Skip to content
OpenAdvisories

Archive

1 May 2009

Vulnerabilities first published on this day (UTC), newest first.

← April 2009 2009 / May /1 June 2009 →
  1. 133
  2. 2 
  3. 3 
  4. 411
  5. 517
  6. 619
  7. 719
  8. 85
  9. 9 
  10. 10 
  11. 1127
  12. 1227
  13. 1320
  14. 1412
  15. 1512
  16. 168
  17. 1712
  18. 1813
  19. 195
  20. 2013
  21. 2118
  22. 2231
  23. 23 
  24. 24 
  25. 25 
  26. 2617
  27. 275
  28. 2815
  29. 2925
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

27 results · Clear filters · Feed

  • Unscored —
    CVE-2009-1512 Public exploit

    Static code injection vulnerability in X-Forum 0.6.2 allows remote authenticated administrators to inject arbitrary PHP…

  • Unscored —
    CVE-2008-6787 Public exploit

    SQL injection vulnerability in administrator/index.php in Lizardware CMS 0.6.0 and earlier allows remote attackers to e…

  • Unscored —
    CVE-2008-6785 Public exploit

    Unrestricted file upload vulnerability in Mini File Host 1.5 allows remote attackers to execute arbitrary code by uploa…

  • Unscored —
    CVE-2009-1511 Public exploit EPSS 14%

    GDI+ in Microsoft Windows XP SP3 allows remote attackers to cause a denial of service (infinite loop) via a PNG file th…

  • Unscored —
    CVE-2009-1509 Public exploit

    SQL injection vulnerability in ajaxp_backend.php in MyioSoft AjaxPortal 3.0 allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2009-1510 Public exploit

    Multiple directory traversal vulnerabilities in KoschtIT Image Gallery 1.82 allow remote attackers to include and execu…

  • Unscored —
    CVE-2009-1508 Public exploit

    SQL injection vulnerability in the xforum_validateUser function in Common.php in X-Forum 0.6.2 allows remote attackers …

  • Unscored —
    CVE-2008-6777 Public exploit

    Multiple SQL injection vulnerabilities in MyPHP Forum 3.0 and earlier allow remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2008-6779 Public exploit

    SQL injection vulnerability in the Sarkilar module for PHP-Nuke allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2008-6783 Public exploit

    SQL injection vulnerability in directory.php in Sites for Scripts (SFS) EZ Home Business Directory allows remote attack…

  • Unscored —
    CVE-2008-6776 Public exploit

    SQL injection vulnerability in viewcomments.php in Scripts For Sites (SFS) EZ Hot or Not allows remote attackers to exe…

  • Unscored —
    CVE-2008-6781 Public exploit

    SQL injection vulnerability in directory.php in Sites for Scripts (SFS) Gaming Directory allows remote attackers to exe…

  • Unscored —
    CVE-2008-6784 Public exploit

    SQL injection vulnerability in directory.php in Scripts For Sites (SFS) EZ Adult Directory allows remote attackers to e…

  • Unscored —
    CVE-2008-6780 Public exploit

    SQL injection vulnerability in directory.php in Scripts for Sites (SFS) SFS EZ Affiliate allows remote attackers to exe…

  • Unscored —
    CVE-2008-6778 Public exploit

    SQL injection vulnerability in viewfaqs.php in Scripts for Sites (SFS) EZ Auction allows remote attackers to execute ar…

  • Unscored —
    CVE-2008-6782 Public exploit

    SQL injection vulnerability in directory.php in Sites for Scripts (SFS) EZ Hosting Directory allows remote attackers to…

  • Unscored —
    CVE-2009-1503 Public exploit

    Multiple SQL injection vulnerabilities in login.php in Tiger Document Management System (DMS) allow remote attackers to…

  • Unscored —
    CVE-2009-1504 Public exploit

    Absolute Form Processor XE 1.5 allows remote attackers to bypass authentication and gain administrative access by setti…

  • Unscored —
    CVE-2009-1502 Public exploit

    Directory traversal vulnerability in plugin.php in S-Cms 1.1 Stable and 1.5.2 allows remote attackers to include and ex…

  • Unscored —
    CVE-2009-1500 Public exploit

    SQL injection vulnerability in index.php in ProjectCMS 1.0 Beta allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2009-1506 Public exploit

    SQL injection vulnerability in classes/Xp.php in eLitius 1.0 allows remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2008-6775 Public exploit

    HTC Touch Pro and HTC Touch Cruise vCard allows remote attackers to cause denial of service (CPU consumption, SMS consu…

  • Unscored —
    CVE-2009-1498 Public exploit

    Directory traversal vulnerability in inc/profilemain.php in Game Maker 2k Internet Discussion Boards (iDB) 0.2.5 Pre-Al…

  • Unscored —
    CVE-2009-1499 Public exploit

    SQL injection vulnerability in the MailTo (aka com_mailto) component in Joomla! allows remote attackers to execute arbi…

  • Unscored —
    CVE-2009-1496 Public exploit Scanner template

    Directory traversal vulnerability in the Cmi Marketplace (com_cmimarketplace) component 0.1 for Joomla! allows remote a…

  • Unscored —
    CVE-2009-1497 Public exploit

    Stack-based buffer overflow in srt2smi.exe in Gretech Online Movie Player (GOM Player) 2.1.16.4635 allows remote attack…

  • Unscored —
    CVE-2009-1495 Public exploit

    Web File Explorer 3.1 stores sensitive information under the web root with insufficient access control, which allows re…