Skip to content
OpenAdvisories

Archive

9 June 2009

Vulnerabilities first published on this day (UTC), newest first.

19 results · Feed

  • Unscored —

    eBay Enhanced Picture Uploader ActiveX control (EPUWALcontrol.dll) before 1.0.27 allows remote attackers to execute arb…

  • Unscored —

    The eCryptfs support utilities (ecryptfs-utils) 73-0ubuntu6.1 on Ubuntu 9.04 stores the mount passphrase in installatio…

  • Unscored —
    CVE-2009-2020 Public exploit

    Cross-site scripting (XSS) vulnerability in news_detail.php in Virtue News Manager allows remote attackers to inject ar…

  • Unscored —
    CVE-2009-2013 Public exploit

    SQL injection vulnerability in bin/aps_browse_sources.php in Frontis 3.9.01.24 allows remote attackers to execute arbit…

  • Unscored —
    CVE-2009-2014 Public exploit

    SQL injection vulnerability in the ComSchool (com_school) component 1.4 for Joomla! allows remote attackers to execute …

  • Unscored —
    CVE-2009-2024 Public exploit

    Vlad Titarenko ASP VT Auth 1.0 stores sensitive information under the web root with insufficient access control, which …

  • Unscored —
    CVE-2009-2022 Public exploit

    fipsCMS Light 2.1 stores sensitive information under the web root with insufficient access control, which allows remote…

  • Unscored —
    CVE-2009-2018 Public exploit

    SQL injection vulnerability in admin/index.php in Jared Eckersley MyCars, when magic_quotes_gpc is disabled, allows rem…

  • Unscored —
    CVE-2009-2017 Public exploit

    SQL injection vulnerability in products.php in Virtue Book Store allows remote attackers to execute arbitrary SQL comma…

  • Unscored —
    CVE-2009-2023 Public exploit

    SQL injection vulnerability in index.php in Shop-Script Pro 2.12, when magic_quotes_gpc is disabled, allows remote atta…

  • Unscored —
    CVE-2009-2015 Public exploit Scanner template

    Directory traversal vulnerability in includes/file_includer.php in the Ideal MooFAQ (com_moofaq) component 1.0 for Joom…

  • Unscored —
    CVE-2009-2021 Public exploit

    SQL injection vulnerability in search.php in Virtue Classifieds allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2009-2025 Public exploit

    admin/login.php in DM FileManager 3.9.2 allows remote attackers to bypass authentication and gain administrative access…

  • Unscored —
    CVE-2009-2016 Public exploit

    SQL injection vulnerability in products.php in Virtue Shopping Mall allows remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2009-2019 Public exploit

    SQL injection vulnerability in news_detail.php in Virtue News Manager allows remote attackers to execute arbitrary SQL …

  • Unscored —

    Multiple integer overflows in Xpdf 2.x and 3.x and Poppler 0.x, as used in the pdftops filter in CUPS 1.1.17, 1.1.22, a…

  • Unscored —
    CVE-2009-0949 Public exploit EPSS 20%

    The ippReadIO function in cups/ipp.c in cupsd in CUPS before 1.3.10 does not properly initialize memory for IPP request…

  • Unscored —

    The directory-services functionality in the scheduler in CUPS 1.1.17 and 1.1.22 allows remote attackers to cause a deni…

  • Unscored —

    Unspecified vulnerability in idmap in Sun OpenSolaris snv_88 through snv_110, when a CIFS server is enabled, allows loc…