Skip to content
OpenAdvisories

Archive

7 August 2009

Vulnerabilities first published on this day (UTC), newest first.

15 results · Feed

  • High 7.5

    Zope Object Database (ZODB) Authentication bypass in ZEO storage servers

    Zope Object Database (ZODB) before 3.8.2, when certain Zope Enterprise Objects (ZEO) database sharing is enabled, allows remote attackers to bypass authentication via vectors involving the ZEO network protocol.

  • Critical 9.8

    Zope Object Database (ZODB) vulnerable to arbitrary Python code execution in ZEO storage servers

    Unspecified vulnerability in Zope Object Database (ZODB) before 3.8.2, when certain Zope Enterprise Objects (ZEO) database sharing is enabled, allows remote attackers to execute arbitrary Python code via vectors involving the ZEO network protocol.

  • Unscored —

    Multiple integer overflows in the libsvn_delta library in Subversion before 1.5.7, and 1.6.x before 1.6.4, allow remote…

  • Unscored —
    CVE-2008-6912 Public exploit

    Zeeways SHAADICLONE 2.0 allows remote attackers to bypass authentication and gain administrative privileges via a direc…

  • Unscored —
    CVE-2008-6916 Public exploit

    Siemens SpeedStream 5200 with NetPort Software 1.1 allows remote attackers to bypass authentication via an invalid Host…

  • Unscored —
    CVE-2008-6914 Public exploit

    Unrestricted file upload vulnerability in viewprofile.php in Zeeways ZEEPROPERTY 1.0 allows remote authenticated users …

  • Unscored —
    CVE-2008-6913 Public exploit

    Unrestricted file upload vulnerability in editresume_next.php in Zeeways ZEEJOBSITE 2.0 allows remote authenticated use…

  • Unscored —
    CVE-2008-6915 Public exploit

    Cross-site scripting (XSS) vulnerability in view_prop_details.php in Zeeways ZEEPROPERTY 1.0 allows remote attackers to…

  • Unscored —
    CVE-2008-6917 Public exploit

    SQL injection vulnerability in admin.php in Exocrew ExoPHPDesk 1.2 Final allows remote attackers to execute arbitrary S…

  • Unscored —

    XScreenSaver in Sun Solaris 9 and 10, OpenSolaris before snv_120, and X11 6.4.1 for Solaris 8, when the Xorg or Xnewt s…

  • Unscored —
    CVE-2009-2715 Public exploit

    Sun VirtualBox 2.2 through 3.0.2 r49928 allows guest OS users to cause a denial of service (Linux host OS reboot) via a…

  • Unscored —

    Unspecified vulnerability in Sun VirtualBox 3.0.0 and 3.0.2 allows guest OS users to cause a denial of service (host OS…

  • Unscored —

    socket.c in fetchmail before 6.3.11 does not properly handle a '\0' character in a domain name in the subject's Common …

  • Unscored —

    Sun Java System Access Manager 6.3 2005Q1, 7.0 2005Q4, and 7.1; and OpenSSO Enterprise 8.0; when AMConfig.properties en…

  • Unscored —

    The CDCServlet component in Sun Java System Access Manager 7.0 2005Q4 and 7.1, when Cross Domain Single Sign On (CDSSO)…