Skip to content
OpenAdvisories

Archive

5 July 2009

Vulnerabilities first published on this day (UTC), newest first.

← June 2009 2009 / July /5 August 2009 →
  1. 125
  2. 225
  3. 3 
  4. 4 
  5. 528
  6. 6 
  7. 727
  8. 826
  9. 923
  10. 1017
  11. 11 
  12. 12 
  13. 1317
  14. 1461
  15. 159
  16. 1617
  17. 175
  18. 18 
  19. 19 
  20. 2023
  21. 2112
  22. 2222
  23. 2311
  24. 2414
  25. 25 
  26. 26 
  27. 2726
  28. 2813
  29. 2914
  30. 3016
  31. 3115
All Critical High Medium Low Exploited only Public exploit

28 results · Feed

  • Unscored —
    CVE-2009-0904

    The IBM Stax XMLStreamWriter in the Web Services component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.2…

  • Unscored —
    CVE-2009-1388

    The ptrace_start function in kernel/ptrace.c in the Linux kernel 2.6.18 does not properly handle simultaneous execution…

  • Unscored —
    CVE-2009-1648

    The YaST2 LDAP module in yast2-ldap-server on SUSE Linux Enterprise Server 11 (aka SLE11) does not enable the firewall …

  • Unscored —
    CVE-2009-1890 EPSS 16%

    The stream_reqbody_cl function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP Server before 2.3.3, when…

    apache2 Debian
  • Unscored —
    CVE-2009-2314

    Race condition in the Sun Lightweight Availability Collection Tool 3.0 on Solaris 7 through 10 allows local users to ov…

  • Unscored —
    CVE-2009-2324

    Multiple cross-site scripting (XSS) vulnerabilities in FCKeditor before 2.6.4.1 allow remote attackers to inject arbitr…

  • Unscored —
    CVE-2009-2329 Public exploit

    KerviNet Forum 1.1 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) admi…

  • Unscored —
    CVE-2009-2331 Public exploit

    Multiple static code injection vulnerabilities in CMS Chainuk 1.2 and earlier allow remote attackers to inject arbitrar…

  • Unscored —
    CVE-2009-2322

    Cross-site scripting (XSS) vulnerability in cgi-bin/sysconf.cgi on the Axesstel MV 410R allows remote attackers to inje…

  • Unscored —
    CVE-2009-2333 Public exploit

    Multiple directory traversal vulnerabilities in CMS Chainuk 1.2 and earlier allow remote attackers to include and execu…

  • Unscored —
    CVE-2009-2316

    Multiple cross-site scripting (XSS) vulnerabilities in IBM Tivoli Identity Manager (ITIM) 5.0 allow remote attackers to…

  • Unscored —
    CVE-2009-2319

    The default configuration of the Wi-Fi component on the Axesstel MV 410R does not use encryption, which makes it easier…

  • Unscored —
    CVE-2009-2330 Public exploit

    Cross-site scripting (XSS) vulnerability in admin/admin_menu.php in CMS Chainuk 1.2 and earlier allows remote attackers…

  • Unscored —
    CVE-2009-2332 Public exploit

    CMS Chainuk 1.2 and earlier allows remote attackers to obtain sensitive information via (1) a crafted id parameter to i…

  • Unscored —
    CVE-2009-2318

    The Axesstel MV 410R allows remote attackers to cause a denial of service via a flood of SYN packets, a related issue t…

  • Unscored —
    CVE-2009-2294

    Integer overflow in the Png_datainfo_callback function in Dillo 2.1 and earlier allows remote attackers to cause a deni…

    dillo Debian
  • Unscored —
    CVE-2009-2265 Public exploit EPSS 84%

    Multiple directory traversal vulnerabilities in FCKeditor before 2.6.4.1 allow remote attackers to create executable fi…

  • Unscored —
    CVE-2009-2326 Public exploit

    Multiple SQL injection vulnerabilities in KerviNet Forum 1.1 and earlier allow remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2009-2295

    Multiple integer overflows in CamlImages 2.2 and earlier might allow context-dependent attackers to execute arbitrary c…

    camlimages advi Debian
  • Unscored —
    CVE-2009-2317

    The Axesstel MV 410R has a certain default administrator password, and does not force a password change, which makes it…

  • Unscored —
    CVE-2009-2328 Public exploit

    admin/edit_user.php in KerviNet Forum 1.1 and earlier does not require administrative authentication, which allows remo…

  • Unscored —
    CVE-2009-2327 Public exploit

    Cross-site scripting (XSS) vulnerability in add_voting.php in KerviNet Forum 1.1 and earlier allows remote authenticate…

  • Unscored —
    CVE-2009-2321

    cgi-bin/sysconf.cgi on the Axesstel MV 410R allows remote attackers to cause a denial of service (configuration reset) …

  • Unscored —
    CVE-2009-2323

    The web interface on the Axesstel MV 410R redirects users back to the referring page after execution of some CGI script…

  • Unscored —
    CVE-2009-2325 Public exploit

    Directory traversal vulnerability in index.php in Clicknet CMS 2.1 allows remote attackers to read arbitrary files via …

  • Unscored —
    CVE-2009-2320

    The web interface on the Axesstel MV 410R relies on client-side JavaScript code to validate input, which allows remote …

  • Unscored —
    CVE-2007-6728

    Cross-site scripting (XSS) vulnerability in XMB 1.5 allows remote attackers to inject arbitrary web script or HTML via …

  • Unscored —
    CVE-2007-6727

    SQL injection vulnerability in topic.php in KerviNet Forum 1.1 allows remote attackers to execute arbitrary SQL command…