Skip to content
OpenAdvisories

Archive

7 July 2009

Vulnerabilities first published on this day (UTC), newest first.

← June 2009 2009 / July /7 August 2009 →
  1. 125
  2. 225
  3. 3 
  4. 4 
  5. 528
  6. 6 
  7. 727
  8. 826
  9. 923
  10. 1017
  11. 11 
  12. 12 
  13. 1317
  14. 1461
  15. 159
  16. 1617
  17. 175
  18. 18 
  19. 19 
  20. 2023
  21. 2112
  22. 2222
  23. 2311
  24. 2414
  25. 25 
  26. 26 
  27. 2726
  28. 2813
  29. 2914
  30. 3016
  31. 3115
All Critical High Medium Low Exploited only Public exploit

27 results · Feed

  • High 8.8
    CVE-2008-0015 Exploited Public exploit EPSS 77%

    Stack-based buffer overflow in the CComVariant::ReadFromStream function in the Active Template Library (ATL), as used i…

    KEV Feb 17, 2026
  • Unscored —
    CVE-2008-0020 EPSS 31%

    Unspecified vulnerability in the Load method in the IPersistStreamInit interface in the Active Template Library (ATL), …

  • Unscored —
    CVE-2009-2354

    SQL injection vulnerability in the auth_checkpass function in the login page in NullLogic Groupware 1.2.7 allows remote…

  • Unscored —
    CVE-2009-2352 Public exploit

    Google Chrome 1.0.154.48 and earlier does not block javascript: URIs in Refresh headers in HTTP responses, which allows…

  • Unscored —
    CVE-2009-2356

    Multiple stack-based buffer overflows in the pgsqlQuery function in NullLogic Groupware 1.2.7, when PostgreSQL is used,…

  • Unscored —
    CVE-2009-2350 Public exploit EPSS 14%

    Microsoft Internet Explorer 6.0.2900.2180 and earlier does not block javascript: URIs in Refresh headers in HTTP respon…

  • Unscored —
    CVE-2009-2359

    Multiple SQL injection vulnerabilities in TekRADIUS 3.0 allow context-dependent attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2009-2353

    encoder.php in eAccelerator allows remote attackers to execute arbitrary code by copying a local executable file to a l…

  • Unscored —
    CVE-2009-2355

    The forum module in NullLogic Groupware 1.2.7 allows remote authenticated users to cause a denial of service (applicati…

  • Unscored —
    CVE-2009-2358

    TekRADIUS 3.0 uses BUILTIN\Users:R permissions for the TekRADIUS.ini file, which allows local users to obtain obfuscate…

  • Unscored —
    CVE-2009-2351

    Opera 9.52 and earlier does not block javascript: URIs in Refresh headers in HTTP responses, which allows remote attack…

  • Unscored —
    CVE-2009-2357

    The default configuration of TekRADIUS 3.0 uses the sa account to communicate with Microsoft SQL Server, which makes it…

  • Unscored —
    CVE-2009-2344 Public exploit

    The web-based management interfaces in Sourcefire Defense Center (DC) and 3D Sensor before 4.8.2 allow remote authentic…

  • Unscored —
    CVE-2009-2345

    Multiple SQL injection vulnerabilities in ClanSphere before 2009.0.1 allow remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2009-2339 Public exploit

    SQL injection vulnerability in index.php in Rentventory allows remote attackers to execute arbitrary SQL commands via t…

  • Unscored —
    CVE-2009-2341 Public exploit

    SQL injection vulnerability in albumdetail.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands v…

  • Unscored —
    CVE-2009-2340 Public exploit

    SQL injection vulnerability in admin/index.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands v…

  • Unscored —
    CVE-2009-2343

    Cross-site scripting (XSS) vulnerability in people.php in Zoph before 0.7.0.6 allows remote attackers to inject arbitra…

    zoph Debian
  • Unscored —
    CVE-2009-2342

    Cross-site scripting (XSS) vulnerability in admin.php (aka the login page) in Content Management Made Easy (CMME) befor…

  • Unscored —
    CVE-2008-6852 Public exploit

    SQL injection vulnerability in the Ice Gallery (com_ice) component 0.5 beta 2 for Joomla! allows remote attackers to ex…

  • Unscored —
    CVE-2008-6849 Public exploit

    Unrestricted file upload vulnerability in index.php in phpGreetCards 3.7 allows remote attackers to execute arbitrary P…

  • Unscored —
    CVE-2008-6848 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in phpGreetCards 3.7 allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2008-6853 Public exploit

    SQL injection vulnerability in modules/poll/index.php in AIST NetCat 3.0 and 3.12 allows remote attackers to execute ar…

  • Unscored —
    CVE-2008-6851 Public exploit

    SQL injection vulnerability in page.php in PHP Link Directory (phpLD) 3.3, when register_globals is enabled and magic_q…

  • Unscored —
    CVE-2008-6850

    Cross-site scripting (XSS) vulnerability in messages.php in PHP-Fusion 6.01.17 and 7.00.3 allows remote attackers to in…

  • Unscored —
    CVE-2009-2337 Public exploit

    SQL injection vulnerability in includes/module/book/index.inc.php in w3b|cms Gaestebuch Guestbook Module 3.0.0, when ma…

  • Unscored —
    CVE-2009-2338 Public exploit

    Directory traversal vulnerability in includes/startmodules.inc.php in FreeWebshop.org 2.2.9 R2, when register_globals i…