Skip to content
OpenAdvisories

Archive

March 2009

Vulnerabilities first published in this month (UTC), newest first.

← February 2009 2009 / March April 2009 →
  1. 1 
  2. 250
  3. 320
  4. 419
  5. 532
  6. 641
  7. 7 
  8. 8 
  9. 924
  10. 1019
  11. 1113
  12. 1217
  13. 1321
  14. 149
  15. 15 
  16. 1617
  17. 1711
  18. 1819
  19. 1915
  20. 2031
  21. 21 
  22. 22 
  23. 2319
  24. 2427
  25. 2558
  26. 2613
  27. 2715
  28. 28 
  29. 29 
  30. 3028
  31. 3135
All Critical High Medium Low Exploited only Public exploit

553 results · Feed

  • Unscored —
    CVE-2009-0864 Public exploit

    S-Cms 1.1 Stable allows remote attackers to bypass authentication and obtain administrative access via an OK value for …

  • Unscored —
    CVE-2009-0861

    Cross-site scripting (XSS) vulnerability in phpDenora before 1.2.3 allows remote attackers to inject arbitrary web scri…

  • Unscored —
    CVE-2009-0863 Public exploit

    SQL injection vulnerability in admin/delete_page.php in S-Cms 1.1 Stable allows remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2009-0867

    The HRM-S service in Fujitsu Enhanced Support Facility 3.0 and 3.0.1 allows remote attackers to obtain (1) hardware and…

  • Unscored —
    CVE-2009-0862

    Cross-site scripting (XSS) vulnerability in the hook_cntrlr_error_output function in modules/page/hooks/listeners.php i…

  • Unscored —
    CVE-2009-0865 Public exploit

    Directory traversal vulnerability in the SnapShotToFile method in the GeoVision LiveX (aka LiveX_v8200) ActiveX control…

  • Unscored —
    CVE-2009-0866 Public exploit

    pHNews Alpha 1 stores sensitive information under the web root with insufficient access control, which allows remote at…

  • Medium —
    CVE-2009-0781

    Cross-site scripting in Apache Tomcat

    Cross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples web application in Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 allows remote attackers to inject arbitrary web scri…

    org.apache.tomcat:tomcat Maven
  • Unscored —
    CVE-2009-0027

    The request handler in JBossWS in JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP06 …

  • Unscored —
    CVE-2009-0856

    Multiple cross-site scripting (XSS) vulnerabilities in sample applications in IBM WebSphere Application Server (WAS) 6.…

  • Unscored —
    CVE-2009-0859

    The shm_get_stat function in ipc/shm.c in the shm subsystem in the Linux kernel before 2.6.28.5, when CONFIG_SHMEM is d…

  • Unscored —
    CVE-2009-0537 Public exploit

    Integer overflow in the fts_build function in fts.c in libc in (1) OpenBSD 4.4 and earlier and (2) Microsoft Interix 6.…

  • Unscored —
    CVE-2009-0857

    Cross-site scripting (XSS) vulnerability in /prm/reports in the Performance Reporting Module (PRM) for Sun Management C…

  • Unscored —
    CVE-2009-0858 Public exploit

    The response_addname function in response.c in Daniel J. Bernstein djbdns 1.05 and earlier does not constrain offsets i…

    djbdns Debian
  • Unscored —
    CVE-2009-0825 Public exploit

    SQL injection vulnerability in system/rss.php in TinX/cms 3.x before 3.5.1 allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2009-0853 Public exploit

    login.php in CelerBB 0.0.2, when magic_quotes_gpc is disabled, allows remote attackers to bypass authentication and obt…

  • Unscored —
    CVE-2009-0852 Public exploit

    showme.php in CelerBB 0.0.2 allows remote attackers to obtain "reserved information" via the user parameter.

  • Unscored —
    CVE-2009-0851 Public exploit

    Multiple SQL injection vulnerabilities in CelerBB 0.0.2, when magic_quotes_gpc is disabled, allow remote attackers to e…

  • Unscored —
    CVE-2009-0849 Public exploit EPSS 17%

    Stack-based buffer overflow in the DtbClsLogin function in NovaStor NovaNET 12 allows remote attackers to (1) execute a…

  • Unscored —
    CVE-2009-0850 EPSS 30%

    Cross-site scripting (XSS) vulnerability in BitDefender Internet Security 2009 allows user-assisted remote attackers to…

  • Unscored —
    CVE-2008-6442 Public exploit

    Insecure method vulnerability in Sina Inc. DLoader Class ActiveX Control allows remote attackers to overwrite arbitrary…

  • Unscored —
    CVE-2008-6448

    Cross-site scripting (XSS) vulnerability in install.cgi in SKYARC System MTCMS WYSIWYG Editor allows remote attackers t…

  • Unscored —
    CVE-2008-6449

    Cross-site request forgery (CSRF) vulnerability in multiple Century Systems routers including XR-410 before 1.6.9, XR-5…

  • Unscored —
    CVE-2008-6446 Public exploit

    Static code injection vulnerability in the Guestbook component in CMS MAXSITE allows remote attackers to inject arbitra…

  • Unscored —
    CVE-2008-6447 Public exploit

    Buffer overflow in emmailstore.dll 6.5.0.3 in the QuikSoft EasyMail MailStore ActiveX control allows remote attackers t…

  • Unscored —
    CVE-2008-6445

    Unspecified vulnerability in YourPlace before 1.0.1 has unknown impact and attack vectors, possibly related to improper…

  • Unscored —
    CVE-2008-6443 Public exploit

    SQL injection vulnerability in forum_duzen.php in phpKF allows remote attackers to execute arbitrary SQL commands via t…

  • Unscored —
    CVE-2008-6444

    Stack-based buffer overflow in CSTransfer.dll in Baidu Hi IM might allow remote attackers to execute arbitrary code via…

  • Unscored —
    CVE-2008-6450

    Cross-site scripting (XSS) vulnerability in Under Construction, Baby (UCB) PC2M 0.9.22.4 and earlier allows remote atta…

  • Unscored —
    CVE-2008-6441

    Format string vulnerability in the Epic Games Unreal engine client, as used in multiple games, allows remote servers to…

  • Unscored —
    CVE-2009-0855 Public exploit

    Cross-site scripting (XSS) vulnerability in the administrative console in IBM WebSphere Application Server (WAS) 6.1 be…

  • Unscored —
    CVE-2008-6422 Public exploit

    Multiple SQL injection vulnerabilities in PsychoStats 2.3, 2.3.1, and 2.3.3 allow remote attackers to execute arbitrary…

  • Unscored —
    CVE-2008-6421 Public exploit

    PHP remote file inclusion vulnerability in social_game_play.php in Social Site Generator (SSG) 2.0 allows remote attack…

  • Unscored —
    CVE-2008-6419 Public exploit

    Multiple SQL injection vulnerabilities in Social Site Generator (SSG) 2.0 allow remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2008-6427 Public exploit

    SQL injection vulnerability in index.php in Hivemaker Professional 1.0.2 and earlier, when magic_quotes_gpc is disabled…

  • Unscored —
    CVE-2008-6436

    Cross-site scripting (XSS) vulnerability in the Web Server in Xerox WorkCentre 7132, 7228, 7235, and 7245 allows remote…

  • Unscored —
    CVE-2008-6423 Public exploit

    Directory traversal vulnerability in passwiki.php in PassWiki 0.9.16 RC3 and earlier allows remote attackers to read ar…

  • Unscored —
    CVE-2008-6417

    Unspecified vulnerability in GreenSQL-Console before 0.3.5 allows attackers to obtain the "installation directory" via …

  • Unscored —
    CVE-2008-6431 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in BMForum 5.6 allow remote attackers to inject arbitrary web scrip…

  • Unscored —
    CVE-2008-6428

    The CGI framework in Kaya 0.4.0 allows remote attackers to inject arbitrary HTTP headers and conduct cross-site scripti…