Skip to content
OpenAdvisories

Archive

9 March 2009

Vulnerabilities first published on this day (UTC), newest first.

← February 2009 2009 / March /9 April 2009 →
  1. 1 
  2. 250
  3. 320
  4. 419
  5. 532
  6. 641
  7. 7 
  8. 8 
  9. 924
  10. 1019
  11. 1113
  12. 1217
  13. 1321
  14. 149
  15. 15 
  16. 1617
  17. 1711
  18. 1819
  19. 1915
  20. 2031
  21. 21 
  22. 22 
  23. 2319
  24. 2427
  25. 2558
  26. 2613
  27. 2715
  28. 28 
  29. 29 
  30. 3028
  31. 3135
All Critical High Medium Low Exploited only Public exploit

24 results · Feed

  • Medium —
    CVE-2009-0781

    Cross-site scripting in Apache Tomcat

    Cross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples web application in Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 allows remote attackers to inject arbitrary web scri…

    org.apache.tomcat:tomcat Maven
  • Unscored —
    CVE-2009-0027

    The request handler in JBossWS in JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP06 …

  • Unscored —
    CVE-2009-0856

    Multiple cross-site scripting (XSS) vulnerabilities in sample applications in IBM WebSphere Application Server (WAS) 6.…

  • Unscored —
    CVE-2009-0859

    The shm_get_stat function in ipc/shm.c in the shm subsystem in the Linux kernel before 2.6.28.5, when CONFIG_SHMEM is d…

  • Unscored —
    CVE-2009-0537 Public exploit

    Integer overflow in the fts_build function in fts.c in libc in (1) OpenBSD 4.4 and earlier and (2) Microsoft Interix 6.…

  • Unscored —
    CVE-2009-0857

    Cross-site scripting (XSS) vulnerability in /prm/reports in the Performance Reporting Module (PRM) for Sun Management C…

  • Unscored —
    CVE-2009-0858 Public exploit

    The response_addname function in response.c in Daniel J. Bernstein djbdns 1.05 and earlier does not constrain offsets i…

    djbdns Debian
  • Unscored —
    CVE-2009-0825 Public exploit

    SQL injection vulnerability in system/rss.php in TinX/cms 3.x before 3.5.1 allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2009-0853 Public exploit

    login.php in CelerBB 0.0.2, when magic_quotes_gpc is disabled, allows remote attackers to bypass authentication and obt…

  • Unscored —
    CVE-2009-0852 Public exploit

    showme.php in CelerBB 0.0.2 allows remote attackers to obtain "reserved information" via the user parameter.

  • Unscored —
    CVE-2009-0851 Public exploit

    Multiple SQL injection vulnerabilities in CelerBB 0.0.2, when magic_quotes_gpc is disabled, allow remote attackers to e…

  • Unscored —
    CVE-2009-0849 Public exploit EPSS 17%

    Stack-based buffer overflow in the DtbClsLogin function in NovaStor NovaNET 12 allows remote attackers to (1) execute a…

  • Unscored —
    CVE-2009-0850 EPSS 30%

    Cross-site scripting (XSS) vulnerability in BitDefender Internet Security 2009 allows user-assisted remote attackers to…

  • Unscored —
    CVE-2008-6442 Public exploit

    Insecure method vulnerability in Sina Inc. DLoader Class ActiveX Control allows remote attackers to overwrite arbitrary…

  • Unscored —
    CVE-2008-6448

    Cross-site scripting (XSS) vulnerability in install.cgi in SKYARC System MTCMS WYSIWYG Editor allows remote attackers t…

  • Unscored —
    CVE-2008-6449

    Cross-site request forgery (CSRF) vulnerability in multiple Century Systems routers including XR-410 before 1.6.9, XR-5…

  • Unscored —
    CVE-2008-6446 Public exploit

    Static code injection vulnerability in the Guestbook component in CMS MAXSITE allows remote attackers to inject arbitra…

  • Unscored —
    CVE-2008-6447 Public exploit

    Buffer overflow in emmailstore.dll 6.5.0.3 in the QuikSoft EasyMail MailStore ActiveX control allows remote attackers t…

  • Unscored —
    CVE-2008-6445

    Unspecified vulnerability in YourPlace before 1.0.1 has unknown impact and attack vectors, possibly related to improper…

  • Unscored —
    CVE-2008-6443 Public exploit

    SQL injection vulnerability in forum_duzen.php in phpKF allows remote attackers to execute arbitrary SQL commands via t…

  • Unscored —
    CVE-2008-6444

    Stack-based buffer overflow in CSTransfer.dll in Baidu Hi IM might allow remote attackers to execute arbitrary code via…

  • Unscored —
    CVE-2008-6450

    Cross-site scripting (XSS) vulnerability in Under Construction, Baby (UCB) PC2M 0.9.22.4 and earlier allows remote atta…

  • Unscored —
    CVE-2008-6441

    Format string vulnerability in the Epic Games Unreal engine client, as used in multiple games, allows remote servers to…

  • Unscored —
    CVE-2009-0855 Public exploit

    Cross-site scripting (XSS) vulnerability in the administrative console in IBM WebSphere Application Server (WAS) 6.1 be…