Skip to content
OpenAdvisories

Archive

30 March 2009

Vulnerabilities first published on this day (UTC), newest first.

← February 2009 2009 / March /30 April 2009 →
  1. 1 
  2. 250
  3. 320
  4. 419
  5. 532
  6. 641
  7. 7 
  8. 8 
  9. 924
  10. 1019
  11. 1113
  12. 1217
  13. 1321
  14. 149
  15. 15 
  16. 1617
  17. 1711
  18. 1819
  19. 1915
  20. 2031
  21. 21 
  22. 22 
  23. 2319
  24. 2427
  25. 2558
  26. 2613
  27. 2715
  28. 28 
  29. 29 
  30. 3028
  31. 3135
All Critical High Medium Low Exploited only Public exploit

14 results · Clear filters · Feed

  • Unscored —
    CVE-2009-1171 Public exploit

    The TeX filter in Moodle 1.6 before 1.6.9+, 1.7 before 1.7.7+, 1.8 before 1.8.9, and 1.9 before 1.9.5 allows user-assis…

  • Unscored —
    CVE-2008-6559 Public exploit

    Merge mcd in ReliantHA 1.1.4 in SCO UnixWare 7.1.4 allows local users to gain root privileges via a crafted -d argument…

  • Unscored —
    CVE-2008-6555 Public exploit

    cgi-bin/webutil.pl in The Puppet Master WebUtil allows remote attackers to execute arbitrary commands via shell metacha…

  • Unscored —
    CVE-2008-6558 Public exploit

    Untrusted search path vulnerability in (1) hvdisp and (2) rcvm in ReliantHA 1.1.4 in SCO UnixWare 7.1.4 allows local us…

  • Unscored —
    CVE-2008-6553 Public exploit

    microcms-admin-home.php in Implied by Design Micro CMS (Micro-CMS) 3.5 (aka 0.3.5) does not require authentication as a…

  • Unscored —
    CVE-2008-6551 Public exploit

    Multiple directory traversal vulnerabilities in e-Vision CMS 2.0.2 and earlier, when magic_quotes_gpc is disabled, allo…

  • Medium —
    CVE-2008-6540 Public exploit

    DotNetNuke Default Machine Key Exposure

    DotNetNuke before 4.8.2, during installation or upgrade, does not warn the administrator when the default (1) ValidationKey and (2) DecryptionKey values cannot be modified in the web.config file, which allows remote attackers to bypass intended access restric…

    DotNetNuke.Core NuGet
  • Unscored —
    CVE-2008-6544 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Simple Machines Forum (SMF) 1.1.4 allow remote attackers to execu…

  • Unscored —
    CVE-2008-6550 Public exploit

    Cross-site scripting (XSS) vulnerability in glossaire.php in Glossaire 2.0 allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2008-6539 Public exploit

    Static code injection vulnerability in user/settings/ in DeStar 0.2.2-5 allows remote authenticated users to add arbitr…

  • Unscored —
    CVE-2008-6545 Public exploit

    PHP remote file inclusion vulnerability in news/include/createdb.php in Web Server Creator Web Portal 0.1 allows remote…

  • Unscored —
    CVE-2008-6537 Public exploit

    LightNEasy/lightneasy.php in LightNEasy No database version 1.2 allows remote attackers to obtain the hash of the admin…

  • Unscored —
    CVE-2008-6543 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in ComScripts TEAM Quick Classifieds 1.0 via the DOCUMENT_ROOT param…

  • Unscored —
    CVE-2008-6538 Public exploit

    DeStar 0.2.2-5 allows remote attackers to add arbitrary users via a direct request to config/add/CfgOptUser.