Skip to content
OpenAdvisories

Archive

11 August 2009

Vulnerabilities first published on this day (UTC), newest first.

← July 2009 2009 / August /11 September 2009 →
  1. 1 
  2. 2 
  3. 318
  4. 411
  5. 516
  6. 625
  7. 715
  8. 8 
  9. 9 
  10. 1027
  11. 1122
  12. 1243
  13. 1325
  14. 1422
  15. 15 
  16. 16 
  17. 1714
  18. 1847
  19. 1921
  20. 2022
  21. 2138
  22. 22 
  23. 23 
  24. 2440
  25. 2529
  26. 2612
  27. 2727
  28. 2825
  29. 29 
  30. 30 
  31. 3128
All Critical High Medium Low Exploited only Public exploit

22 results · Feed

  • Unscored —
    CVE-2008-6935 Public exploit

    Argument injection vulnerability in Exodus 0.10 allows remote attackers to inject arbitrary command line arguments, ove…

  • Unscored —
    CVE-2008-6936 Public exploit

    Argument injection vulnerability in Exodus 0.10 allows remote attackers to inject arbitrary command line arguments, ove…

  • Unscored —
    CVE-2008-6932 Public exploit

    Unrestricted file upload vulnerability in submit_file.php in AlstraSoft SendIt Pro allows remote attackers to execute a…

  • Unscored —
    CVE-2008-6938 Public exploit EPSS 26%

    Pi3Web 2.0.3 before PL2, when installed on Windows as a desktop application and without using the Pi3Web/Conf/Intenet.p…

  • Unscored —
    CVE-2008-6929 Public exploit

    Unrestricted file upload vulnerability in PHPStore Auto Classifieds allows remote authenticated users to execute arbitr…

  • Unscored —
    CVE-2008-6933 Public exploit

    Directory traversal vulnerability in index.php in MiniGal b13 (aka MG2) allows remote attackers to read the source code…

  • Unscored —
    CVE-2008-6930 Public exploit

    Unrestricted file upload vulnerability in PHPStore Real Estate allows remote authenticated users to execute arbitrary c…

  • Unscored —
    CVE-2008-6928 Public exploit

    Unrestricted file upload vulnerability in PHPStore Complete Classifieds allows remote authenticated users to execute ar…

  • Unscored —
    CVE-2008-6934 Public exploit

    Static code injection vulnerability in Sanus|artificium (aka Sanusart) Free simple guestbook PHP script, when downloade…

  • Unscored —
    CVE-2008-6937 Public exploit

    Argument injection vulnerability in Exodus 0.10 allows remote attackers to inject arbitrary command line arguments, ove…

  • Unscored —
    CVE-2008-6931 Public exploit

    Unrestricted file upload vulnerability in PHPStore Job Search (aka PHPCareers) allows remote authenticated users to exe…

  • Unscored —
    CVE-2009-1885

    Stack consumption vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ 2.7.0 and 2.8.0 allows context-de…

    xerces-c Debian
  • Medium 6.5
    CVE-2009-2416

    Multiple use-after-free vulnerabilities in libxml2 2.5.10, 2.6.16, 2.6.26, 2.6.27, and 2.6.32, and libxml 1.8.17, allow…

    libxml2 Debian
  • Unscored —
    CVE-2009-2414

    Stack consumption vulnerability in libxml2 2.5.10, 2.6.16, 2.6.26, 2.6.27, and 2.6.32, and libxml 1.8.17, allows contex…

    libxml2 Debian
  • Unscored —
    CVE-2009-2739

    Cross-site scripting (XSS) vulnerability in FreeNAS before 0.69.2 allows remote attackers to inject arbitrary web scrip…

  • Unscored —
    CVE-2009-2738

    Cross-site request forgery (CSRF) vulnerability in the WebGUI in FreeNAS before 0.7RC1 allows remote attackers to hijac…

  • Unscored —
    CVE-2009-0687 Public exploit

    The pf_test_rule function in OpenBSD Packet Filter (PF), as used in OpenBSD 4.2 through 4.5, NetBSD 5.0 before RC3, Mir…

  • Unscored —
    CVE-2009-2735 Public exploit

    SQL injection vulnerability in admin.php in sun-jester OpenNews 1.0, when magic_quotes_gpc is disabled, allows remote a…

  • Unscored —
    CVE-2009-2704 Public exploit

    CA SiteMinder allows remote attackers to bypass cross-site scripting (XSS) protections for J2EE applications via a requ…

  • Unscored —
    CVE-2009-2705 Public exploit

    CA SiteMinder allows remote attackers to bypass cross-site scripting (XSS) protections for J2EE applications via a requ…

  • Medium —
    CVE-2009-2737

    Roundup Improper Access Control

    The EditCSVAction function in cgi/actions.py in Roundup 1.2 before 1.2.1, 1.4 through 1.4.6, and possibly other versions does not properly check permissions, which allows remote authenticated users with edit or create privileges for a class to modify arbitrar…

    roundup PyPI
  • Unscored —
    CVE-2009-2736 Public exploit

    Static code injection vulnerability in admin.php in sun-jester OpenNews 1.0 allows remote authenticated administrators …