Skip to content
OpenAdvisories

Archive

22 May 2009

Vulnerabilities first published on this day (UTC), newest first.

← April 2009 2009 / May /22 June 2009 →
  1. 133
  2. 2 
  3. 3 
  4. 411
  5. 517
  6. 619
  7. 719
  8. 85
  9. 9 
  10. 10 
  11. 1127
  12. 1227
  13. 1320
  14. 1412
  15. 1512
  16. 168
  17. 1712
  18. 1813
  19. 195
  20. 2013
  21. 2118
  22. 2231
  23. 23 
  24. 24 
  25. 25 
  26. 2617
  27. 275
  28. 2815
  29. 2925
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

31 results · Feed

  • Unscored —
    CVE-2009-1775

    Multiple cross-site scripting (XSS) vulnerabilities in Ulteo Open Virtual Desktop 1.0 allow remote attackers to inject …

  • Unscored —
    CVE-2009-1776 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in FormMail.pl in Matt Wright FormMail 1.92, and possibly earlier, …

  • Unscored —
    CVE-2009-1778 Public exploit

    SQL injection vulnerability in the new user registration feature in BigACE CMS 2.5, when magic_quotes_gpc is disabled, …

  • Unscored —
    CVE-2009-1779 Public exploit

    PHP remote file inclusion vulnerability in admin.php in Frax.dk Php Recommend 1.3 and earlier allows remote attackers t…

  • Unscored —
    CVE-2009-1783

    Multiple FRISK Software F-Prot anti-virus products, including Antivirus for Exchange, Linux on IBM zSeries, Linux x86 F…

  • Unscored —
    CVE-2009-1777 Public exploit

    CRLF injection vulnerability in FormMail.pl in Matt Wright FormMail 1.92, and possibly earlier, allows remote attackers…

  • Unscored —
    CVE-2009-1780 Public exploit

    admin.php in Frax.dk Php Recommend 1.3 and earlier does not require authentication when the user password is changed, w…

  • Unscored —
    CVE-2009-1785

    Cross-site scripting (XSS) vulnerability in Ulteo Open Virtual Desktop 1.0 allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2009-1782

    Multiple F-Secure anti-virus products, including Anti-Virus for Microsoft Exchange 7.10 and earlier; Internet Gatekeepe…

  • Unscored —
    CVE-2009-1381

    The map_yp_alias function in functions/imap_general.php in SquirrelMail before 1.4.19-1 on Debian GNU/Linux, and possib…

  • Unscored —
    CVE-2009-1781 Public exploit

    Static code injection vulnerability in admin.php in Frax.dk Php Recommend 1.3 and earlier allows remote attackers to in…

  • Unscored —
    CVE-2009-1784

    The AVG parsing engine 8.5 323, as used in multiple AVG anti-virus products including Anti-Virus Network Edition, Inter…

  • Unscored —
    CVE-2009-1766 Public exploit

    SQL injection vulnerability in index.php in LightOpenCMS 0.1 allows remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2009-1773

    activeCollab 2.1 Corporate allows remote attackers to obtain sensitive information via an invalid re_route parameter to…

  • Unscored —
    CVE-2009-1768 Public exploit

    Directory traversal vulnerability in download.php in Rama Zaiten CMS 0.9.8 and earlier allows remote attackers to read …

  • Unscored —
    CVE-2009-1770 Public exploit

    Directory traversal vulnerability in includes/database/examples/addressbook.php in Flyspeck CMS 6.8 allows remote attac…

  • Unscored —
    CVE-2009-1765 Public exploit EPSS 20%

    Multiple directory traversal vulnerabilities in pluck 4.6.2, when register_globals is enabled, allow remote attackers t…

  • Unscored —
    CVE-2009-1769

    The web interface in Open Computer and Software Inventory Next Generation (OCS Inventory NG) 1.01 generates different e…

    ocsinventory-server Debian
  • Unscored —
    CVE-2009-1767 Public exploit

    admin/edituser.php in 2daybiz Template Monster Clone does not require administrative authentication, which allows remot…

  • Unscored —
    CVE-2009-1764 Public exploit

    SQL injection vulnerability in inc/ajax.asp in MaxCMS 2.0 allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2009-1774 Public exploit EPSS 23%

    Directory traversal vulnerability in plugins/ddb/foot.php in Strawberry 1.1.1 allows remote attackers to include and ex…

  • Unscored —
    CVE-2009-1772

    Cross-site scripting (XSS) vulnerability in activeCollab 2.1 Corporate allows remote attackers to inject arbitrary web …

  • Unscored —
    CVE-2009-1771 Public exploit

    index.php in Flyspeck CMS 6.8 does not require administrative authentication for the updateExistingContent action, whic…

  • Unscored —
    CVE-2009-1763

    Unspecified vulnerability in the Solaris Secure Digital slot driver (aka sdhost) in Sun OpenSolaris snv_105 through snv…

  • Unscored —
    CVE-2009-1762

    Multiple cross-site scripting (XSS) vulnerabilities in the WebAccess login page (aka gw/webacc) in Novell GroupWise 7.x…

  • Unscored —
    CVE-2009-1635

    Multiple cross-site scripting (XSS) vulnerabilities in the WebAccess component in Novell GroupWise 7.x before 7.03 HP3 …

  • Unscored —
    CVE-2009-1758

    The hypervisor_callback function in Xen, possibly before 3.4.0, as applied to the Linux kernel 2.6.30-rc4, 2.6.18, and …

  • Unscored —
    CVE-2009-1756

    SLiM Simple Login Manager 1.3.0 places the X authority magic cookie (mcookie) on the command line when invoking xauth f…

    slim Debian
  • Unscored —
    CVE-2009-1757

    Cross-site request forgery (CSRF) vulnerability in Transmission 1.5 before 1.53 and 1.6 before 1.61 allows remote attac…

    transmission Debian
  • Unscored —
    CVE-2009-1755

    Off-by-one error in the packet_read_query_section function in packet.c in nsd 3.2.1, and process_query_section in query…

    nsd Debian
  • Unscored —
    CVE-2009-1759 Public exploit EPSS 14%

    Stack-based buffer overflow in the btFiles::BuildFromMI function (trunk/btfiles.cpp) in Enhanced CTorrent (aka dTorrent…

    ctorrent Debian