Skip to content
OpenAdvisories

Archive

16 March 2009

Vulnerabilities first published on this day (UTC), newest first.

17 results · Feed

  • Unscored —
    CVE-2008-6478 Public exploit

    Cross-site request forgery (CSRF) vulnerability in the file manager in the VZPP web interface for Parallels Virtuozzo 3…

  • Unscored —

    Cross-site request forgery (CSRF) vulnerability in engine/modules/imagepreview.php in Datalife Engine 6.7 allows remote…

  • Unscored —
    CVE-2008-6479 Public exploit

    Cross-site request forgery (CSRF) vulnerability in the "change password" feature in the VZPP web interface for Parallel…

  • Unscored —

    Multiple unspecified vulnerabilities in DFLabs PTK 1.0.0 through 1.0.4 allow remote attackers to execute arbitrary comm…

  • Unscored —

    Opera before 9.64 allows remote attackers to execute arbitrary code via a crafted JPEG image that triggers memory corru…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in DFLabs PTK 1.0.0 through 1.0.4 allows remote attackers to inject arbitrary …

  • Unscored —

    Unspecified vulnerability in Opera before 9.64 has unknown impact and attack vectors, related to a "moderately severe i…

  • Unscored —
    CVE-2009-0919 EPSS 11%

    XAMPP installs multiple packages with insecure default passwords, which makes it easier for remote attackers to obtain …

  • Unscored —

    Opera before 9.64 allows remote attackers to conduct cross-domain scripting attacks via unspecified vectors related to …

  • Unscored —

    The Servlet Engine/Web Container and JSP components in IBM WebSphere Application Server (WAS) 5.1.0, 5.1.1.19, 6.0.2 be…

  • Unscored —

    Unspecified vulnerability in the keysock kernel module in Solaris 10 and OpenSolaris builds snv_01 through snv_108 allo…

  • Unscored —

    perl-MDK-Common 1.1.11 and 1.1.24, 1.2.9 through 1.2.14, and possibly other versions, in Mandriva Linux does not proper…

  • Unscored —
    CVE-2008-6477 Public exploit

    SQL injection vulnerability in Mumbo Jumbo Media OP4 allows remote attackers to execute arbitrary SQL commands via the …

  • Unscored —
    CVE-2008-6475 Public exploit

    SQL injection vulnerability in the guestbook component (components/guestbook/guestbook.php) in Drake CMS 0.4.11 and ear…

  • Unscored —
    CVE-2008-6473 Public exploit

    _blogadata/include/init_pass2.php in Blogator-script 0.95 allows remote attackers to change the password for arbitrary …

  • Unscored —

    The management interface in F5 BIG-IP 9.4.3 allows remote authenticated users with Resource Manager privileges to injec…

  • Unscored —
    CVE-2008-6476 Public exploit

    Cross-site scripting (XSS) vulnerability in blog/search.aspx in BlogEngine.NET allows remote attackers to inject arbitr…