Skip to content
OpenAdvisories

Archive

4 August 2009

Vulnerabilities first published on this day (UTC), newest first.

← July 2009 2009 / August /4 September 2009 →
  1. 1 
  2. 2 
  3. 318
  4. 411
  5. 516
  6. 625
  7. 715
  8. 8 
  9. 9 
  10. 1027
  11. 1122
  12. 1243
  13. 1325
  14. 1422
  15. 15 
  16. 16 
  17. 1714
  18. 1847
  19. 1921
  20. 2022
  21. 2138
  22. 22 
  23. 23 
  24. 2440
  25. 2529
  26. 2612
  27. 2727
  28. 2825
  29. 29 
  30. 30 
  31. 3128
All Critical High Medium Low Exploited only Public exploit

11 results · Feed

  • Unscored —
    CVE-2009-2660

    Multiple integer overflows in CamlImages 2.2 might allow context-dependent attackers to execute arbitrary code via imag…

    camlimages advi Debian
  • High 7.5
    CVE-2009-2659

    Django Admin Media Handler Vulnerable to Directory Traversal

    The Admin media handler in core/servers/basehttp.py in Django 1.0 and 0.96 does not properly map URL requests to expected "static media files," which allows remote attackers to conduct directory traversal attacks and read arbitrary files via a crafted URL.

    python-django django Debian PyPI
  • Unscored —
    CVE-2009-2658

    Directory traversal vulnerability in ZNC before 0.072 allows remote attackers to overwrite arbitrary files via a crafte…

    znc Debian
  • Unscored —
    CVE-2009-2661

    The asn1_length function in strongSwan 2.8 before 2.8.11, 4.2 before 4.2.17, and 4.3 before 4.3.3 does not properly han…

    strongswan Debian
  • Unscored —
    CVE-2009-2662

    The browser engine in Mozilla Firefox 3.5.x before 3.5.2 allows remote attackers to cause a denial of service (memory c…

  • Unscored —
    CVE-2009-2664

    The js_watch_set function in js/src/jsdbgapi.cpp in the JavaScript engine in Mozilla Firefox before 3.0.12 allows remot…

  • Unscored —
    CVE-2009-2663

    libvorbis before r16182, as used in Mozilla Firefox 3.5.x before 3.5.2 and other products, allows context-dependent att…

    libvorbis libvorbisidec Debian
  • Unscored —
    CVE-2009-2657

    nilfs-utils before 2.0.14 installs multiple programs with unnecessary setuid privileges, which allows local users to ex…

  • Unscored —
    CVE-2009-2665

    The nsDocument::SetScriptGlobalObject function in content/base/src/nsDocument.cpp in Mozilla Firefox 3.5.x before 3.5.2…

  • Unscored —
    CVE-2009-2470

    Mozilla Firefox before 3.0.12, and 3.5.x before 3.5.2, allows remote SOCKS5 proxy servers to cause a denial of service …

  • Unscored —
    CVE-2009-2198

    Apple GarageBand before 5.1 reconfigures Safari to accept all cookies regardless of domain name, which makes it easier …