Skip to content
OpenAdvisories

Archive

March 2009

Vulnerabilities first published in this month (UTC), newest first.

← February 2009 2009 / March April 2009 →
  1. 1 
  2. 250
  3. 320
  4. 419
  5. 532
  6. 641
  7. 7 
  8. 8 
  9. 924
  10. 1019
  11. 1113
  12. 1217
  13. 1321
  14. 149
  15. 15 
  16. 1617
  17. 1711
  18. 1819
  19. 1915
  20. 2031
  21. 21 
  22. 22 
  23. 2319
  24. 2427
  25. 2558
  26. 2613
  27. 2715
  28. 28 
  29. 29 
  30. 3028
  31. 3135
All Critical High Medium Low Exploited only Public exploit

553 results · Feed

  • Unscored —
    CVE-2008-6532

    Multiple cross-site request forgery (CSRF) vulnerabilities in the update feature in Drupal 5.x before 5.13 and 6.x befo…

  • Unscored —
    CVE-2008-6535 Public exploit

    admin/settings.php in PayPal eStores allows remote attackers to bypass intended access restrictions and change the admi…

  • Unscored —
    CVE-2008-6529 Public exploit

    Cross-site scripting (XSS) vulnerability in listtest.php in eZoneScripts Living Local 1.1 allows remote attackers to in…

  • Unscored —
    CVE-2008-6534 Public exploit

    Incomplete blacklist vulnerability in NULL FTP Server Free and Pro 1.1.0.7 allows remote authenticated users to execute…

  • Unscored —
    CVE-2008-6533

    Drupal 5.x before 5.13 and 6.x before 6.7 does not delete all related content when an input format is deleted, which pr…

  • Unscored —
    CVE-2008-6528 Public exploit

    NTFS TmaxSoft JEUS 5 before Fix 26 allows remote attackers to read the source code for scripts by appending ::$DATA to …

  • Unscored —
    CVE-2009-1152 Public exploit

    Siemens Gigaset SE461 WiMAX router 1.5-BL024.9.6401, and possibly other versions, allows remote attackers to cause a de…

  • Unscored —
    CVE-2009-1148

    Directory traversal vulnerability in bs_disp_as_mime_type.php in the BLOB streaming feature in phpMyAdmin before 3.1.3.…

    phpmyadmin Debian
  • Critical 9.8
    CVE-2009-1151 Exploited Public exploit Scanner template EPSS 97%

    Static code injection vulnerability in setup.php in phpMyAdmin 2.11.x before 2.11.9.5 and 3.x before 3.1.3.1 allows rem…

    phpmyadmin Debian
    KEV Mar 25, 2022
  • Unscored —
    CVE-2009-1150

    Multiple cross-site scripting (XSS) vulnerabilities in the export page (display_export.lib.php) in phpMyAdmin 2.11.x be…

    phpmyadmin Debian
  • High —
    CVE-2009-1149

    phpMyAdmin HTTP Response Splitting Vulnerability

    CRLF injection vulnerability in bs_disp_as_mime_type.php in the BLOB streaming feature in phpMyAdmin before 3.1.3.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the (1) c_type and possibly (2) file_t…

    phpmyadmin phpmyadmin/phpmyadmin Debian Packagist
  • Unscored —
    CVE-2009-0784

    Race condition in the SystemTap stap tool 0.0.20080705 and 0.0.20090314 allows local users in the stapusr group to inse…

    systemtap Debian
  • Unscored —
    CVE-2009-1093

    LdapCtx in the LDAP service in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earli…

  • Unscored —
    CVE-2009-1106

    The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12, 11, and 10 does not p…

  • Unscored —
    CVE-2009-1094

    Unspecified vulnerability in the LDAP implementation in Java SE Development Kit (JDK) and Java Runtime Environment (JRE…

  • Unscored —
    CVE-2009-1101

    Unspecified vulnerability in the lightweight HTTP server implementation in Java SE Development Kit (JDK) and Java Runti…

  • Unscored —
    CVE-2009-1103

    Unspecified vulnerability in the Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 U…

  • Unscored —
    CVE-2009-1099

    Integer signedness error in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier,…

  • Unscored —
    CVE-2009-1105

    The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12, 11, and 10 allows use…

  • Unscored —
    CVE-2009-1104

    The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Updat…

  • Unscored —
    CVE-2009-1107

    The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier, and 5.0 U…

  • Unscored —
    CVE-2009-1098

    Buffer overflow in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update…

  • Unscored —
    CVE-2009-1097

    Multiple buffer overflows in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier a…

  • Unscored —
    CVE-2009-1095

    Integer overflow in unpack200 in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and ear…

  • Unscored —
    CVE-2009-1096

    Buffer overflow in unpack200 in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earl…

  • Unscored —
    CVE-2009-1102

    Unspecified vulnerability in the Virtual Machine in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 …

  • Unscored —
    CVE-2009-1100

    Multiple unspecified vulnerabilities in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 …

  • Unscored —
    CVE-2008-6522 Public exploit

    Multiple directory traversal vulnerabilities in the RenderFile function in ContentRender.class.php in Terracotta (aka O…

  • Unscored —
    CVE-2008-6527 Public exploit

    SQL injection vulnerability in forum.asp in GO4I.NET ASP Forum 1.0 allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2008-6518 Public exploit

    Unrestricted file upload vulnerability in the profile feature in VidiScript allows registered remote authenticated user…

  • Unscored —
    CVE-2008-6517 Public exploit

    SQL injection vulnerability in NewsHOWLER 1.03 Beta allows remote attackers to execute arbitrary SQL commands via the n…

  • Unscored —
    CVE-2008-6519 Public exploit

    Format string vulnerability in Xitami Web Server 2.2a through 2.5c2, and possibly other versions, allows remote attacke…

  • Unscored —
    CVE-2008-6525 Public exploit

    SQL injection vulnerability in the Admin Panel in Nice PHP FAQ Script (Knowledge base Script) allows remote attackers t…

  • Unscored —
    CVE-2008-6526 Public exploit

    SQL injection vulnerability in index.php in BosDev BosClassifieds allows remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2008-6520

    Multiple format string vulnerabilities in the SSI filter in Xitami Web Server 2.5c2, and possibly other versions, allow…

  • Unscored —
    CVE-2008-6521

    index.php in Terracotta (aka OpenTerracotta) 0.6.1 allows remote attackers to obtain sensitive information via an inval…

  • Unscored —
    CVE-2008-6524 Public exploit

    resetpass.php in openInvoice 0.90 beta and earlier allows remote authenticated users to change the passwords of arbitra…

  • Unscored —
    CVE-2008-6516 Public exploit

    Multiple directory traversal vulnerabilities in phpKF-Portal 1.10 allow remote attackers to include arbitrary files via…

  • Unscored —
    CVE-2008-6523 Public exploit

    auth.php in openInvoice 0.90 beta and earlier allows remote attackers to bypass authentication and gain privileges by s…

  • Unscored —
    CVE-2009-1089

    Absolute path traversal vulnerability in upload.php in Rapidleech rev.36 and earlier allows remote attackers to read ar…