Skip to content
OpenAdvisories

Archive

25 August 2009

Vulnerabilities first published on this day (UTC), newest first.

← July 2009 2009 / August /25 September 2009 →
  1. 1 
  2. 2 
  3. 318
  4. 411
  5. 516
  6. 625
  7. 715
  8. 8 
  9. 9 
  10. 1027
  11. 1122
  12. 1243
  13. 1325
  14. 1422
  15. 15 
  16. 16 
  17. 1714
  18. 1847
  19. 1921
  20. 2022
  21. 2138
  22. 22 
  23. 23 
  24. 2440
  25. 2529
  26. 2612
  27. 2727
  28. 2825
  29. 29 
  30. 30 
  31. 3128
All Critical High Medium Low Exploited only Public exploit

29 results · Feed

  • Medium 6.1
    CVE-2009-2959

    Buildbot Cross-site scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in the waterfall web status view (status/web/waterfall.py) in Buildbot 0.7.6 through 0.7.11p1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

    buildbot buildbot Debian PyPI
  • Unscored —
    CVE-2009-2960 Public exploit

    CuteFlow 2.10.3 and 2.11.0_c does not properly restrict access to pages/edituser.php, which allows remote attackers to …

  • Unscored —
    CVE-2009-2961 Public exploit

    Stack-based buffer overflow in Thaddy de Konng KOL Player 1.0 allows remote attackers to cause a denial of service (cra…

  • Unscored —
    CVE-2009-2965 Public exploit

    Cross-site scripting (XSS) vulnerability in entry/index.jsp in Radvision Scopia 5.7, and possibly other versions before…

  • Unscored —
    CVE-2009-2964

    Multiple cross-site request forgery (CSRF) vulnerabilities in SquirrelMail 1.4.19 and earlier, and NaSMail before 1.7, …

  • Unscored —
    CVE-2009-2963

    Unspecified vulnerability in the update feature in Toolbar Uninstaller 1.0.2 allows remote attackers to force the downl…

  • Unscored —
    CVE-2009-2966 Public exploit

    avp.exe in Kaspersky Internet Security 9.0.0.459 and Anti-Virus 9.0.0.463 allows remote attackers to cause a denial of …

  • Unscored —
    CVE-2008-7077 Public exploit

    Multiple SQL injection vulnerabilities in SailPlanner 0.3a allow remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2008-7080 Public exploit

    Team PHP PHP Classifieds Script stores sensitive information under the web root with insufficient access control, which…

  • Unscored —
    CVE-2008-7062 Public exploit

    Unrestricted file upload vulnerability in admin/index.php in Download Manager module 1.0 for LoveCMS 1.6.2 Final allows…

  • Unscored —
    CVE-2008-7068

    The dba_replace function in PHP 5.2.6 and 4.x allows context-dependent attackers to cause a denial of service (file tru…

  • Unscored —
    CVE-2008-7072 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Chipmunk Topsites allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2008-7071 Public exploit

    SQL injection vulnerability in authenticate.php in Chipmunk Topsites allows remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2008-7073 Public exploit

    PHP remote file inclusion vulnerability in lib/action/rss.php in RSS module 0.1 for Pie Web M{a,e}sher, when register_g…

  • Unscored —
    CVE-2008-7078 Public exploit

    Multiple buffer overflows in Rumpus before 6.0.1 allow remote attackers to (1) cause a denial of service (segmentation …

  • Unscored —
    CVE-2008-7069 Public exploit

    All Club CMS (ACCMS) 0.0.2 and earlier stores sensitive information under the web root with insufficient access control…

  • Unscored —
    CVE-2008-7064 Public exploit

    Directory traversal vulnerability in the get_lang function in global.php in Quicksilver Forums 1.4.2 and earlier, as us…

  • Unscored —
    CVE-2008-7065 Public exploit

    Siemens C450 IP and C475 IP VoIP devices allow remote attackers to cause a denial of service (disconnected calls and de…

  • Unscored —
    CVE-2008-7083 Public exploit

    Multiple SQL injection vulnerabilities in ReVou Micro Blogging Twitter clone allow remote attackers to execute arbitrar…

  • Unscored —
    CVE-2008-7066 Public exploit

    OpenForum 0.66 Beta allows remote attackers to bypass authentication and reset passwords of other users via a direct re…

  • Unscored —
    CVE-2008-7081

    userHandler.cgi in RaidSonic ICY BOX NAS firmware 2.3.2.IB.2.RS.1 allows remote attackers to bypass authentication and …

  • Unscored —
    CVE-2008-7063 Public exploit

    Ocean12 FAQ Manager Pro stores sensitive data under the web root with insufficient access control, which allows remote …

  • Unscored —
    CVE-2008-7075 Public exploit

    Multiple SQL injection vulnerabilities in Kalptaru Infotech Ltd. Star Articles 6.0 allow remote attackers to inject arb…

  • Unscored —
    CVE-2008-7076 Public exploit

    Unrestricted file upload vulnerability in user.modify.profile.php in Kalptaru Infotech Ltd. Star Articles 6.0 allows re…

  • Unscored —
    CVE-2008-7067 Public exploit

    PHP remote file inclusion vulnerability in admin/plugins/Online_Users/main.php in PageTree CMS 0.0.2 BETA 0001 allows r…

  • Unscored —
    CVE-2008-7070 Public exploit

    Argument injection vulnerability in the URI handler in KVIrc 3.4.2 Shiny allows remote attackers to execute arbitrary c…

  • Unscored —
    CVE-2008-7082

    MyBB (aka MyBulletinBoard) 1.4.3 includes the sensitive my_post_key parameter in URLs to moderation.php with the (1) me…

  • Unscored —
    CVE-2008-7079 Public exploit

    Buffer overflow in Nero ShowTime 5.0.15.0 allows remote attackers to cause a denial of service (crash) and possibly exe…

  • Unscored —
    CVE-2008-7074 Public exploit

    Format string vulnerability in MemeCode Software i.Scribe 1.88 through 2.00 before Beta9 allows remote SMTP servers to …