Skip to content
OpenAdvisories

Archive

March 2009

Vulnerabilities first published in this month (UTC), newest first.

← February 2009 2009 / March April 2009 →
  1. 1 
  2. 250
  3. 320
  4. 419
  5. 532
  6. 641
  7. 7 
  8. 8 
  9. 924
  10. 1019
  11. 1113
  12. 1217
  13. 1321
  14. 149
  15. 15 
  16. 1617
  17. 1711
  18. 1819
  19. 1915
  20. 2031
  21. 21 
  22. 22 
  23. 2319
  24. 2427
  25. 2558
  26. 2613
  27. 2715
  28. 28 
  29. 29 
  30. 3028
  31. 3135
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium —
    CVE-2008-6540 Public exploit

    DotNetNuke Default Machine Key Exposure

    DotNetNuke before 4.8.2, during installation or upgrade, does not warn the administrator when the default (1) ValidationKey and (2) DecryptionKey values cannot be modified in the web.config file, which allows remote attackers to bypass intended access restric…

    DotNetNuke.Core NuGet
  • Medium —
    CVE-2008-6505 Public exploit EPSS 73%

    Apache Struts directory traversal vulnerability

    Multiple directory traversal vulnerabilities in Apache Struts 2.0.x before 2.0.12 and 2.1.x before 2.1.3 allow remote attackers to read arbitrary files via a ..%252f (encoded dot dot slash) in a URI with a /struts/ path, related to (1) FilterDispatcher in 2.0…

    org.apache.struts:struts2-core Maven
  • Medium —
    CVE-2008-6504 Public exploit EPSS 39%

    Improper Input Validation in OpenSymphony XWork

    ParametersInterceptor in OpenSymphony XWork 2.0.x before 2.0.6 and 2.1.x before 2.1.2, as used in Apache Struts and other products, does not properly restrict # (pound sign) references to context objects, which allows remote attackers to execute Object-Graph …

    com.opensymphony:xwork Maven
  • Medium —
    CVE-2009-0815 Public exploit EPSS 42%

    TYPO3 leaks a hash secret in an error message

    The jumpUrl mechanism in class.tslib_fe.php in TYPO3 3.3.x through 3.8.x, 4.0 before 4.0.12, 4.1 before 4.1.10, 4.2 before 4.2.6, and 4.3alpha1 leaks a hash secret (juHash) in an error message, which allows remote attackers to read arbitrary files by includin…

    typo3/cms Packagist