Skip to content
OpenAdvisories

Archive

22 June 2009

Vulnerabilities first published on this day (UTC), newest first.

← May 2009 2009 / June /22 July 2009 →
  1. 120
  2. 216
  3. 313
  4. 417
  5. 525
  6. 612
  7. 7 
  8. 815
  9. 919
  10. 1066
  11. 1121
  12. 1224
  13. 13 
  14. 14 
  15. 1517
  16. 1618
  17. 1713
  18. 1814
  19. 1925
  20. 20 
  21. 21 
  22. 2231
  23. 2318
  24. 2412
  25. 2513
  26. 2617
  27. 2715
  28. 28 
  29. 29 
  30. 309
All Critical High Medium Low Exploited only Public exploit

31 results · Feed

  • Unscored —
    CVE-2009-2169 Public exploit

    Insecure method vulnerability in the PDFVIEWER.PDFViewerCtrl.1 ActiveX control (pdfviewer.ocx) in Edraw PDF Viewer Comp…

  • Unscored —
    CVE-2008-6833 Public exploit

    Directory traversal vulnerability in commsrss.php in fuzzylime (cms) before 3.01b allows remote attackers to include an…

  • Unscored —
    CVE-2008-6834 Public exploit

    Multiple directory traversal vulnerabilities in fuzzylime (cms) 3.01 and 3.01a allow remote attackers to include and ex…

  • Unscored —
    CVE-2009-2166 Public exploit

    Absolute path traversal vulnerability in cvs.php in OCS Inventory NG before 1.02.1 on Unix allows remote attackers to r…

    ocsinventory-server Debian
  • Unscored —
    CVE-2009-2163 Public exploit

    Cross-site scripting (XSS) vulnerability in login/default.aspx in Sitecore CMS before 6.0.2 Update-1 090507 allows remo…

  • Unscored —
    CVE-2009-2164 Public exploit

    Multiple SQL injection vulnerabilities in Kjtechforce mailman beta1, when magic_quotes_gpc is disabled, allow remote at…

  • Critical 9.8
    CVE-2009-2168 Public exploit EPSS 12%

    cpanel/login.php in EgyPlus 7ammel (aka 7ml) 1.0.1 and earlier sends a redirect to the web browser but does not exit wh…

  • Unscored —
    CVE-2009-2165

    SerendipityNZ (aka SimpleBoxes) Serene Bach 2.20R and earlier, and 3.00 beta023 and earlier 3.x versions, uses a predic…

  • Unscored —
    CVE-2009-2167 Public exploit

    Multiple SQL injection vulnerabilities in cpanel/login.php in EgyPlus 7ammel (aka 7ml) 1.0.1 and earlier, when magic_qu…

  • Unscored —
    CVE-2009-2162

    Cross-site scripting (XSS) vulnerability in the XOOPS MANIAC PukiWikiMod module 1.6.6.2 and earlier for XOOPS allows re…

  • Unscored —
    CVE-2009-2157 Public exploit

    Multiple SQL injection vulnerabilities in TorrentTrader Classic 1.09 allow remote authenticated users to execute arbitr…

  • Unscored —
    CVE-2009-2161 Public exploit

    Directory traversal vulnerability in backend/admin-functions.php in TorrentTrader Classic 1.09, when used on a case-ins…

  • Unscored —
    CVE-2009-2155

    Cross-site scripting (XSS) vulnerability in report/ReportViewAction.do in WebNMS Free Edition 5 allows remote attackers…

  • Unscored —
    CVE-2009-2159 Public exploit

    backup-database.php in TorrentTrader Classic 1.09 does not require administrative authentication, which allows remote a…

  • Unscored —
    CVE-2009-2160 Public exploit

    TorrentTrader Classic 1.09 allows remote attackers to (1) obtain configuration information via a direct request to phpi…

  • Unscored —
    CVE-2009-2158 Public exploit

    account-recover.php in TorrentTrader Classic 1.09 chooses random passwords from an insufficiently large set, which make…

  • Unscored —
    CVE-2009-2156 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in TorrentTrader Classic 1.09 allow remote authenticated users to i…

  • Unscored —
    CVE-2009-2144

    SQL injection vulnerability in the FireStats plugin before 1.6.2-stable for WordPress allows remote attackers to execut…

  • Unscored —
    CVE-2009-2147 Public exploit

    SQL injection vulnerability in fdown.php in phpWebThings 1.5.2 and earlier allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2009-2142 Public exploit

    Multiple SQL injection vulnerabilities in admin/index.asp in Zip Store Chat 4.0 and 5.0 allow remote attackers to execu…

  • Unscored —
    CVE-2009-2141 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in TBDev.NET 01-01-08 allow remote attackers to inject arbitrary we…

  • Unscored —
    CVE-2009-2151 Public exploit

    Directory traversal vulnerability in index.php in AdaptWeb 0.9.2 allows remote attackers to read arbitrary files via a …

  • Unscored —
    CVE-2009-2146 Public exploit EPSS 21%

    Unrestricted file upload vulnerability in the Compose Email feature in the Emails module in Sugar Community Edition (ak…

  • Unscored —
    CVE-2009-2145 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in transLucid 1.75 allow remote attackers to inject arbitrary web s…

  • Unscored —
    CVE-2009-2152 Public exploit

    SQL injection vulnerability in a_index.php in AdaptWeb 0.9.2 allows remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2009-2153 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Impleo Music Collection 2.0 allows remote attackers to inject …

  • Unscored —
    CVE-2009-2154 Public exploit

    SQL injection vulnerability in admin/login.php in Impleo Music Collection 2.0, when magic_quotes_gpc is disabled, allow…

  • Unscored —
    CVE-2009-2150 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in Campus Virtual-LMS allow (1) remote attackers to hijack t…

  • Unscored —
    CVE-2009-2143

    PHP remote file inclusion vulnerability in firestats-wordpress.php in the FireStats plugin before 1.6.2-stable for Word…

  • Unscored —
    CVE-2009-2149 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Campus Virtual-LMS allow remote attackers to inject arbitrary we…

  • Unscored —
    CVE-2009-2148 Public exploit

    SQL injection vulnerability in news/index.php in Campus Virtual-LMS allows remote attackers to execute arbitrary SQL co…