Skip to content
OpenAdvisories

Archive

14 May 2009

Vulnerabilities first published on this day (UTC), newest first.

← April 2009 2009 / May /14 June 2009 →
  1. 133
  2. 2 
  3. 3 
  4. 411
  5. 517
  6. 619
  7. 719
  8. 85
  9. 9 
  10. 10 
  11. 1127
  12. 1227
  13. 1320
  14. 1412
  15. 1512
  16. 168
  17. 1712
  18. 1813
  19. 195
  20. 2013
  21. 2118
  22. 2231
  23. 23 
  24. 24 
  25. 25 
  26. 2617
  27. 275
  28. 2815
  29. 2925
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

12 results · Feed

  • Unscored —
    CVE-2009-0714 Public exploit EPSS 52%

    Unspecified vulnerability in the dpwinsup module (dpwinsup.dll) for dpwingad (dpwingad.exe) in HP Data Protector Expres…

  • Unscored —
    CVE-2009-1580

    Session fixation vulnerability in SquirrelMail before 1.4.18 allows remote attackers to hijack web sessions via a craft…

  • Unscored —
    CVE-2009-1465

    Application Access Server (A-A-S) 2.0.48 has "wildbat" as its default password for the admin account, which makes it ea…

  • Unscored —
    CVE-2009-1631

    The Mailer component in Evolution 2.26.1 and earlier uses world-readable permissions for the .evolution directory, and …

    evolution Debian
  • Unscored —
    CVE-2009-1578

    Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail before 1.4.18 and NaSMail before 1.7 allow remote a…

  • Unscored —
    CVE-2009-1630

    The nfs_permission function in fs/nfs/dir.c in the NFS client implementation in the Linux kernel 2.6.29.3 and earlier, …

  • Unscored —
    CVE-2009-1466

    Application Access Server (A-A-S) 2.0.48 stores (1) passwords and (2) the port keyword in cleartext in aas.ini, which a…

  • Unscored —
    CVE-2009-1464

    Multiple cross-site request forgery (CSRF) vulnerabilities in index.aas in Application Access Server (A-A-S) 2.0.48 all…

  • Unscored —
    CVE-2009-1629

    ajaxterm.js in AjaxTerm 0.10 and earlier generates session IDs with predictable random numbers based on certain JavaScr…

  • Unscored —
    CVE-2009-1581

    functions/mime.php in SquirrelMail before 1.4.18 does not protect the application's content from Cascading Style Sheets…

  • Unscored —
    CVE-2009-1579

    The map_yp_alias function in functions/imap_general.php in SquirrelMail before 1.4.18 and NaSMail before 1.7 allows rem…

  • Unscored —
    CVE-2009-1632

    Multiple memory leaks in Ipsec-tools before 0.7.2 allow remote attackers to cause a denial of service (memory consumpti…