Skip to content
OpenAdvisories

Archive

12 August 2009

Vulnerabilities first published on this day (UTC), newest first.

← July 2009 2009 / August /12 September 2009 →
  1. 1 
  2. 2 
  3. 318
  4. 411
  5. 516
  6. 625
  7. 715
  8. 8 
  9. 9 
  10. 1027
  11. 1122
  12. 1243
  13. 1325
  14. 1422
  15. 15 
  16. 16 
  17. 1714
  18. 1847
  19. 1921
  20. 2022
  21. 2138
  22. 22 
  23. 23 
  24. 2440
  25. 2529
  26. 2612
  27. 2727
  28. 2825
  29. 29 
  30. 30 
  31. 3128
All Critical High Medium Low Exploited only Public exploit

43 results · Feed

  • Unscored —
    CVE-2009-2196

    Unspecified vulnerability in Apple Safari 4 before 4.0.3 allows remote web servers to place an arbitrary web site in th…

  • Unscored —
    CVE-2009-2195 Public exploit EPSS 13%

    Buffer overflow in WebKit in Apple Safari before 4.0.3 allows remote attackers to execute arbitrary code or cause a den…

  • Unscored —
    CVE-2009-2199

    Incomplete blacklist vulnerability in WebKit in Apple Safari before 4.0.3, as used on iPhone OS before 3.1, iPhone OS b…

  • Unscored —
    CVE-2009-2200

    WebKit in Apple Safari before 4.0.3 does not properly restrict the URL scheme of the pluginspage attribute of an EMBED …

  • Unscored —
    CVE-2009-0562 EPSS 26%

    The Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2003 SP3, Office XP Web Components SP3, Of…

  • High 8.8
    CVE-2009-1544 EPSS 21%

    Double free vulnerability in the Workstation service in Microsoft Windows allows remote authenticated users to gain pri…

  • Unscored —
    CVE-2009-1930 EPSS 41%

    The Telnet service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server…

  • Unscored —
    CVE-2009-1923 EPSS 25%

    Heap-based buffer overflow in the Windows Internet Name Service (WINS) component for Microsoft Windows 2000 SP4 and Ser…

  • Unscored —
    CVE-2009-1922

    The Message Queuing (aka MSMQ) service for Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP2, and Vista Gold does not…

  • Unscored —
    CVE-2009-1929 EPSS 35%

    Heap-based buffer overflow in the Microsoft Terminal Services Client ActiveX control running RDP 6.1 on Windows XP SP2,…

  • Unscored —
    CVE-2009-1133 EPSS 30%

    Heap-based buffer overflow in Microsoft Remote Desktop Connection (formerly Terminal Services Client) running RDP 5.0 t…

  • Unscored —
    CVE-2009-1545 EPSS 29%

    Unspecified vulnerability in Avifil32.dll in the Windows Media file handling functionality in Microsoft Windows 2000 SP…

  • Unscored —
    CVE-2009-1534 Public exploit EPSS 52%

    Buffer overflow in the Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2000 Web Components SP3…

  • Unscored —
    CVE-2009-1546 EPSS 22%

    Integer overflow in Avifil32.dll in the Windows Media file handling functionality in Microsoft Windows allows remote at…

  • Unscored —
    CVE-2009-1536 EPSS 51%

    ASP.NET in Microsoft .NET Framework 2.0 SP1 and SP2 and 3.5 Gold and SP1, when ASP 2.0 is used in integrated mode on II…

  • Unscored —
    CVE-2009-1924

    Integer overflow in the Windows Internet Name Service (WINS) component for Microsoft Windows 2000 SP4 allows remote WIN…

  • Unscored —
    CVE-2009-2496 EPSS 29%

    Heap-based buffer overflow in the Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2003 SP3, Of…

  • Critical 9.8
    CVE-2009-2494 EPSS 42%

    The Active Template Library (ATL) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and …

  • Unscored —
    CVE-2008-6950 Public exploit

    Multiple SQL injection vulnerabilities in login.asp in Bankoi WebHosting Control Panel 1.20 allow remote attackers to e…

  • Unscored —
    CVE-2008-6956 Public exploit

    Static code injection vulnerability in admin/admin.php in mxCamArchive 2.2 allows remote authenticated administrators t…

  • High —
    CVE-2008-6954

    Cobbler Web Interface Kickstart Template Remote Privilege Escalation Vulnerability

    The web interface (CobblerWeb) in Cobbler before 1.2.9 allows remote authenticated users to execute arbitrary Python code in cobblerd by editing a Cheetah kickstart template to import arbitrary Python modules.

    cobbler PyPI
  • Unscored —
    CVE-2008-6939 Public exploit

    TurnkeyForms Web Hosting Directory allows remote attackers to bypass authentication and (1) gain administrative privile…

  • Unscored —
    CVE-2008-6949 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in Collabtive 0.4.8 allow remote attackers to hijack the aut…

  • Unscored —
    CVE-2008-6946 Public exploit

    Cross-site scripting (XSS) vulnerability in manageproject.php in Collabtive 0.4.8 allows user-assisted remote attackers…

  • Unscored —
    CVE-2008-6943 Public exploit

    Unrestricted file upload vulnerability in ScriptsFeed Recipes Listing Portal allows remote authenticated users to execu…

  • Unscored —
    CVE-2008-6948 Public exploit

    Unrestricted file upload vulnerability in Collabtive 0.4.8 allows remote authenticated users to execute arbitrary code …

  • Unscored —
    CVE-2008-6958 Public exploit

    wap/index.php in Crossday Discuz! Board 6.x and 7.x allows remote authenticated users to execute arbitrary PHP code via…

  • Unscored —
    CVE-2008-6960 Public exploit

    download.php in X10media x10 Automatic Mp3 Search Engine Script 1.5.5 through 1.6 allows remote attackers to read arbit…

  • Unscored —
    CVE-2008-6945

    Multiple cross-site scripting (XSS) vulnerabilities in Interchange 5.7 before 5.7.1, 5.6 before 5.6.1, and 5.4 before 5…

  • Unscored —
    CVE-2008-6940 Public exploit

    TurnkeyForms Web Hosting Directory stores sensitive information under the web root with insufficient access control, wh…

  • Unscored —
    CVE-2008-6959 Public exploit

    Insecure method vulnerability in the Chilkat Socket ActiveX control (ChilkatSocket.ChilkatSocket.1) in ChilkatSocket.dl…

  • Unscored —
    CVE-2008-6951

    MauryCMS 0.53.2 and earlier does not require administrative authentication for Editors/fckeditor/editor/filemanager/bro…

  • Unscored —
    CVE-2008-6957 Public exploit

    member.php in Crossday Discuz! Board allows remote attackers to reset passwords of arbitrary users via crafted (1) lost…

  • Unscored —
    CVE-2008-6952 Public exploit

    SQL injection vulnerability in Rss.php in MauryCMS 0.53.2 and earlier allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2008-6955 Public exploit

    mxCamArchive 2.2 stores sensitive information under the web root with insufficient access control, which allows remote …

  • Unscored —
    CVE-2008-6941 Public exploit

    SQL injection vulnerability in the login functionality in TurnkeyForms Web Hosting Directory allows remote attackers to…

  • Unscored —
    CVE-2008-6953 Public exploit

    Buffer overflow in oovoo.exe in ooVoo 1.7.1.35, and possibly other versions before 1.7.1.59, allows remote attackers to…

  • Unscored —
    CVE-2008-6942 Public exploit

    Unrestricted file upload vulnerability in ScriptsFeed Realtor Classifieds System (aka Real Estate Classifieds) allows r…

  • Unscored —
    CVE-2008-6944 Public exploit

    Unrestricted file upload vulnerability in ScriptsFeed Auto Classifieds allows remote authenticated users to execute arb…

  • Unscored —
    CVE-2008-6947 Public exploit

    Collabtive 0.4.8 allows remote attackers to bypass authentication and create new users, including administrators, via u…