Skip to content
OpenAdvisories

Archive

3 August 2009

Vulnerabilities first published on this day (UTC), newest first.

18 results · Feed

  • Unscored —

    3CX Phone System 6.0.806.0 allows remote attackers to cause a denial of service (unstable service or crash) via unspeci…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in login.php in 3CX Phone System Free Edition 6.1793 and 6.0.806.0 …

  • Unscored —
    CVE-2008-6892 Public exploit

    SQL injection vulnerability in lire/index.php in Peel 3.1 allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —

    login.php in 3CX Phone System 6.0.806.0, when 100% disk capacity is reached, allows remote attackers to gain sensitive …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Alt-N MDaemon WorldClient 10.0.2, when Internet Explorer 7 is used, allows …

  • Unscored —

    Unspecified vulnerability in the CoreTelephony component in Apple iPhone OS before 3.0.1 allows remote attackers to exe…

  • Unscored —

    Unspecified vulnerability in the com.android.phone process in Android 1.0, 1.1, and 1.5 allows remote attackers to caus…

  • Unscored —
    CVE-2008-6891 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in ASP Forum Script allow remote attackers to inject arbitrary web …

  • Unscored —
    CVE-2008-6887 Public exploit

    SQL injection vulnerability in detailad.asp in Pre Classified Listings 1.0 allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2008-6888 Public exploit

    Cross-site scripting (XSS) vulnerability in signup.asp in Pre Classified Listings 1.0 allows remote attackers to inject…

  • Unscored —
    CVE-2008-6890 Public exploit

    SQL injection vulnerability in messages.asp in ASP Forum Script allows remote attackers to execute arbitrary SQL comman…

  • Unscored —

    RSA EnVision 3.5.0, 3.5.1, 3.5.2, and 3.7.0 does not properly restrict access to unspecified user profile functionality…

  • Unscored —
    CVE-2008-6889 Public exploit

    SQL injection vulnerability in Merchantsadd.asp in ASPReferral 5.3 allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2009-2653 Public exploit

    The NtUserConsoleControl function in win32k.sys in Microsoft Windows XP SP2 and SP3, and Server 2003 before SP1, allows…

  • Unscored —

    Heap-based buffer overflow in a regular-expression parser in Mozilla Network Security Services (NSS) before 3.12.3, as …

  • Unscored —
    CVE-2009-2655 Public exploit EPSS 23%

    mshtml.dll in Microsoft Internet Explorer 7 and 8 on Windows XP SP3 allows remote attackers to cause a denial of servic…

  • Unscored —
    CVE-2009-2654 Public exploit

    Mozilla Firefox before 3.0.13, and 3.5.x before 3.5.2, allows remote attackers to spoof the address bar, and possibly c…

  • Unscored —

    Unspecified vulnerability in Solaris Trusted Extensions in Sun Solaris 10, and OpenSolaris snv_37 through snv_120, allo…