Skip to content
OpenAdvisories

Archive

23 March 2009

Vulnerabilities first published on this day (UTC), newest first.

← February 2009 2009 / March /23 April 2009 →
  1. 1 
  2. 250
  3. 320
  4. 419
  5. 532
  6. 641
  7. 7 
  8. 8 
  9. 924
  10. 1019
  11. 1113
  12. 1217
  13. 1321
  14. 149
  15. 15 
  16. 1617
  17. 1711
  18. 1819
  19. 1915
  20. 2031
  21. 21 
  22. 22 
  23. 2319
  24. 2427
  25. 2558
  26. 2613
  27. 2715
  28. 28 
  29. 29 
  30. 3028
  31. 3135
All Critical High Medium Low Exploited only Public exploit

19 results · Feed

  • Unscored —
    CVE-2008-6510 Public exploit

    Cross-site scripting (XSS) vulnerability in login.jsp in the Admin Console in Openfire 3.6.0a and earlier allows remote…

  • Unscored —
    CVE-2008-6511 Public exploit

    Open redirect vulnerability in login.jsp in Openfire 3.6.0a and earlier allows remote attackers to redirect users to ar…

  • Unscored —
    CVE-2008-6508 Public exploit EPSS 84%

    Directory traversal vulnerability in the AuthCheck filter in the Admin Console in Openfire 3.6.0a and earlier allows re…

  • Unscored —
    CVE-2008-6509 Public exploit

    SQL injection vulnerability in CallLogDAO in SIP Plugin in Openfire 3.6.0a and earlier allows remote attackers to execu…

  • Unscored —
    CVE-2009-0584

    icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and earlier …

    ghostscript argyll Debian
  • Unscored —
    CVE-2009-0583

    Multiple integer overflows in icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in…

    ghostscript argyll Debian
  • Unscored —
    CVE-2009-1047

    Cross-site scripting (XSS) vulnerability in the Send by e-mail module in the "Printer, e-mail and PDF versions" module …

    Web / CMS
  • High 7.5
    CVE-2008-6507

    phpBB vulnerable to sensitive information disclosure

    Unspecified vulnerability in phpBB before 3.0.4 allows attackers to obtain sensitive information via unknown vectors related to the lack of password prompts for a private message that quotes a post in a password-protected forum.

    phpbb/phpbb Packagist
  • Unscored —
    CVE-2008-6506

    Unspecified vulnerability in phpBB before 3.0.4 allows attackers to bypass intended access restrictions and activate de…

  • Unscored —
    CVE-2009-1046 Public exploit

    The console selection feature in the Linux kernel 2.6.28 before 2.6.28.4, 2.6.25, and possibly earlier versions, when t…

  • Unscored —
    CVE-2009-1045 Public exploit

    requests/status.xml in VLC 0.9.8a allows remote attackers to cause a denial of service (stack consumption and crash) vi…

    vlc Debian
  • Medium —
    CVE-2008-6505 Public exploit EPSS 73%

    Apache Struts directory traversal vulnerability

    Multiple directory traversal vulnerabilities in Apache Struts 2.0.x before 2.0.12 and 2.1.x before 2.1.3 allow remote attackers to read arbitrary files via a ..%252f (encoded dot dot slash) in a URI with a /struts/ path, related to (1) FilterDispatcher in 2.0…

    org.apache.struts:struts2-core Maven
  • Medium —
    CVE-2008-6504 Public exploit EPSS 39%

    Improper Input Validation in OpenSymphony XWork

    ParametersInterceptor in OpenSymphony XWork 2.0.x before 2.0.6 and 2.1.x before 2.1.2, as used in Apache Struts and other products, does not properly restrict # (pound sign) references to context objects, which allows remote attackers to execute Object-Graph …

    com.opensymphony:xwork Maven
  • Unscored —
    CVE-2009-0723

    Multiple integer overflows in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, an…

  • Unscored —
    CVE-2009-0581

    Memory leak in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allows …

  • Unscored —
    CVE-2009-0733

    Multiple stack-based buffer overflows in the ReadSetOfCurves function in LittleCMS (aka lcms or liblcms) before 1.18bet…

  • Unscored —
    CVE-2009-1044

    Mozilla Firefox 3.0.7 on Windows 7 allows remote attackers to execute arbitrary code via unknown vectors related to the…

  • Unscored —
    CVE-2009-1043 EPSS 31%

    Unspecified vulnerability in Microsoft Internet Explorer 8 on Windows 7 allows remote attackers to execute arbitrary co…

  • Unscored —
    CVE-2009-1042

    Unspecified vulnerability in Apple Safari on Mac OS X 10.5.6 allows remote attackers to execute arbitrary code via unkn…