Skip to content
OpenAdvisories

Archive

24 March 2009

Vulnerabilities first published on this day (UTC), newest first.

← February 2009 2009 / March /24 April 2009 →
  1. 1 
  2. 250
  3. 320
  4. 419
  5. 532
  6. 641
  7. 7 
  8. 8 
  9. 924
  10. 1019
  11. 1113
  12. 1217
  13. 1321
  14. 149
  15. 15 
  16. 1617
  17. 1711
  18. 1819
  19. 1915
  20. 2031
  21. 21 
  22. 22 
  23. 2319
  24. 2427
  25. 2558
  26. 2613
  27. 2715
  28. 28 
  29. 29 
  30. 3028
  31. 3135
All Critical High Medium Low Exploited only Public exploit

27 results · Feed

  • Unscored —
    CVE-2009-0364

    Format string vulnerability in the mini_calendar component in Citadel.org WebCit 7.22, and other versions before 7.39, …

  • Unscored —
    CVE-2009-1069

    Multiple cross-site scripting (XSS) vulnerabilities in the node edit form feature in Drupal Content Construction Kit (C…

    Web / CMS
  • Unscored —
    CVE-2009-1064 Public exploit

    Argument injection vulnerability in orbitmxt.dll 2.1.0.2 in the Orbit Downloader 2.8.7 and earlier ActiveX control allo…

  • Unscored —
    CVE-2009-1067 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Pixie CMS 1.01a allows remote attackers to inject arbitrary we…

  • Unscored —
    CVE-2009-1063 Public exploit

    Buffer overflow in eXeScope 6.50 allows user-assisted remote attackers to execute arbitrary code via a crafted executab…

  • Unscored —
    CVE-2009-1070 Public exploit

    Cross-site scripting (XSS) vulnerability in system/index.php in ExpressionEngine 1.6.4 through 1.6.6, and possibly earl…

  • Unscored —
    CVE-2009-1065

    SQL injection vulnerability in index.php in Pixie CMS 1.01a allows remote attackers to execute arbitrary SQL commands v…

  • Unscored —
    CVE-2009-1041 Public exploit

    The ktimer feature (sys/kern/kern_time.c) in FreeBSD 7.0, 7.1, and 7.2 allows local users to overwrite arbitrary kernel…

  • Unscored —
    CVE-2009-1066 Public exploit

    SQL injection vulnerability in the referral function in admin/lib/lib_logs.php in Pixie CMS 1.01a allows remote attacke…

  • Unscored —
    CVE-2009-1071 Public exploit

    Stack-based buffer overflow in Icarus 2.0 allows remote attackers to cause a denial of service (application crash) or e…

  • Unscored —
    CVE-2009-1068 Public exploit EPSS 15%

    Stack-based buffer overflow in BS.Player (bsplayer) 2.32 Build 975 Free and 2.34 Build 980 PRO and earlier allows remot…

  • Unscored —
    CVE-2008-6515 Public exploit

    Cross-site scripting (XSS) vulnerability in Fritz Berger yet another php photo album - next generation (yappa-ng) allow…

  • Unscored —
    CVE-2008-6512

    Cross-domain vulnerability in the WorkerPool API in Google Gears before 0.5.4.2 allows remote attackers to bypass the S…

  • Unscored —
    CVE-2008-6513 Public exploit

    Unrestricted file upload vulnerability in saa.php in Andy's PHP Knowledgebase (aphpkb) 0.92.9 allows remote attackers t…

  • Unscored —
    CVE-2008-6514

    The Expo plugin in Compiz Fusion 0.7.8 allows local users with physical access to drag the screen saver aside and acces…

  • Unscored —
    CVE-2009-1053

    chaozzDB 1.2 and earlier stores sensitive information under the web root with insufficient access control, which allows…

  • Unscored —
    CVE-2009-1056

    IBM Rational AppScan Enterprise before 5.5 FP1 allows remote attackers to read arbitrary exported reports by "forcefull…

  • Unscored —
    CVE-2009-1052

    FireAnt 1.3 and earlier stores sensitive information under the web root with insufficient access control, which allows …

  • Unscored —
    CVE-2009-1060

    Unspecified vulnerability in Apple Safari on Mac OS X 10.5.6 allows remote attackers to execute arbitrary code via unkn…

  • Unscored —
    CVE-2009-1059 Public exploit

    Stack-based buffer overflow in Trident PowerZip 7.2 might allow remote attackers to execute arbitrary code via a crafte…

  • Unscored —
    CVE-2009-1058 Public exploit

    Stack-based buffer overflow in ZipGenius might allow remote attackers to execute arbitrary code via a crafted .zip file…

  • Unscored —
    CVE-2009-1055

    Unspecified vulnerability in the web service in Sitecore CMS 5.3.1 rev. 071114 allows remote authenticated users to gai…

  • Unscored —
    CVE-2009-1050 Public exploit

    Bloginator 1A allows remote attackers to bypass authentication and gain administrative access by setting the identifyYo…

  • Unscored —
    CVE-2009-1054

    Unspecified vulnerability in JustSystems Ichitaro 13, 2004 through 2008, Lite2, and Ichitaro viewer 5.1.5.0 and earlier…

  • Unscored —
    CVE-2009-1049 Public exploit

    SQL injection vulnerability in articleCall.php in Bloginator 1A allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2009-1057 Public exploit

    MicroSmarts Enterprise ZipItFast! 3.0 allows remote attackers to execute arbitrary code via a crafted .zip file that tr…

  • Unscored —
    CVE-2009-1051

    FubarForum 1.6 and earlier stores sensitive information under the web root with insufficient access control, which allo…