Skip to content
OpenAdvisories

Archive

22 April 2009

Vulnerabilities first published on this day (UTC), newest first.

10 results · Clear filters · Feed

  • Unscored —
    CVE-2008-6743 Public exploit

    RSMScript 1.21 allows remote attackers to bypass authentication and gain administrative privileges by setting the verif…

  • Unscored —
    CVE-2009-1370 Public exploit

    Stack-based buffer overflow in ape_plugin.plg in Xilisoft Video Converter 3.1.53.0704n and 5.1.23.0402 allows remote at…

  • Unscored —
    CVE-2009-1369 Public exploit

    moziloCMS 1.11 allows remote attackers to obtain sensitive information via the (1) gal[] parameter to gallery.php, (2) …

  • Unscored —
    CVE-2009-1368 Public exploit

    Directory traversal vulnerability in index.php in moziloCMS 1.11 allows remote attackers to read arbitrary files via a …

  • Unscored —
    CVE-2009-1367 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in moziloCMS 1.11 allows remote attackers to inject arbitrary web…

  • Unscored —
    CVE-2009-0307 Public exploit

    Cross-site scripting (XSS) vulnerability in the "Customize Statistics Page" (admin/statistics/ConfigureStatistics) in t…

  • Unscored —
    CVE-2009-1362 Public exploit

    SQL injection vulnerability in administration/index.php in chCounter 3.1.3 allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2009-1361 Public exploit

    dig.php in GScripts.net DNS Tools allows remote attackers to execute arbitrary commands via shell metacharacters in the…

  • Unscored —
    CVE-2009-1312 Public exploit

    Mozilla Firefox before 3.0.9 and SeaMonkey 1.1.17 do not block javascript: URIs in Refresh headers in HTTP responses, w…

  • Unscored —
    CVE-2009-1337 Public exploit

    The exit_notify function in kernel/exit.c in the Linux kernel before 2.6.30-rc1 does not restrict exit signals when the…