Skip to content
OpenAdvisories

Archive

March 2009

Vulnerabilities first published in this month (UTC), newest first.

← February 2009 2009 / March April 2009 →
  1. 1 
  2. 250
  3. 320
  4. 419
  5. 532
  6. 641
  7. 7 
  8. 8 
  9. 924
  10. 1019
  11. 1113
  12. 1217
  13. 1321
  14. 149
  15. 15 
  16. 1617
  17. 1711
  18. 1819
  19. 1915
  20. 2031
  21. 21 
  22. 22 
  23. 2319
  24. 2427
  25. 2558
  26. 2613
  27. 2715
  28. 28 
  29. 29 
  30. 3028
  31. 3135
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 7.5
    CVE-2008-6549

    MoinMoin Denial of Service vulnerability via password_checker function

    The password_checker function in config/multiconfig.py in MoinMoin 1.6.1 uses the cracklib and python-crack features even though they are not thread-safe, which allows remote attackers to cause a denial of service (segmentation fault and crash) via unknown ve…

    moin PyPI
  • High 7.5
    CVE-2008-6547

    FormEncode Access Restrictions Bypass

    schema.py in FormEncode for Python (python-formencode) 1.0 does not apply the chained_validators feature, which allows attackers to bypass intended access restrictions via unknown vectors.

    formencode python-formencode Debian PyPI
  • High —
    CVE-2007-6721

    Legion of the Bouncy Castle Java Cryptography API Bleichenbacher Oracle Vulnerability

    The Legion of the Bouncy Castle Java Cryptography API before release 1.38, as used in Crypto Provider Package before 1.36, has unknown impact and remote attack vectors related to "a Bleichenbacher vulnerability in simple RSA CMS signatures without signed attr…

    bouncycastle bouncycastle:bcprov-jdk15 bouncycastle:bcprov-jdk14 bouncycastle:bcprov-jdk16 Debian Maven
  • High —
    CVE-2009-1149

    phpMyAdmin HTTP Response Splitting Vulnerability

    CRLF injection vulnerability in bs_disp_as_mime_type.php in the BLOB streaming feature in phpMyAdmin before 3.1.3.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the (1) c_type and possibly (2) file_t…

    phpmyadmin phpmyadmin/phpmyadmin Debian Packagist
  • High 7.5
    CVE-2008-6507

    phpBB vulnerable to sensitive information disclosure

    Unspecified vulnerability in phpBB before 3.0.4 allows attackers to obtain sensitive information via unknown vectors related to the lack of password prompts for a private message that quotes a post in a password-protected forum.

    phpbb/phpbb Packagist
  • High 8.8
    CVE-2009-0927 Exploited Public exploit EPSS 97%

    Stack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and 7 before 7.1.1 allows …

    KEV Mar 25, 2022
  • High 7.8
    CVE-2009-0082

    The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 …