Skip to content
OpenAdvisories

Archive

13 August 2009

Vulnerabilities first published on this day (UTC), newest first.

25 results · Feed

  • Unscored —

    Multiple unspecified vulnerabilities in IBM WebSphere Commerce 6.0 before 6.0.0.7 have unknown impact and attack vector…

  • Unscored —

    The Service Component Architecture (SCA) feature pack for IBM WebSphere Application Server (WAS) SCA 1.0 before 1.0.0.3…

  • Unscored —

    The Web Services functionality in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.25 and 7.0 before 7.0.0.5, in…

  • Unscored —

    The System Management/Repository component in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.5 on z/OS uses we…

  • Unscored —

    The Servlet Engine/Web Container component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.25 and 7.0 before…

  • Unscored —

    The Migration component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.25 and 7.0 before 7.0.0.5, when trac…

  • Unscored —

    IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.5 does not properly read the portletServingEnabled parameter in…

  • Unscored —

    SQL injection vulnerability in the console in IBM WebSphere Partner Gateway (WPG) Enterprise 6.0 before FP8, 6.1 before…

  • Unscored —

    Unspecified vulnerability in wsadmin in the System Management/Repository component in IBM WebSphere Application Server …

  • Unscored —

    The Security component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.25 and 7.0 before 7.0.0.5 does not pr…

  • Unscored —

    Unspecified vulnerability in IBM WebSphere Commerce 6.0 Enterprise before 6.0.0.8, when trace is enabled, allows local …

  • Unscored —

    Avira AntiVir Premium, Premium Security Suite, AntiVir Professional, and AntiVir Personal - FREE allows local users to …

  • Unscored —
    CVE-2008-6964 Public exploit

    SQL injection vulnerability in the login page in X7 Chat 2.0.5 allows remote attackers to execute arbitrary SQL command…

  • Unscored —

    mailnews in Mozilla Thunderbird before 2.0.0.18 and SeaMonkey before 1.1.13, when JavaScript is enabled in mail, allows…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Drupal Content Construction Kit (CCK) 5.x through 5.x-1.8 allow …

  • Unscored —
    CVE-2008-6971 Public exploit

    The password reset functionality in Simple Machines Forum (SMF) 1.0.x before 1.0.14, 1.1.x before 1.1.6, and 2.0 before…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in checkout.php in Avactis Shopping Cart 1.8.0 and 1.8.1 allow remo…

  • Unscored —
    CVE-2008-6968 Public exploit

    Multiple SQL injection vulnerabilities in submit.php in Pligg CMS 9.9.5 allow remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2008-6970 Public exploit

    SQL injection vulnerability in dosearch.inc.php in UBB.threads 7.3.1 and earlier allows remote attackers to execute arb…

  • Unscored —
    CVE-2008-6963 Public exploit

    admin.php in TurnkeyForms Text Link Sales allows remote attackers to bypass authentication and gain administrative priv…

  • Unscored —
    CVE-2008-6966 Public exploit

    AJ Square AJ Auction Pro Platinum Skin #1 sends a redirect but does not exit when it is called directly, which allows r…

  • Unscored —

    Multiple unspecified vulnerabilities in WorldClient in Alt-N MDaemon before 10.02 have unknown impact and attack vector…

  • Unscored —
    CVE-2008-6965 Public exploit

    AJ Square AJ Auction OOPD, Pro Platinum Skin #1, Pro Platinum Skin #2, and Web 2.0 send a redirect but do not exit when…

  • Unscored —

    Unquoted Windows search path vulnerability in the scheduler (sched.exe) in Avira AntiVir, AntiVir Premium, Premium Secu…

  • Unscored —
    CVE-2009-2762 Public exploit EPSS 20%

    wp-login.php in WordPress 2.8.3 and earlier allows remote attackers to force a password reset for the first user in the…