Skip to content
OpenAdvisories

Archive

March 2009

Vulnerabilities first published in this month (UTC), newest first.

← February 2009 2009 / March April 2009 →
  1. 1 
  2. 250
  3. 320
  4. 419
  5. 532
  6. 641
  7. 7 
  8. 8 
  9. 924
  10. 1019
  11. 1113
  12. 1217
  13. 1321
  14. 149
  15. 15 
  16. 1617
  17. 1711
  18. 1819
  19. 1915
  20. 2031
  21. 21 
  22. 22 
  23. 2319
  24. 2427
  25. 2558
  26. 2613
  27. 2715
  28. 28 
  29. 29 
  30. 3028
  31. 3135
All Critical High Medium Low Exploited only Public exploit

553 results · Feed

  • Unscored —
    CVE-2009-0962

    Unspecified vulnerability in Futomi's CGI Cafe MP Form Mail CGI eCommerce 1.3.0 and earlier, and CGI Professional 3.2.2…

  • Unscored —
    CVE-2009-0940

    Multiple cross-site request forgery (CSRF) vulnerabilities in the HP Embedded Web Server (EWS) on HP LaserJet Printers,…

  • Unscored —
    CVE-2009-0941

    The HP Embedded Web Server (EWS) on HP LaserJet Printers, Edgeline Printers, and Digital Senders has no management pass…

  • Unscored —
    CVE-2008-4564

    Stack-based buffer overflow in wp6sr.dll in the Autonomy KeyView SDK 10.4 and earlier, as used in IBM Lotus Notes, Syma…

  • Unscored —
    CVE-2008-6484 Public exploit

    SQL injection vulnerability in login.php in Mole Group Taxi Map Script (aka Taxi Calc Dist Script) allows remote attack…

  • Unscored —
    CVE-2008-6488 Public exploit

    SQL injection vulnerability in index.php in SoftComplex PHP Image Gallery 1.0 allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2008-6485 Public exploit

    SQL injection vulnerability in index.php in SoftComplex PHP Image Gallery allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2008-6483 Public exploit EPSS 39%

    PHP remote file inclusion vulnerability in admin.googlebase.php in the Ecom Solutions VirtueMart Google Base (aka com_g…

  • Unscored —
    CVE-2008-6482 Public exploit EPSS 34%

    PHP remote file inclusion vulnerability in admin.treeg.php in the Flash Tree Gallery (com_treeg) component 1.0 for Joom…

  • Unscored —
    CVE-2008-6486

    PHP remote file inclusion vulnerability in slideshow_uploadvideo.content.php in SharedLog, when register_globals is ena…

  • Unscored —
    CVE-2008-6487 Public exploit

    Multiple SQL injection vulnerabilities in login.asp in Digiappz DigiAffiliate 1.4 and earlier allow remote attackers to…

  • Unscored —
    CVE-2009-0538

    Format string vulnerability in Symantec pcAnywhere before 12.5 SP1 allows local users to read and modify arbitrary memo…

  • Unscored —
    CVE-2007-5543

    Stack-based buffer overflow in Miranda IM 0.6.8 and 0.7.0 allows remote attackers to execute arbitrary code via a craft…

  • Unscored —
    CVE-2007-5542

    Stack-based buffer overflow in Miranda IM 0.6.8 allows remote attackers to execute arbitrary code via a crafted Yahoo! …

  • Unscored —
    CVE-2009-0936

    Unspecified vulnerability in Tor before 0.2.0.34 allows attackers to cause a denial of service (infinite loop) via "cor…

    tor Debian
  • Unscored —
    CVE-2009-0934

    Cross-site scripting (XSS) vulnerability in ejabberd before 2.0.4 allows remote attackers to inject arbitrary web scrip…

    ejabberd Debian
  • Unscored —
    CVE-2009-0938

    Unspecified vulnerability in Tor before 0.2.0.34 allows directory mirrors to cause a denial of service (exit node crash…

    tor Debian
  • Unscored —
    CVE-2009-0935

    The inotify_read function in the Linux kernel 2.6.27 to 2.6.27.13, 2.6.28 to 2.6.28.2, and 2.6.29-rc3 allows local user…

  • Unscored —
    CVE-2009-0939

    Tor before 0.2.0.34 treats incomplete IPv4 addresses as valid, which has unknown impact and attack vectors related to "…

    tor Debian
  • Unscored —
    CVE-2009-0937

    Unspecified vulnerability in Tor before 0.2.0.34 allows directory mirrors to cause a denial of service via unknown vect…

    tor Debian
  • Unscored —
    CVE-2009-0933

    Cross-site scripting (XSS) vulnerability in the administrative interface in Dotclear before 2.1.5 allows remote attacke…

  • Unscored —
    CVE-2009-0929

    Directory traversal vulnerability in the media manager in Nucleus CMS before 3.40 allows remote attackers to read arbit…

  • Unscored —
    CVE-2009-0931

    Cross-site scripting (XSS) vulnerability in the tag cloud search script (horde/services/portal/cloud_search.php) in Hor…

  • Unscored —
    CVE-2009-0932 Public exploit Scanner template EPSS 48%

    Directory traversal vulnerability in framework/Image/Image.php in Horde before 3.2.4 and 3.3.3 and Horde Groupware befo…

  • Unscored —
    CVE-2009-0930

    Multiple cross-site scripting (XSS) vulnerabilities in Horde IMP before 4.2.2 and 4.3.3 allow remote attackers to injec…

  • Unscored —
    CVE-2008-6481 Public exploit

    SQL injection vulnerability in the Versioning component (com_versioning) 1.0.2 in Joomla! and Mambo allows remote attac…

  • Unscored —
    CVE-2009-0925

    Unspecified vulnerability in Sun Solaris 10 on SPARC sun4v systems, and OpenSolaris snv_47 through snv_85, allows local…

  • Unscored —
    CVE-2009-0924

    Unspecified vulnerability in Sun OpenSolaris snv_39 through snv_45, when running in 64-bit mode on x86 architectures, a…

  • Unscored —
    CVE-2009-0926

    Unspecified vulnerability in the UFS filesystem functionality in Sun OpenSolaris snv_86 through snv_91, when running in…

  • Unscored —
    CVE-2009-0923

    Unspecified vulnerability in Kerberos Incremental Propagation in Solaris 10 and OpenSolaris snv_01 through snv_110 allo…

  • Unscored —
    CVE-2009-0922 Public exploit EPSS 10%

    PostgreSQL before 8.3.7, 8.2.13, 8.1.17, 8.0.21, and 7.4.25 allows remote authenticated users to cause a denial of serv…

  • Unscored —
    CVE-2008-6478 Public exploit

    Cross-site request forgery (CSRF) vulnerability in the file manager in the VZPP web interface for Parallels Virtuozzo 3…

  • Unscored —
    CVE-2008-6480

    Cross-site request forgery (CSRF) vulnerability in engine/modules/imagepreview.php in Datalife Engine 6.7 allows remote…

  • Unscored —
    CVE-2008-6479 Public exploit

    Cross-site request forgery (CSRF) vulnerability in the "change password" feature in the VZPP web interface for Parallel…

  • Unscored —
    CVE-2009-0918

    Multiple unspecified vulnerabilities in DFLabs PTK 1.0.0 through 1.0.4 allow remote attackers to execute arbitrary comm…

  • Unscored —
    CVE-2009-0914

    Opera before 9.64 allows remote attackers to execute arbitrary code via a crafted JPEG image that triggers memory corru…

  • Unscored —
    CVE-2009-0917

    Cross-site scripting (XSS) vulnerability in DFLabs PTK 1.0.0 through 1.0.4 allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2009-0916

    Unspecified vulnerability in Opera before 9.64 has unknown impact and attack vectors, related to a "moderately severe i…

  • Unscored —
    CVE-2009-0919 EPSS 11%

    XAMPP installs multiple packages with insecure default passwords, which makes it easier for remote attackers to obtain …

  • Unscored —
    CVE-2009-0915

    Opera before 9.64 allows remote attackers to conduct cross-domain scripting attacks via unspecified vectors related to …