Skip to content
OpenAdvisories

Archive

24 March 2009

Vulnerabilities first published on this day (UTC), newest first.

15 results · Clear filters · Feed

  • Unscored —
    CVE-2009-1064 Public exploit

    Argument injection vulnerability in orbitmxt.dll 2.1.0.2 in the Orbit Downloader 2.8.7 and earlier ActiveX control allo…

  • Unscored —
    CVE-2009-1067 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Pixie CMS 1.01a allows remote attackers to inject arbitrary we…

  • Unscored —
    CVE-2009-1063 Public exploit

    Buffer overflow in eXeScope 6.50 allows user-assisted remote attackers to execute arbitrary code via a crafted executab…

  • Unscored —
    CVE-2009-1070 Public exploit

    Cross-site scripting (XSS) vulnerability in system/index.php in ExpressionEngine 1.6.4 through 1.6.6, and possibly earl…

  • Unscored —
    CVE-2009-1041 Public exploit

    The ktimer feature (sys/kern/kern_time.c) in FreeBSD 7.0, 7.1, and 7.2 allows local users to overwrite arbitrary kernel…

  • Unscored —
    CVE-2009-1066 Public exploit

    SQL injection vulnerability in the referral function in admin/lib/lib_logs.php in Pixie CMS 1.01a allows remote attacke…

  • Unscored —
    CVE-2009-1071 Public exploit

    Stack-based buffer overflow in Icarus 2.0 allows remote attackers to cause a denial of service (application crash) or e…

  • Unscored —
    CVE-2009-1068 Public exploit EPSS 15%

    Stack-based buffer overflow in BS.Player (bsplayer) 2.32 Build 975 Free and 2.34 Build 980 PRO and earlier allows remot…

  • Unscored —
    CVE-2008-6515 Public exploit

    Cross-site scripting (XSS) vulnerability in Fritz Berger yet another php photo album - next generation (yappa-ng) allow…

  • Unscored —
    CVE-2008-6513 Public exploit

    Unrestricted file upload vulnerability in saa.php in Andy's PHP Knowledgebase (aphpkb) 0.92.9 allows remote attackers t…

  • Unscored —
    CVE-2009-1059 Public exploit

    Stack-based buffer overflow in Trident PowerZip 7.2 might allow remote attackers to execute arbitrary code via a crafte…

  • Unscored —
    CVE-2009-1058 Public exploit

    Stack-based buffer overflow in ZipGenius might allow remote attackers to execute arbitrary code via a crafted .zip file…

  • Unscored —
    CVE-2009-1050 Public exploit

    Bloginator 1A allows remote attackers to bypass authentication and gain administrative access by setting the identifyYo…

  • Unscored —
    CVE-2009-1049 Public exploit

    SQL injection vulnerability in articleCall.php in Bloginator 1A allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2009-1057 Public exploit

    MicroSmarts Enterprise ZipItFast! 3.0 allows remote attackers to execute arbitrary code via a crafted .zip file that tr…