Skip to content
OpenAdvisories

Archive

11 May 2009

Vulnerabilities first published on this day (UTC), newest first.

← April 2009 2009 / May /11 June 2009 →
  1. 133
  2. 2 
  3. 3 
  4. 411
  5. 517
  6. 619
  7. 719
  8. 85
  9. 9 
  10. 10 
  11. 1127
  12. 1227
  13. 1320
  14. 1412
  15. 1512
  16. 168
  17. 1712
  18. 1813
  19. 195
  20. 2013
  21. 2118
  22. 2231
  23. 23 
  24. 24 
  25. 25 
  26. 2617
  27. 275
  28. 2815
  29. 2925
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

27 results · Feed

  • Unscored —
    CVE-2008-6805 Public exploit

    Multiple SQL injection vulnerabilities in Mic_Blog 0.0.3, when magic_quotes_gpc is disabled, allow remote attackers to …

  • Unscored —
    CVE-2008-6804 Public exploit

    Tribiq CMS 5.0.9a beta allows remote attackers to bypass authentication and gain administrative access by setting the C…

  • Unscored —
    CVE-2008-6803 Public exploit

    SQL injection vulnerability in diziler.asp in Yigit Aybuga Dizi Portali allows remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2009-1616 Public exploit

    Cross-site scripting (XSS) vulnerability in docs/showdoc.php in Coppermine Photo Gallery (CPG) before 1.4.22 allows rem…

  • Unscored —
    CVE-2009-1613 Public exploit

    Multiple SQL injection vulnerabilities in leap.php in Leap CMS 0.1.4, when magic_quotes_gpc is disabled, allow remote a…

  • Unscored —
    CVE-2009-1614 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Leap CMS 0.1.4 allow remote attackers to inject arbitrary web sc…

  • Unscored —
    CVE-2009-1615 Public exploit

    Unrestricted file upload vulnerability in Leap CMS 0.1.4 allows remote attackers to execute arbitrary code by uploading…

  • Unscored —
    CVE-2009-1612 Public exploit EPSS 33%

    Stack-based buffer overflow in the MPS.StormPlayer.1 ActiveX control in mps.dll 3.9.4.27 in Baofeng Storm allows remote…

  • Unscored —
    CVE-2009-1604

    Unspecified vulnerability in LimeSurvey before 1.82 allows remote attackers to execute commands and obtain sensitive da…

  • Unscored —
    CVE-2009-1608 Public exploit EPSS 11%

    Multiple buffer overflows in Microchip MPLAB IDE 8.30 and possibly earlier versions allow user-assisted remote attacker…

  • Unscored —
    CVE-2009-1607 Public exploit

    Cross-site scripting (XSS) vulnerability in the administrator panel in phpForm.net LinkBase 2.0 allows remote attackers…

  • Medium 5.4
    CVE-2009-1605

    Heap-based buffer overflow in the loadexponentialfunc function in mupdf/pdf_function.c in MuPDF in the mupdf-20090223-w…

  • Unscored —
    CVE-2009-1609 Public exploit

    Unrestricted file upload vulnerability in admin/uploadform.asp in Battle Blog 1.25 allows remote attackers to execute a…

  • Unscored —
    CVE-2009-1610 Public exploit

    admin/changepassword.php in Job Script Job Board Software 2.0 allows remote attackers to change the administrator passw…

  • Unscored —
    CVE-2009-1611 Public exploit

    Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a…

  • Unscored —
    CVE-2009-1606

    Multiple stack-based and heap-based buffer overflows in Dafolo DafoloControl ActiveX control (DafoloFFControl.dll) 1.10…

  • Unscored —
    CVE-2009-1603

    src/tools/pkcs11-tool.c in pkcs11-tool in OpenSC 0.11.7, when used with unspecified third-party PKCS#11 modules, genera…

    opensc Debian
  • Unscored —
    CVE-2009-0194

    The domain-locking implementation in the GARMINAXCONTROL.GarminAxControl_t.1 ActiveX control in npGarmin.dll in the Gar…

  • Unscored —
    CVE-2009-1597

    Mozilla Firefox executes DOM calls in response to a javascript: URI in the target attribute of a submit element within …

  • Unscored —
    CVE-2009-1602 Public exploit

    Pablo Software Solutions Quick 'n Easy Mail Server 3.3 allows remote attackers to cause a denial of service (daemon out…

  • Unscored —
    CVE-2009-1598

    Google Chrome executes DOM calls in response to a javascript: URI in the target attribute of a submit element within a …

  • Unscored —
    CVE-2009-1601

    The Ubuntu clamav-milter.init script in clamav-milter before 0.95.1+dfsg-1ubuntu1.2 in Ubuntu 9.04 sets the ownership o…

  • Unscored —
    CVE-2009-1599

    Opera executes DOM calls in response to a javascript: URI in the target attribute of a submit element within a form con…

  • Unscored —
    CVE-2009-1600

    Apple Safari executes DOM calls in response to a javascript: URI in the target attribute of a submit element within a f…

  • Unscored —
    CVE-2009-1194

    Integer overflow in the pango_glyph_string_set_size function in pango/glyphstring.c in Pango before 1.24 allows context…

    pango1.0 Debian
  • Medium —
    CVE-2009-1595 Public exploit

    Ignite Realtime Openfire Allows Users to Change Passwords of Arbitrary Accounts

    The jabber:iq:auth implementation in IQAuthHandler.java in Ignite Realtime Openfire before 3.6.4 allows remote authenticated users to change the passwords of arbitrary accounts via a modified username element in a passwd_change action.

    org.igniterealtime.openfire:parent Maven
  • Unscored —
    CVE-2009-1596

    Ignite Realtime Openfire before 3.6.5 does not properly implement the register.password (aka canChangePassword) console…