Skip to content
OpenAdvisories

Archive

9 March 2009

Vulnerabilities first published on this day (UTC), newest first.

12 results · Clear filters · Feed

  • Unscored —
    CVE-2009-0537 Public exploit

    Integer overflow in the fts_build function in fts.c in libc in (1) OpenBSD 4.4 and earlier and (2) Microsoft Interix 6.…

  • Unscored —
    CVE-2009-0858 Public exploit

    The response_addname function in response.c in Daniel J. Bernstein djbdns 1.05 and earlier does not constrain offsets i…

  • Unscored —
    CVE-2009-0825 Public exploit

    SQL injection vulnerability in system/rss.php in TinX/cms 3.x before 3.5.1 allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2009-0853 Public exploit

    login.php in CelerBB 0.0.2, when magic_quotes_gpc is disabled, allows remote attackers to bypass authentication and obt…

  • Unscored —
    CVE-2009-0852 Public exploit

    showme.php in CelerBB 0.0.2 allows remote attackers to obtain "reserved information" via the user parameter.

  • Unscored —
    CVE-2009-0851 Public exploit

    Multiple SQL injection vulnerabilities in CelerBB 0.0.2, when magic_quotes_gpc is disabled, allow remote attackers to e…

  • Unscored —
    CVE-2009-0849 Public exploit EPSS 17%

    Stack-based buffer overflow in the DtbClsLogin function in NovaStor NovaNET 12 allows remote attackers to (1) execute a…

  • Unscored —
    CVE-2008-6442 Public exploit

    Insecure method vulnerability in Sina Inc. DLoader Class ActiveX Control allows remote attackers to overwrite arbitrary…

  • Unscored —
    CVE-2008-6446 Public exploit

    Static code injection vulnerability in the Guestbook component in CMS MAXSITE allows remote attackers to inject arbitra…

  • Unscored —
    CVE-2008-6447 Public exploit

    Buffer overflow in emmailstore.dll 6.5.0.3 in the QuikSoft EasyMail MailStore ActiveX control allows remote attackers t…

  • Unscored —
    CVE-2008-6443 Public exploit

    SQL injection vulnerability in forum_duzen.php in phpKF allows remote attackers to execute arbitrary SQL commands via t…

  • Unscored —
    CVE-2009-0855 Public exploit

    Cross-site scripting (XSS) vulnerability in the administrative console in IBM WebSphere Application Server (WAS) 6.1 be…