Skip to content
OpenAdvisories

Archive

1 July 2009

Vulnerabilities first published on this day (UTC), newest first.

12 results · Clear filters · Feed

  • Unscored —
    CVE-2008-6840 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in V-webmail 1.6.4 allow remote attackers to execute arbitrary PHP c…

  • Unscored —
    CVE-2008-6841 Public exploit

    PHP remote file inclusion vulnerability in the Green Mountain Information Technology and Consulting Database Query (com…

  • Unscored —
    CVE-2009-0689 Public exploit EPSS 29%

    Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementatio…

  • Unscored —
    CVE-2009-2276 Public exploit

    SQL injection vulnerability in voteforus.php in the Vote For Us extension 1.0.1 and earlier for PunBB allows remote att…

  • Unscored —
    CVE-2009-2286 Public exploit

    Buffer overflow in compface 1.5.2 and earlier allows user-assisted attackers to cause a denial of service (crash) via a…

  • Unscored —
    CVE-2009-2289 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Arcade Trade Script 1.0 beta allows remote attackers to inject…

  • Unscored —
    CVE-2009-2269 Public exploit

    SQL injection vulnerability in Empire CMS 5.1 allows remote attackers to execute arbitrary SQL commands via the bid par…

  • Unscored —
    CVE-2009-2288 Public exploit EPSS 83%

    statuswml.cgi in Nagios before 3.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in …

  • Unscored —
    CVE-2009-2290 Public exploit

    SQL injection vulnerability in the Boy Scout Advancement (com_bsadv) component 0.3 and earlier for Joomla! allows remot…

  • Unscored —
    CVE-2009-2293 Public exploit

    Optimum Web Design Tutorial Share 3.5.0 and earlier allows remote attackers to bypass authentication and obtain adminis…

  • Unscored —
    CVE-2009-2285 Public exploit

    Buffer underflow in the LZWDecodeCompat function in libtiff 3.8.2 allows context-dependent attackers to cause a denial …

  • Unscored —
    CVE-2009-2275 Public exploit

    Directory traversal vulnerability in frontend/x3/stats/lastvisit.html in cPanel allows remote attackers to read arbitra…