Skip to content
OpenAdvisories

Archive

22 May 2009

Vulnerabilities first published on this day (UTC), newest first.

← April 2009 2009 / May /22 June 2009 →
  1. 133
  2. 2 
  3. 3 
  4. 411
  5. 517
  6. 619
  7. 719
  8. 85
  9. 9 
  10. 10 
  11. 1127
  12. 1227
  13. 1320
  14. 1412
  15. 1512
  16. 168
  17. 1712
  18. 1813
  19. 195
  20. 2013
  21. 2118
  22. 2231
  23. 23 
  24. 24 
  25. 25 
  26. 2617
  27. 275
  28. 2815
  29. 2925
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

15 results · Clear filters · Feed

  • Unscored —
    CVE-2009-1776 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in FormMail.pl in Matt Wright FormMail 1.92, and possibly earlier, …

  • Unscored —
    CVE-2009-1778 Public exploit

    SQL injection vulnerability in the new user registration feature in BigACE CMS 2.5, when magic_quotes_gpc is disabled, …

  • Unscored —
    CVE-2009-1779 Public exploit

    PHP remote file inclusion vulnerability in admin.php in Frax.dk Php Recommend 1.3 and earlier allows remote attackers t…

  • Unscored —
    CVE-2009-1777 Public exploit

    CRLF injection vulnerability in FormMail.pl in Matt Wright FormMail 1.92, and possibly earlier, allows remote attackers…

  • Unscored —
    CVE-2009-1780 Public exploit

    admin.php in Frax.dk Php Recommend 1.3 and earlier does not require authentication when the user password is changed, w…

  • Unscored —
    CVE-2009-1781 Public exploit

    Static code injection vulnerability in admin.php in Frax.dk Php Recommend 1.3 and earlier allows remote attackers to in…

  • Unscored —
    CVE-2009-1766 Public exploit

    SQL injection vulnerability in index.php in LightOpenCMS 0.1 allows remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2009-1768 Public exploit

    Directory traversal vulnerability in download.php in Rama Zaiten CMS 0.9.8 and earlier allows remote attackers to read …

  • Unscored —
    CVE-2009-1770 Public exploit

    Directory traversal vulnerability in includes/database/examples/addressbook.php in Flyspeck CMS 6.8 allows remote attac…

  • Unscored —
    CVE-2009-1765 Public exploit EPSS 20%

    Multiple directory traversal vulnerabilities in pluck 4.6.2, when register_globals is enabled, allow remote attackers t…

  • Unscored —
    CVE-2009-1767 Public exploit

    admin/edituser.php in 2daybiz Template Monster Clone does not require administrative authentication, which allows remot…

  • Unscored —
    CVE-2009-1764 Public exploit

    SQL injection vulnerability in inc/ajax.asp in MaxCMS 2.0 allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2009-1774 Public exploit EPSS 23%

    Directory traversal vulnerability in plugins/ddb/foot.php in Strawberry 1.1.1 allows remote attackers to include and ex…

  • Unscored —
    CVE-2009-1771 Public exploit

    index.php in Flyspeck CMS 6.8 does not require administrative authentication for the updateExistingContent action, whic…

  • Unscored —
    CVE-2009-1759 Public exploit EPSS 14%

    Stack-based buffer overflow in the btFiles::BuildFromMI function (trunk/btfiles.cpp) in Enhanced CTorrent (aka dTorrent…

    ctorrent Debian