Skip to content
OpenAdvisories

Archive

5 June 2009

Vulnerabilities first published on this day (UTC), newest first.

15 results · Clear filters · Feed

  • Unscored —
    CVE-2008-6825 Public exploit EPSS 20%

    Directory traversal vulnerability in user/index.php in Fonality trixbox CE 2.6.1 and earlier allows remote attackers to…

  • Unscored —
    CVE-2009-1944 Public exploit EPSS 10%

    Stack-based buffer overflow in AIMP 2.51 build 330 allows remote attackers to execute arbitrary code via an MP3 file wi…

  • Unscored —
    CVE-2009-1947 Public exploit

    SQL injection vulnerability in the UnbDbEncode function in unb_lib/database.lib.php in Unclassified NewsBoard (UNB) 1.6…

  • Unscored —
    CVE-2009-1945 Public exploit

    SQL injection vulnerability in webCal3_detail.asp in WebCal 3.04 allows remote attackers to execute arbitrary SQL comma…

  • Unscored —
    CVE-2009-1943 Public exploit EPSS 72%

    Stack-based buffer overflow in the IKE service (ireIke.exe) in SafeNet SoftRemote before 10.8.6 allows remote attackers…

  • Unscored —
    CVE-2009-1952 Public exploit

    Multiple SQL injection vulnerabilities in the administrative login feature in PropertyMax Pro FREE 0.3, when magic_quot…

  • Unscored —
    CVE-2009-1948 Public exploit

    Multiple directory traversal vulnerabilities in forum.php in Unclassified NewsBoard (UNB) 1.6.4, when register_globals …

  • Unscored —
    CVE-2009-1951 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in PropertyMax Pro FREE 0.3 allows remote attackers to inject arb…

  • Unscored —
    CVE-2009-1949 Public exploit

    import_wbb1.php in Unclassified NewsBoard (UNB) 1.6.4 allows remote attackers to obtain sensitive information via a dir…

  • Unscored —
    CVE-2009-1950 Public exploit

    SQL injection vulnerability in yorum.asp in WebEyes Guest Book 3 allows remote attackers to execute arbitrary SQL comma…

  • Unscored —
    CVE-2009-1946 Public exploit

    PHP remote file inclusion vulnerability in latestposts.php in AdaptBB 1.0, when register_globals is enabled, allows rem…

  • Unscored —
    CVE-2009-1938 Public exploit

    Cross-site scripting (XSS) vulnerability in Joomla! 1.5.x through 1.5.10 allows remote attackers to inject arbitrary we…

  • Unscored —
    CVE-2009-1941 Public exploit

    PAD Site Scripts 3.6 stores sensitive information under the web document root with insufficient access control, which a…

  • Critical 9.8
    CVE-2009-1936 Public exploit EPSS 52%

    _functions.php in cpCommerce 1.2.x, possibly including 1.2.9, sends a redirect but does not exit when it is called dire…

  • Medium —
    CVE-2009-0580 Public exploit EPSS 94%

    Exposure of Sensitive Information in Apache Tomcat

    Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when FORM authentication is used, allows remote attackers to enumerate valid usernames via requests to /j_security_check with malformed URL encoding of passwords, related to i…