Skip to content
OpenAdvisories

Archive

10 July 2009

Vulnerabilities first published on this day (UTC), newest first.

← June 2009 2009 / July /10 August 2009 →
  1. 125
  2. 225
  3. 3 
  4. 4 
  5. 528
  6. 6 
  7. 727
  8. 826
  9. 923
  10. 1017
  11. 11 
  12. 12 
  13. 1317
  14. 1461
  15. 159
  16. 1617
  17. 175
  18. 18 
  19. 19 
  20. 2023
  21. 2112
  22. 2222
  23. 2311
  24. 2414
  25. 25 
  26. 26 
  27. 2726
  28. 2813
  29. 2914
  30. 3016
  31. 3115
All Critical High Medium Low Exploited only Public exploit

17 results · Feed

  • Unscored —
    CVE-2009-2433 Public exploit EPSS 19%

    Stack-based buffer overflow in the AddFavorite method in Microsoft Internet Explorer allows remote attackers to cause a…

  • Unscored —
    CVE-2009-2431

    WordPress 2.7.1 places the username of a post's author in an HTML comment, which allows remote attackers to obtain sens…

    wordpress Debian
  • Unscored —
    CVE-2009-2336

    The forgotten mail interface in WordPress and WordPress MU before 2.8.1 exhibits different behavior for a password requ…

    wordpress Debian
  • Unscored —
    CVE-2009-2334 Public exploit

    wp-admin/admin.php in WordPress and WordPress MU before 2.8.1 does not require administrative authentication to access …

    wordpress Debian
  • Unscored —
    CVE-2009-2432

    WordPress and WordPress MU before 2.8.1 allow remote attackers to obtain sensitive information via a direct request to …

    wordpress Debian
  • Unscored —
    CVE-2009-2335 Public exploit EPSS 85%

    WordPress and WordPress MU before 2.8.1 exhibit different behavior for a failed login attempt depending on whether the …

    wordpress Debian
  • Unscored —
    CVE-2009-2429

    SmartFilter Web Gateway Security 4.2.1.00 stores user credentials in cleartext in admin_backup.xml files and uses insec…

  • Unscored —
    CVE-2009-2428 Public exploit

    Multiple SQL injection vulnerabilities in Tausch Ticket Script 3 allow remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2009-2425

    Tor before 0.2.0.35 allows remote attackers to cause a denial of service (application crash) via a malformed router des…

    tor Debian
  • Unscored —
    CVE-2009-2423 Public exploit

    SQL injection vulnerability in category.php in Ebay Clone 2009 allows remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2009-2427 Public exploit

    SQL injection vulnerability in co-profile.php in Jobbr 2.2.7 allows remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2009-2430

    Unspecified vulnerability in auditconfig in Sun Solaris 8, 9, 10, and OpenSolaris snv_01 through snv_58, when Solaris A…

  • Unscored —
    CVE-2009-2424 Public exploit

    Cross-site scripting (XSS) vulnerability in search.php in Ebay Clone 2009 allows remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2009-2426

    The connection_edge_process_relay_cell_not_open function in src/or/relay.c in Tor 0.2.x before 0.2.0.35 and 0.1.x befor…

    tor Debian
  • Unscored —
    CVE-2009-1891 EPSS 17%

    The mod_deflate module in Apache httpd 2.2.11 and earlier compresses large files until completion even after the associ…

    apache2 Debian
  • Unscored —
    CVE-2009-2386 Public exploit

    Insecure method vulnerability in Awingsoft Awakening Winds3D Viewer plugin 3.5.0.0, 3.0.0.5, and possibly other version…

  • Critical 9.8
    CVE-2009-2422

    rails vulnerable to improper authentication

    The example code for the digest authentication functionality (http_authentication.rb) in Ruby on Rails before 2.3.3 defines an authenticate_or_request_with_http_digest block that returns nil instead of false when the user does not exist, which allows context-…

    rails rails Debian RubyGems