Skip to content
OpenAdvisories

Archive

7 May 2009

Vulnerabilities first published on this day (UTC), newest first.

← April 2009 2009 / May /7 June 2009 →
  1. 133
  2. 2 
  3. 3 
  4. 411
  5. 517
  6. 619
  7. 719
  8. 85
  9. 9 
  10. 10 
  11. 1127
  12. 1227
  13. 1320
  14. 1412
  15. 1512
  16. 168
  17. 1712
  18. 1813
  19. 195
  20. 2013
  21. 2118
  22. 2231
  23. 23 
  24. 24 
  25. 25 
  26. 2617
  27. 275
  28. 2815
  29. 2925
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

19 results · Feed

  • Unscored —
    CVE-2008-6802 Public exploit

    Multiple SQL injection vulnerabilities in index.php in phPhotoGallery 0.92 allow remote attackers to execute arbitrary …

  • Unscored —
    CVE-2008-6801

    Cross-site request forgery (CSRF) vulnerability in Vivvo CMS before 4.0.4 allows remote attackers to hijack the authent…

  • Unscored —
    CVE-2008-6799 Public exploit

    connection.php in FlashChat 5.0.8 allows remote attackers to bypass the role filter mechanism and gain administrative p…

  • Unscored —
    CVE-2009-1586 Public exploit

    Stack-based buffer overflow in the NZB importer feature in GrabIt 1.7.2 Beta 3 and earlier allows remote attackers to e…

  • Unscored —
    CVE-2009-1587 Public exploit

    index.php in PHP Site Lock 2.0 allows remote attackers to bypass authentication and obtain administrative access by set…

  • Unscored —
    CVE-2009-1584 Public exploit

    Multiple SQL injection vulnerabilities in TemaTres 1.0.3 and 1.031, when magic_quotes_gpc is disabled, allow remote att…

  • Unscored —
    CVE-2009-1582 Public exploit

    Million Dollar Text Links 1.0 does not properly restrict administrator access to admin.home.php, which allows remote at…

  • Unscored —
    CVE-2009-1583 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in TemaTres 1.0.3 and 1.031 allow remote attackers to inject arbitr…

  • Unscored —
    CVE-2009-1585 Public exploit

    Multiple SQL injection vulnerabilities in TemaTres 1.031, when magic_quotes_gpc is disabled, allow remote attackers to …

  • Unscored —
    CVE-2008-6797

    The server in Mitel NuPoint Messenger R11 and R3 sends usernames and passwords in cleartext to Exchange servers, which …

  • Unscored —
    CVE-2008-6798 Public exploit

    Multiple SQL injection vulnerabilities in login.php in Pre Projects Pre Real Estate Listings allow remote attackers to …

  • Unscored —
    CVE-2008-6794 Public exploit

    SQL injection vulnerability in directory.php in Scripts For Sites (SFS) EZ Pub Site allows remote attackers to execute …

  • Unscored —
    CVE-2008-6795 Public exploit

    SQL injection vulnerability in view_news.php in nicLOR Vibro-School-CMS allows remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2008-6793 Public exploit

    The get_file_type function in lib/file_content.php in DFLabs PTK 0.1, 0.2, and 1.0 allows remote attackers to execute a…

  • Unscored —
    CVE-2008-6792

    system-tools-backends before 2.6.0-1ubuntu1.1 in Ubuntu 8.10, as used by "Users and Groups" in GNOME System Tools, hash…

    system-tools-backends Debian
  • Unscored —
    CVE-2008-6796 Public exploit

    SQL injection vulnerability in manager/login.php in Pre Projects Pre Real Estate Listings allows remote attackers to ex…

  • Unscored —
    CVE-2009-1442

    Multiple integer overflows in Skia, as used in Google Chrome 1.x before 1.0.154.64 and 2.x, and possibly Android, might…

  • Unscored —
    CVE-2009-1441

    Heap-based buffer overflow in the ParamTraits<SkBitmap>::Read function in Google Chrome before 1.0.154.64 allows attack…

  • Unscored —
    CVE-2009-1577

    Multiple stack-based buffer overflows in the putstring function in find.c in Cscope before 15.6 allow user-assisted rem…

    cscope Debian