Skip to content
OpenAdvisories

Archive

5 May 2009

Vulnerabilities first published on this day (UTC), newest first.

17 results · Feed

  • Unscored —

    The selinux_ip_postroute_iptables_compat function in security/selinux/hooks.c in the SELinux subsystem in the Linux ker…

  • Unscored —
    CVE-2009-1526 Public exploit

    JBMC Software DirectAdmin before 1.334 allows local users to create or overwrite any file via a symlink attack on an ar…

  • Unscored —

    CMD_DB in JBMC Software DirectAdmin before 1.334 allows remote authenticated users to gain privileges via shell metacha…

  • Unscored —
    CVE-2009-1467 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in IceWarp eMail Server and WebMail Server before 9.4.2 allow remot…

  • Unscored —
    CVE-2009-1527 Public exploit

    Race condition in the ptrace_attach function in kernel/ptrace.c in the Linux kernel before 2.6.30-rc4 allows local user…

  • Unscored —
    CVE-2009-1468 Public exploit

    Multiple SQL injection vulnerabilities in the search form in server/webmail.php in the Groupware component in IceWarp e…

  • Unscored —
    CVE-2009-1469 Public exploit

    CRLF injection vulnerability in the Forgot Password implementation in server/webmail.php in IceWarp eMail Server and We…

  • Unscored —

    McAfee GroupShield for Microsoft Exchange on Exchange Server 2000, and possibly other anti-virus or anti-spam products …

  • Unscored —
    CVE-2009-1490 Public exploit EPSS 13%

    Heap-based buffer overflow in Sendmail before 8.13.2 allows remote attackers to cause a denial of service (daemon crash…

  • Unscored —
    CVE-2008-4828 Public exploit EPSS 71%

    Multiple stack-based buffer overflows in dsmagent.exe in the Remote Agent Service in the IBM Tivoli Storage Manager (TS…

  • Unscored —
    CVE-2009-0720 EPSS 10%

    Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to …

  • Unscored —

    Multiple buffer overflows in Cscope before 15.7a allow remote attackers to execute arbitrary code via long strings in i…

  • Unscored —

    Buffer overflow in the Web GUI in the IBM Tivoli Storage Manager (TSM) client 5.1.0.0 through 5.1.8.2, 5.2.0.0 through …

  • Unscored —

    Unspecified vulnerability in the Java GUI in the IBM Tivoli Storage Manager (TSM) client 5.2.0.0 through 5.2.5.3, 5.3.0…

  • Unscored —

    The IBM Tivoli Storage Manager (TSM) client 5.5.0.0 through 5.5.1.17 on AIX and Windows, when SSL is used, allows remot…

  • Medium 5.3
    CVE-2009-1523 Public exploit EPSS 26%

    Directory traversal in Mort Bay Jetty

    Directory traversal vulnerability in the HTTP server in Mort Bay Jetty 5.1.14, 6.x before 6.1.17, and 7.x through 7.0.0.M2 allows remote attackers to access arbitrary files via directory traversal sequences in the URI.

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Mort Bay Jetty before 6.1.17 allows remote attackers to inject arbitrary we…