Skip to content
OpenAdvisories

Archive

6 May 2009

Vulnerabilities first published on this day (UTC), newest first.

19 results · Feed

  • Unscored —

    The BGP daemon (bgpd) in Quagga 0.99.11 and earlier allows remote attackers to cause a denial of service (crash) via an…

  • Unscored —
    CVE-2009-1574 Public exploit EPSS 12%

    racoon/isakmp_frag.c in ipsec-tools before 0.7.2 allows remote attackers to cause a denial of service (crash) via craft…

  • Unscored —

    xvfb-run 1.6.1 in Debian GNU/Linux, Ubuntu, Fedora 10, and possibly other operating systems place the magic cookie (MCO…

  • Unscored —

    Unspecified vulnerability in Drupal 5.x before 5.17 and 6.x before 6.11, as used in vbDrupal before 5.17.0, allows user…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Drupal 5.x before 5.17 and 6.x before 6.11, as used in vbDrupal before 5.17…

  • Unscored —

    The Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 sends configuration data in response…

  • Unscored —

    The Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 stores passwords and wireless-networ…

  • Unscored —
    CVE-2009-1553 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the Admin Console in Sun GlassFish Enterprise Server 2.1 allow r…

  • Unscored —
    CVE-2009-1561 Public exploit

    Cross-site request forgery (CSRF) vulnerability in administration.cgi on the Cisco Linksys WRT54GC router with firmware…

  • Unscored —

    img/main.cgi on the Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 allows remote authen…

  • Unscored —
    CVE-2009-1557 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities on the Cisco Linksys WVC54GCA wireless video camera with firmware 1…

  • Unscored —
    CVE-2009-1554 Public exploit

    Cross-site scripting (XSS) vulnerability in ThemeServlet.java in Sun Woodstock 4.2, as used in Sun GlassFish Enterprise…

  • Unscored —

    Absolute path traversal vulnerability in adm/file.cgi on the Cisco Linksys WVC54GCA wireless video camera with firmware…

  • Unscored —
    CVE-2009-1558 Public exploit Scanner template EPSS 30%

    Directory traversal vulnerability in adm/file.cgi on the Cisco Linksys WVC54GCA wireless video camera with firmware 1.0…

  • Unscored —

    Unspecified vulnerability in the IGMP driver in SCO Unixware Release 7.1.4 Maintenance Pack 4 allows attackers to cause…

  • Unscored —
    CVE-2009-1550 Public exploit

    Zakkis Technology ABC Advertise 1.0 does not properly restrict access to admin.inc.php, which allows remote attackers t…

  • Unscored —
    CVE-2009-1551 Public exploit EPSS 37%

    Multiple PHP remote file inclusion vulnerabilities in Qt quickteam 2 allow remote attackers to execute arbitrary PHP co…

  • Unscored —
    CVE-2009-1548 Public exploit

    SQL injection vulnerability in index.php in BluSky CMS allows remote attackers to execute arbitrary SQL commands via th…

  • Unscored —
    CVE-2009-1549 Public exploit

    AGTC MyShop 3.2b allows remote attackers to bypass authentication and obtain administrative access setting the log_acce…