Skip to content
OpenAdvisories

Archive

12 August 2009

Vulnerabilities first published on this day (UTC), newest first.

21 results · Clear filters · Feed

  • Unscored —
    CVE-2009-2195 Public exploit EPSS 13%

    Buffer overflow in WebKit in Apple Safari before 4.0.3 allows remote attackers to execute arbitrary code or cause a den…

  • Unscored —
    CVE-2009-1534 Public exploit EPSS 52%

    Buffer overflow in the Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2000 Web Components SP3…

  • Unscored —
    CVE-2008-6950 Public exploit

    Multiple SQL injection vulnerabilities in login.asp in Bankoi WebHosting Control Panel 1.20 allow remote attackers to e…

  • Unscored —
    CVE-2008-6956 Public exploit

    Static code injection vulnerability in admin/admin.php in mxCamArchive 2.2 allows remote authenticated administrators t…

  • Unscored —
    CVE-2008-6939 Public exploit

    TurnkeyForms Web Hosting Directory allows remote attackers to bypass authentication and (1) gain administrative privile…

  • Unscored —
    CVE-2008-6949 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in Collabtive 0.4.8 allow remote attackers to hijack the aut…

  • Unscored —
    CVE-2008-6946 Public exploit

    Cross-site scripting (XSS) vulnerability in manageproject.php in Collabtive 0.4.8 allows user-assisted remote attackers…

  • Unscored —
    CVE-2008-6943 Public exploit

    Unrestricted file upload vulnerability in ScriptsFeed Recipes Listing Portal allows remote authenticated users to execu…

  • Unscored —
    CVE-2008-6948 Public exploit

    Unrestricted file upload vulnerability in Collabtive 0.4.8 allows remote authenticated users to execute arbitrary code …

  • Unscored —
    CVE-2008-6958 Public exploit

    wap/index.php in Crossday Discuz! Board 6.x and 7.x allows remote authenticated users to execute arbitrary PHP code via…

  • Unscored —
    CVE-2008-6960 Public exploit

    download.php in X10media x10 Automatic Mp3 Search Engine Script 1.5.5 through 1.6 allows remote attackers to read arbit…

  • Unscored —
    CVE-2008-6940 Public exploit

    TurnkeyForms Web Hosting Directory stores sensitive information under the web root with insufficient access control, wh…

  • Unscored —
    CVE-2008-6959 Public exploit

    Insecure method vulnerability in the Chilkat Socket ActiveX control (ChilkatSocket.ChilkatSocket.1) in ChilkatSocket.dl…

  • Unscored —
    CVE-2008-6957 Public exploit

    member.php in Crossday Discuz! Board allows remote attackers to reset passwords of arbitrary users via crafted (1) lost…

  • Unscored —
    CVE-2008-6952 Public exploit

    SQL injection vulnerability in Rss.php in MauryCMS 0.53.2 and earlier allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2008-6955 Public exploit

    mxCamArchive 2.2 stores sensitive information under the web root with insufficient access control, which allows remote …

  • Unscored —
    CVE-2008-6941 Public exploit

    SQL injection vulnerability in the login functionality in TurnkeyForms Web Hosting Directory allows remote attackers to…

  • Unscored —
    CVE-2008-6953 Public exploit

    Buffer overflow in oovoo.exe in ooVoo 1.7.1.35, and possibly other versions before 1.7.1.59, allows remote attackers to…

  • Unscored —
    CVE-2008-6942 Public exploit

    Unrestricted file upload vulnerability in ScriptsFeed Realtor Classifieds System (aka Real Estate Classifieds) allows r…

  • Unscored —
    CVE-2008-6944 Public exploit

    Unrestricted file upload vulnerability in ScriptsFeed Auto Classifieds allows remote authenticated users to execute arb…

  • Unscored —
    CVE-2008-6947 Public exploit

    Collabtive 0.4.8 allows remote attackers to bypass authentication and create new users, including administrators, via u…