  1. 1 
  2. 250
  3. 320
  4. 419
  5. 532
  6. 641
  7. 7 
  8. 8 
  9. 924
  10. 1019
  11. 1113
  12. 1217
  13. 1321
  14. 149
  15. 15 
  16. 1617
  17. 1711
  18. 1819
  19. 1915
  20. 2031
  21. 21 
  22. 22 
  23. 2319
  24. 2427
  25. 2558
  26. 2613
  27. 2715
  28. 28 
  29. 29 
  30. 3028
  31. 3135
All Critical High Medium Low Exploited only Public exploit

15 results · Clear filters · Feed

  • Unscored —
    CVE-2009-0828 Public exploit

    QuoteBook stores quotes.inc under the web root with insufficient access control, which allows remote attackers to obtai…

  • Unscored —
    CVE-2009-0833 Public exploit

    Heap-based buffer overflow in gen_msn.dll in the gen_msn plugin 0.31 for Winamp 5.541 allows remote attackers to execut…

  • Unscored —
    CVE-2009-0832 Public exploit

    SQL injection vulnerability in items.php in the E-Cart module 1.3 for PHP-Fusion allows remote attackers to execute arb…

  • Unscored —
    CVE-2009-0831 Public exploit

    SQL injection vulnerability in members.php in the Members CV (job) module 1.0 for PHP-Fusion, when magic_quotes_gpc is …

  • Unscored —
    CVE-2009-0826 Public exploit

    BlogHelper stores common_db.inc under the web root with insufficient access control, which allows remote attackers to d…

  • Unscored —
    CVE-2009-0827 Public exploit

    PollHelper stores poll.inc under the web root with insufficient access control, which allows remote attackers to downlo…

  • Unscored —
    CVE-2009-0829 Public exploit

    Multiple SQL injection vulnerabilities in QuoteBook allow remote attackers to execute arbitrary SQL commands via the (1…

  • Unscored —
    CVE-2009-0819 Public exploit EPSS 10%

    sql/item_xmlfunc.cc in MySQL 5.1 before 5.1.32 and 6.0 before 6.0.10 allows remote authenticated users to cause a denia…

  • Unscored —
    CVE-2009-0814 Public exploit

    Cross-site scripting (XSS) vulnerability in Widgets.aspx in Blogsa 1.0 Beta 3 and earlier allows remote attackers to in…

  • Medium —
    CVE-2009-0815 Public exploit EPSS 42%

    TYPO3 leaks a hash secret in an error message

    The jumpUrl mechanism in class.tslib_fe.php in TYPO3 3.3.x through 3.8.x, 4.0 before 4.0.12, 4.1 before 4.1.10, 4.2 before 4.2.6, and 4.3alpha1 leaks a hash secret (juHash) in an error message, which allows remote attackers to read arbitrary files by includin…

    typo3/cms Packagist
  • Unscored —
    CVE-2009-0367 Public exploit EPSS 11%

    The Python AI module in Wesnoth 1.4.x and 1.5 before 1.5.11 allows remote attackers to escape the sandbox and execute a…

  • Unscored —
    CVE-2009-0037 Public exploit

    The redirect implementation in curl and libcurl 5.11 through 7.19.3, when CURLOPT_FOLLOWLOCATION is enabled, accepts ar…

    curl Debian
  • Unscored —
    CVE-2009-0813 Public exploit

    Insecure method vulnerability in the ImeraIEPlugin ActiveX control (ImeraIEPlugin.dll 1.0.2.54) in Imera TeamLinks Clie…

  • Unscored —
    CVE-2009-0820 Public exploit

    Multiple eval injection vulnerabilities in phpScheduleIt before 1.2.11 allow remote attackers to execute arbitrary code…

  • Unscored —
    CVE-2009-0821 Public exploit

    Mozilla Firefox 2.0.0.20 and earlier allows remote attackers to cause a denial of service (application crash) via neste…