Skip to content
OpenAdvisories

Archive

13 April 2009

Vulnerabilities first published on this day (UTC), newest first.

18 results · Feed

  • Unscored —

    Multiple stack-based buffer overflows in DZIP32.DLL before 5.0.0.8 in DynaZip Max and DZIPS32.DLL before 6.0.0.5 in Dyn…

  • Unscored —

    Integer overflow in the PulseAudioTargetDataL class in src/java/org/classpath/icedtea/pulseaudio/PulseAudioTargetDataLi…

  • Unscored —

    Insecure method vulnerability in Particle Software IntraLaunch Application Launcher ActiveX control in IntraLaunch.ocx,…

  • Unscored —

    The Check Point High-Availability Protocol (CPHAP) dissector in Wireshark 0.9.6 through 1.0.6 allows remote attackers t…

  • Unscored —

    private/login.ssi in the Advanced Management Module (AMM) on the IBM BladeCenter, including the BladeCenter H with BPET…

  • Unscored —
    CVE-2009-1290 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in the web administration interface in the Advanced Manageme…

  • Unscored —
    CVE-2009-1287 Public exploit EPSS 23%

    Cross-site scripting (XSS) vulnerability in Cisco Subscriber Edge Services Manager (SESM) allows remote attackers to in…

  • Unscored —

    The IMAP task in the server in IBM Lotus Domino 8.0.2 before FP1 IF1 and 8.5 before IF3 allows remote attackers to caus…

  • Unscored —
    CVE-2009-1288 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the Advanced Management Module (AMM) on the IBM BladeCenter, inc…

  • Unscored —
    CVE-2009-1244 Public exploit

    Unspecified vulnerability in the virtual machine display function in VMware Workstation 6.5.1 and earlier; VMware Playe…

  • Unscored —

    Unspecified vulnerability in the LDAP dissector in Wireshark 0.99.2 through 1.0.6, when running on Windows, allows remo…

  • Unscored —

    Unspecified vulnerability in Wireshark 0.99.6 through 1.0.6 allows remote attackers to cause a denial of service (crash…

  • Unscored —
    CVE-2008-6720 Public exploit

    SQL injection vulnerability in admin/adm_login.php in DeltaScripts PHP Links 1.3 and earlier allows remote attackers to…

  • Unscored —
    CVE-2008-6718 Public exploit

    U&M Software JustBookIt 1.0 does not require administrative authentication for all scripts in the admin/ directory, whi…

  • Unscored —
    CVE-2008-6717 Public exploit

    U&M Software Signup 1.0 and 1.1 does not require administrative authentication for all scripts in the admin/ directory,…

  • Unscored —
    CVE-2008-6716 Public exploit

    homeadmin/adminhome.php in Pre ADS Portal 2.0 and earlier does not require administrative authentication, which allows …

  • Unscored —
    CVE-2008-6719 Public exploit

    U&M Software Event Lister (aka JustListIt) 1.0 does not require administrative authentication for all scripts in the ad…

  • Unscored —
    CVE-2008-6715 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Pre ADS Portal 2.0 and earlier allow remote attackers to inject …