Skip to content
OpenAdvisories

Archive

20 May 2009

Vulnerabilities first published on this day (UTC), newest first.

← April 2009 2009 / May /20 June 2009 →
  1. 133
  2. 2 
  3. 3 
  4. 411
  5. 517
  6. 619
  7. 719
  8. 85
  9. 9 
  10. 10 
  11. 1127
  12. 1227
  13. 1320
  14. 1412
  15. 1512
  16. 168
  17. 1712
  18. 1813
  19. 195
  20. 2013
  21. 2118
  22. 2231
  23. 23 
  24. 24 
  25. 25 
  26. 2617
  27. 275
  28. 2815
  29. 2925
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

13 results · Feed

  • Unscored —
    CVE-2009-1737

    Directory traversal vulnerability in bom.php in MyPic 2.1 allows remote attackers to list files in arbitrary directorie…

  • Unscored —
    CVE-2009-1742 Public exploit

    code.php in PC4Arb Pc4 Uploader 9.0 and earlier makes it easier for remote attackers to conduct SQL injection attacks v…

  • Unscored —
    CVE-2009-1734 Public exploit

    SQL injection vulnerability in listing_video.php in VidSharePro allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2009-1735 Public exploit

    Cross-site scripting (XSS) vulnerability in search.php in VidSharePro allows remote attackers to inject arbitrary web s…

  • Unscored —
    CVE-2009-1740

    Multiple heap-based buffer overflows in the D-Link MPEG4 Viewer ActiveX Control (csviewer.ocx) 2.11.918.2006 allow remo…

  • Unscored —
    CVE-2009-1741 Public exploit

    Multiple SQL injection vulnerabilities in login.php in DM FileManager 3.9.2, when magic_quotes_gpc is disabled, allow r…

  • Unscored —
    CVE-2009-1739 Public exploit

    PAD Site Scripts 3.6 allows remote attackers to bypass authentication and gain privileges as other users, including adm…

  • Unscored —
    CVE-2009-1732

    Cross-site scripting (XSS) vulnerability in admin/usermanager in IPplan 4.91a allows remote attackers to inject arbitra…

  • Unscored —
    CVE-2009-1733

    Cross-site request forgery (CSRF) vulnerability in IPplan 4.91a allows remote attackers to hijack the authentication of…

  • Unscored —
    CVE-2009-1738

    Cross-site scripting (XSS) vulnerability in Feed Block 6.x-1.x before 6.x-1.1, a module for Drupal, allows remote authe…

    Web / CMS
  • Unscored —
    CVE-2009-1736 Public exploit

    SQL injection vulnerability in the GridSupport (GS) Ticket System (com_gsticketsystem) component for Joomla! allows rem…

  • Unscored —
    CVE-2009-1730 Public exploit EPSS 55%

    Multiple directory traversal vulnerabilities in NetMechanica NetDecision TFTP Server 4.2 allow remote attackers to read…

  • Unscored —
    CVE-2009-1731

    SQL injection vulnerability in panel/index.php in MLFFAT 2.1 allows remote attackers to execute arbitrary SQL commands …