Skip to content
OpenAdvisories

Archive

10 March 2009

Vulnerabilities first published on this day (UTC), newest first.

19 results · Feed

  • Unscored —

    Buffer overflow in the server in OpenTTD 0.6.1 and earlier allows remote authenticated users to cause a denial of servi…

  • Unscored —

    Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506, including 3.0.2009.1301, does not properly handle a JBIG2…

  • Unscored —
    CVE-2009-0085 EPSS 15%

    The Secure Channel (aka SChannel) authentication component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 S…

  • Unscored —
    CVE-2009-0837 Public exploit EPSS 76%

    Stack-based buffer overflow in Foxit Reader 3.0 before Build 1506, including 1120 and 1301, allows remote attackers to …

  • Unscored —

    The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 does not properly handle invalid pointers…

  • Unscored —

    Buffer overflow in the client in IBM Tivoli Storage Manager (TSM) HSM 5.3.2.0 through 5.3.5.0, 5.4.0.0 through 5.4.2.5,…

  • Unscored —
    CVE-2009-0836 Public exploit EPSS 43%

    Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506, including 1120 and 1301, does not require user confirmati…

  • Unscored —
    CVE-2009-0081 EPSS 32%

    The graphics device interface (GDI) implementation in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server …

  • Unscored —

    The NFSv4 Server module in the kernel in Sun Solaris 10, and OpenSolaris before snv_111, allow local users to cause a d…

  • High 7.8

    The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the web user interface in the login application in NetMRI 3.0.1 and earlier…

  • Unscored —

    CRLF injection vulnerability in the WebLink template in Fujitsu Jasmine2000 Enterprise Edition allows remote attackers …

  • Unscored —
    CVE-2009-0864 Public exploit

    S-Cms 1.1 Stable allows remote attackers to bypass authentication and obtain administrative access via an OK value for …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in phpDenora before 1.2.3 allows remote attackers to inject arbitrary web scri…

  • Unscored —
    CVE-2009-0863 Public exploit

    SQL injection vulnerability in admin/delete_page.php in S-Cms 1.1 Stable allows remote attackers to execute arbitrary S…

  • Unscored —

    The HRM-S service in Fujitsu Enhanced Support Facility 3.0 and 3.0.1 allows remote attackers to obtain (1) hardware and…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the hook_cntrlr_error_output function in modules/page/hooks/listeners.php i…

  • Unscored —
    CVE-2009-0865 Public exploit

    Directory traversal vulnerability in the SnapShotToFile method in the GeoVision LiveX (aka LiveX_v8200) ActiveX control…

  • Unscored —
    CVE-2009-0866 Public exploit

    pHNews Alpha 1 stores sensitive information under the web root with insufficient access control, which allows remote at…