Skip to content
OpenAdvisories

Archive

July 2009

Vulnerabilities first published in this month (UTC), newest first.

206 results · Clear filters · Feed

  • Unscored —
    CVE-2009-2477 Public exploit EPSS 43%

    js/src/jstracer.cpp in the Just-in-time (JIT) JavaScript compiler (aka TraceMonkey) in Mozilla Firefox 3.5 before 3.5.1…

  • Unscored —
    CVE-2009-1968 Public exploit EPSS 40%

    Unspecified vulnerability in the Secure Enterprise Search component in Oracle Database 10.1.8.3 allows remote attackers…

  • Unscored —
    CVE-2009-1020 Public exploit EPSS 10%

    Unspecified vulnerability in the Network Foundation component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4…

  • Unscored —
    CVE-2009-1970 Public exploit EPSS 12%

    Unspecified vulnerability in the Listener component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1…

  • Unscored —
    CVE-2009-1975 Public exploit

    Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3 allows remote attackers to affect …

  • Unscored —
    CVE-2009-1019 Public exploit EPSS 10%

    Unspecified vulnerability in the Network Authentication component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2…

  • Unscored —
    CVE-2009-1977 Public exploit EPSS 73%

    Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.3 allows remote attacker…

  • Unscored —
    CVE-2009-1978 Public exploit EPSS 65%

    Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.3 allows remote attacker…

  • Unscored —
    CVE-2009-1963 Public exploit

    Unspecified vulnerability in the Network Foundation component in Oracle Database 11.1.0.6 allows remote authenticated u…

  • Unscored —
    CVE-2009-0692 Public exploit EPSS 26%

    Stack-based buffer overflow in the script_write_params method in client/dhclient.c in ISC DHCP dhclient 4.1 before 4.1.…

  • Unscored —
    CVE-2009-0192 Public exploit EPSS 12%

    Off-by-one error in the iMonitor component in Novell eDirectory 8.8 SP3, 8.8 SP3 FTF3, and possibly other versions allo…

  • Unscored —
    CVE-2009-1422 Public exploit

    Unspecified vulnerability in HP ProCurve Threat Management Services zl Module (J9155A) ST.1.0.090213 and earlier allows…

  • Unscored —
    CVE-2008-6857 Public exploit

    Absolute Podcast .NET 1.0 allows remote attackers to bypass authentication and gain administrative access by setting a …

  • Unscored —
    CVE-2008-6867 Public exploit

    SQL injection vulnerability in content.php in Scripts For Sites (SFS) EZ Career allows remote attackers to execute arbi…

  • Unscored —
    CVE-2008-6861 Public exploit

    Xigla Software Absolute Newsletter 6.0 and 6.1 allows remote attackers to bypass authentication and gain administrative…

  • Unscored —
    CVE-2008-6854 Public exploit

    Xigla Software Absolute FAQ Manager.NET 6.0 allows remote attackers to bypass authentication and gain administrative ac…

  • Unscored —
    CVE-2008-6860 Public exploit

    Xigla Software Absolute Poll Manager XE 4.1 allows remote attackers to bypass authentication and gain administrative ac…

  • Unscored —
    CVE-2008-6858 Public exploit

    Absolute Banner Manager .NET 4.0 allows remote attackers to bypass authentication and gain administrative access by set…

  • Unscored —
    CVE-2008-6863 Public exploit

    Xigla Software Absolute Form Processor .NET 4.0 allows remote attackers to bypass authentication and gain administrativ…

  • Unscored —
    CVE-2008-6856 Public exploit

    Xigla Software Absolute News Manager.NET 5.1 allows remote attackers to bypass authentication and gain administrative a…

  • Unscored —
    CVE-2008-6862 Public exploit

    Absolute Content Rotator 6.0 allows remote attackers to bypass authentication and gain administrative access by setting…

  • Unscored —
    CVE-2008-6855 Public exploit

    Xigla Software Absolute News Feed 1.0 and possibly 1.5 allows remote attackers to bypass authentication and gain admini…

  • Unscored —
    CVE-2008-6864 Public exploit

    Xigla Software Absolute Live Support .NET 5.1 allows remote attackers to bypass authentication and gain administrative …

  • Unscored —
    CVE-2008-6859 Public exploit

    Xigla Software Absolute Control Panel XE 1.5 allows remote attackers to bypass authentication and gain administrative a…

  • Unscored —
    CVE-2009-2451 Public exploit

    Multiple SQL injection vulnerabilities in index.php in MIM:InfiniX 1.2.003 and possibly earlier versions allow remote a…

  • Unscored —
    CVE-2009-2450 Public exploit

    The OAmon.sys kernel driver 3.1.0.0 and earlier in Tall Emu Online Armor Personal Firewall AV+ before 3.5.0.12, and Per…

  • Unscored —
    CVE-2009-2446 Public exploit EPSS 11%

    Multiple format string vulnerabilities in the dispatch_command function in libmysqld/sql_parse.cc in mysqld in MySQL 4.…

  • Unscored —
    CVE-2009-2442 Public exploit

    Cross-site scripting (XSS) vulnerability in public/index.php in Linea21 1.2.1 allows remote attackers to inject arbitra…

  • Unscored —
    CVE-2009-2438 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in the search module in ClanSphere 2009.0 and 2009.0.2 allows rem…

  • Unscored —
    CVE-2009-2441 Public exploit

    Cross-site scripting (XSS) vulnerability in ogp_show.php in Online Guestbook Pro 5.1 allows remote attackers to inject …

  • Unscored —
    CVE-2009-2437 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in index.php in Rentventory 1.0.1 allow remote attackers to inject …

  • Unscored —
    CVE-2009-2436 Public exploit

    SQL injection vulnerability in page.php in Online Dating Software MyPHPDating 1.0 allows remote attackers to execute ar…

  • Unscored —
    CVE-2009-2439 Public exploit

    Multiple SQL injection vulnerabilities in Web Development House Alibaba Clone allow remote attackers to execute arbitra…

  • Unscored —
    CVE-2009-2443 Public exploit

    Siteframe 3.2.3, and other 3.2.x versions, allows remote attackers to obtain configuration information via a direct req…

  • Unscored —
    CVE-2009-2440 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in JNM Guestbook 3.0 allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2009-2433 Public exploit EPSS 19%

    Stack-based buffer overflow in the AddFavorite method in Microsoft Internet Explorer allows remote attackers to cause a…

  • Unscored —
    CVE-2009-2334 Public exploit

    wp-admin/admin.php in WordPress and WordPress MU before 2.8.1 does not require administrative authentication to access …

  • Unscored —
    CVE-2009-2335 Public exploit EPSS 85%

    WordPress and WordPress MU before 2.8.1 exhibit different behavior for a failed login attempt depending on whether the …

  • Unscored —
    CVE-2009-2428 Public exploit

    Multiple SQL injection vulnerabilities in Tausch Ticket Script 3 allow remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2009-2423 Public exploit

    SQL injection vulnerability in category.php in Ebay Clone 2009 allows remote attackers to execute arbitrary SQL command…