Skip to content
OpenAdvisories

Archive

May 2009

Vulnerabilities first published in this month (UTC), newest first.

← April 2009 2009 / May June 2009 →
  1. 133
  2. 2 
  3. 3 
  4. 411
  5. 517
  6. 619
  7. 719
  8. 85
  9. 9 
  10. 10 
  11. 1127
  12. 1227
  13. 1320
  14. 1412
  15. 1512
  16. 168
  17. 1712
  18. 1813
  19. 195
  20. 2013
  21. 2118
  22. 2231
  23. 23 
  24. 24 
  25. 25 
  26. 2617
  27. 275
  28. 2815
  29. 2925
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

364 results · Feed

  • Unscored —
    CVE-2008-6791 Public exploit

    PumpKIN TFTP Server 2.7.2.0 allows remote attackers to cause a denial of service via a write request with a long mode f…

  • Unscored —
    CVE-2008-6790 Public exploit

    The admin module in MindDezign Photo Gallery 2.2 allows remote attackers to add administrative users and gain privilege…

  • Unscored —
    CVE-2008-6788 Public exploit

    SQL injection vulnerability in MindDezign Photo Gallery 2.2, when magic_quotes_gpc is disabled, allows remote attackers…

  • Unscored —
    CVE-2008-6789 Public exploit

    SQL injection vulnerability in MindDezign Photo Gallery 2.2 allows remote attackers to execute arbitrary SQL commands v…

  • Unscored —
    CVE-2009-1518

    Cross-site request forgery (CSRF) vulnerability in Beltane before 2.3.11 allows remote attackers to hijack the authenti…

  • Unscored —
    CVE-2009-1519 Public exploit

    Directory traversal vulnerability in index.php in Pecio CMS 1.1.5 allows remote attackers to read arbitrary files via a…

  • Unscored —
    CVE-2009-1517 Public exploit

    Multiple insecure method vulnerabilities in the Symantec.EasySetup.1 ActiveX control in EasySetupInt.dll 14.0.4.30167 i…

  • Unscored —
    CVE-2009-1516 Public exploit

    Stack-based buffer overflow in the IceWarpServer.APIObject ActiveX control in api.dll in IceWarp Merak Mail Server 9.4.…

  • Unscored —
    CVE-2009-1515

    Heap-based buffer overflow in the cdf_read_sat function in src/cdf.c in Christos Zoulas file 5.00 allows user-assisted …

    file Debian
  • Unscored —
    CVE-2009-1513

    Buffer overflow in the PATinst function in src/load_pat.cpp in libmodplug before 0.8.7 allows user-assisted remote atta…

    libmodplug Debian
  • Unscored —
    CVE-2009-1514 Public exploit

    Google Chrome 1.0.154.53 allows remote attackers to cause a denial of service (NULL pointer dereference and application…

  • Unscored —
    CVE-2009-1512 Public exploit

    Static code injection vulnerability in X-Forum 0.6.2 allows remote authenticated administrators to inject arbitrary PHP…

  • Unscored —
    CVE-2008-6786

    Multiple directory traversal vulnerabilities in geekigeeki.py in GeekiGeeki before 3.0 allow remote attackers to read a…

  • Unscored —
    CVE-2008-6787 Public exploit

    SQL injection vulnerability in administrator/index.php in Lizardware CMS 0.6.0 and earlier allows remote attackers to e…

  • Unscored —
    CVE-2008-6785 Public exploit

    Unrestricted file upload vulnerability in Mini File Host 1.5 allows remote attackers to execute arbitrary code by uploa…

  • Unscored —
    CVE-2009-1511 Public exploit EPSS 14%

    GDI+ in Microsoft Windows XP SP3 allows remote attackers to cause a denial of service (infinite loop) via a PNG file th…

  • Unscored —
    CVE-2009-1509 Public exploit

    SQL injection vulnerability in ajaxp_backend.php in MyioSoft AjaxPortal 3.0 allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2009-1510 Public exploit

    Multiple directory traversal vulnerabilities in KoschtIT Image Gallery 1.82 allow remote attackers to include and execu…

  • Unscored —
    CVE-2009-1508 Public exploit

    SQL injection vulnerability in the xforum_validateUser function in Common.php in X-Forum 0.6.2 allows remote attackers …

  • Unscored —
    CVE-2008-6777 Public exploit

    Multiple SQL injection vulnerabilities in MyPHP Forum 3.0 and earlier allow remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2008-6779 Public exploit

    SQL injection vulnerability in the Sarkilar module for PHP-Nuke allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2008-6783 Public exploit

    SQL injection vulnerability in directory.php in Sites for Scripts (SFS) EZ Home Business Directory allows remote attack…

  • Unscored —
    CVE-2008-6776 Public exploit

    SQL injection vulnerability in viewcomments.php in Scripts For Sites (SFS) EZ Hot or Not allows remote attackers to exe…

  • Unscored —
    CVE-2008-6781 Public exploit

    SQL injection vulnerability in directory.php in Sites for Scripts (SFS) Gaming Directory allows remote attackers to exe…

  • Unscored —
    CVE-2008-6784 Public exploit

    SQL injection vulnerability in directory.php in Scripts For Sites (SFS) EZ Adult Directory allows remote attackers to e…

  • Unscored —
    CVE-2008-6780 Public exploit

    SQL injection vulnerability in directory.php in Scripts for Sites (SFS) SFS EZ Affiliate allows remote attackers to exe…

  • Unscored —
    CVE-2008-6778 Public exploit

    SQL injection vulnerability in viewfaqs.php in Scripts for Sites (SFS) EZ Auction allows remote attackers to execute ar…

  • Unscored —
    CVE-2008-6782 Public exploit

    SQL injection vulnerability in directory.php in Sites for Scripts (SFS) EZ Hosting Directory allows remote attackers to…

  • Unscored —
    CVE-2009-1503 Public exploit

    Multiple SQL injection vulnerabilities in login.php in Tiger Document Management System (DMS) allow remote attackers to…

  • Unscored —
    CVE-2009-1505

    SQL injection vulnerability in the News Page module 5.x before 5.x-1.2 for Drupal allows remote authenticated users, wi…

  • Unscored —
    CVE-2009-1504 Public exploit

    Absolute Form Processor XE 1.5 allows remote attackers to bypass authentication and gain administrative access by setti…

  • Unscored —
    CVE-2009-1365

    Unspecified vulnerability in Adobe Flash Media Server (FMS) before 3.0.4 and 3.5.x before 3.5.2, as used in Flash Media…

  • Unscored —
    CVE-2009-1502 Public exploit

    Directory traversal vulnerability in plugin.php in S-Cms 1.1 Stable and 1.5.2 allows remote attackers to include and ex…

  • Unscored —
    CVE-2009-1364

    Use-after-free vulnerability in the embedded GD library in libwmf 0.2.8.4 allows context-dependent attackers to cause a…

    libwmf Debian
  • Unscored —
    CVE-2009-1500 Public exploit

    SQL injection vulnerability in index.php in ProjectCMS 1.0 Beta allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2009-1506 Public exploit

    SQL injection vulnerability in classes/Xp.php in eLitius 1.0 allows remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2009-1507

    The Node Access User Reference module 5.x before 5.x-2.0-beta4 and 6.x before 6.x-2.0-beta6, a module for Drupal, inter…

    Web / CMS
  • Unscored —
    CVE-2009-1501

    Cross-site scripting (XSS) vulnerability in the Exif module 5.x-1.x before 5.x-1.2 and 6.x-1.x-dev before April 13, 200…

    Web / CMS
  • Unscored —
    CVE-2008-6775 Public exploit

    HTC Touch Pro and HTC Touch Cruise vCard allows remote attackers to cause denial of service (CPU consumption, SMS consu…

  • Unscored —
    CVE-2009-1498 Public exploit

    Directory traversal vulnerability in inc/profilemain.php in Game Maker 2k Internet Discussion Boards (iDB) 0.2.5 Pre-Al…