Skip to content
OpenAdvisories

Archive

26 March 2009

Vulnerabilities first published on this day (UTC), newest first.

← February 2009 2009 / March /26 April 2009 →
  1. 1 
  2. 250
  3. 320
  4. 419
  5. 532
  6. 641
  7. 7 
  8. 8 
  9. 924
  10. 1019
  11. 1113
  12. 1217
  13. 1321
  14. 149
  15. 15 
  16. 1617
  17. 1711
  18. 1819
  19. 1915
  20. 2031
  21. 21 
  22. 22 
  23. 2319
  24. 2427
  25. 2558
  26. 2613
  27. 2715
  28. 28 
  29. 29 
  30. 3028
  31. 3135
All Critical High Medium Low Exploited only Public exploit

13 results · Feed

  • Unscored —
    CVE-2008-6530 Public exploit

    Unrestricted file upload vulnerability in editimage.php in eZoneScripts Living Local 1.1 allows remote authenticated ad…

  • Unscored —
    CVE-2008-6531

    The WebWork 1 web application framework in Atlassian JIRA before 3.13.2 allows remote attackers to invoke exposed publi…

  • Unscored —
    CVE-2008-6532

    Multiple cross-site request forgery (CSRF) vulnerabilities in the update feature in Drupal 5.x before 5.13 and 6.x befo…

  • Unscored —
    CVE-2008-6535 Public exploit

    admin/settings.php in PayPal eStores allows remote attackers to bypass intended access restrictions and change the admi…

  • Unscored —
    CVE-2008-6529 Public exploit

    Cross-site scripting (XSS) vulnerability in listtest.php in eZoneScripts Living Local 1.1 allows remote attackers to in…

  • Unscored —
    CVE-2008-6534 Public exploit

    Incomplete blacklist vulnerability in NULL FTP Server Free and Pro 1.1.0.7 allows remote authenticated users to execute…

  • Unscored —
    CVE-2008-6533

    Drupal 5.x before 5.13 and 6.x before 6.7 does not delete all related content when an input format is deleted, which pr…

  • Unscored —
    CVE-2008-6528 Public exploit

    NTFS TmaxSoft JEUS 5 before Fix 26 allows remote attackers to read the source code for scripts by appending ::$DATA to …

  • Unscored —
    CVE-2009-1152 Public exploit

    Siemens Gigaset SE461 WiMAX router 1.5-BL024.9.6401, and possibly other versions, allows remote attackers to cause a de…

  • Unscored —
    CVE-2009-1148

    Directory traversal vulnerability in bs_disp_as_mime_type.php in the BLOB streaming feature in phpMyAdmin before 3.1.3.…

    phpmyadmin Debian
  • Critical 9.8
    CVE-2009-1151 Exploited Public exploit Scanner template EPSS 97%

    Static code injection vulnerability in setup.php in phpMyAdmin 2.11.x before 2.11.9.5 and 3.x before 3.1.3.1 allows rem…

    phpmyadmin Debian
    KEV Mar 25, 2022
  • Unscored —
    CVE-2009-1150

    Multiple cross-site scripting (XSS) vulnerabilities in the export page (display_export.lib.php) in phpMyAdmin 2.11.x be…

    phpmyadmin Debian
  • High —
    CVE-2009-1149

    phpMyAdmin HTTP Response Splitting Vulnerability

    CRLF injection vulnerability in bs_disp_as_mime_type.php in the BLOB streaming feature in phpMyAdmin before 3.1.3.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the (1) c_type and possibly (2) file_t…

    phpmyadmin phpmyadmin/phpmyadmin Debian Packagist