Skip to content
OpenAdvisories

Archive

August 2009

Vulnerabilities first published in this month (UTC), newest first.

← July 2009 2009 / August September 2009 →
  1. 1 
  2. 2 
  3. 318
  4. 411
  5. 516
  6. 625
  7. 715
  8. 8 
  9. 9 
  10. 1027
  11. 1122
  12. 1243
  13. 1325
  14. 1422
  15. 15 
  16. 16 
  17. 1714
  18. 1847
  19. 1921
  20. 2022
  21. 2138
  22. 22 
  23. 23 
  24. 2440
  25. 2529
  26. 2612
  27. 2727
  28. 2825
  29. 29 
  30. 30 
  31. 3128
All Critical High Medium Low Exploited only Public exploit

268 results · Clear filters · Feed

  • Unscored —
    CVE-2008-6912 Public exploit

    Zeeways SHAADICLONE 2.0 allows remote attackers to bypass authentication and gain administrative privileges via a direc…

  • Unscored —
    CVE-2008-6916 Public exploit

    Siemens SpeedStream 5200 with NetPort Software 1.1 allows remote attackers to bypass authentication via an invalid Host…

  • Unscored —
    CVE-2008-6914 Public exploit

    Unrestricted file upload vulnerability in viewprofile.php in Zeeways ZEEPROPERTY 1.0 allows remote authenticated users …

  • Unscored —
    CVE-2008-6913 Public exploit

    Unrestricted file upload vulnerability in editresume_next.php in Zeeways ZEEJOBSITE 2.0 allows remote authenticated use…

  • Unscored —
    CVE-2008-6915 Public exploit

    Cross-site scripting (XSS) vulnerability in view_prop_details.php in Zeeways ZEEPROPERTY 1.0 allows remote attackers to…

  • Unscored —
    CVE-2008-6917 Public exploit

    SQL injection vulnerability in admin.php in Exocrew ExoPHPDesk 1.2 Final allows remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2009-2715 Public exploit

    Sun VirtualBox 2.2 through 3.0.2 r49928 allows guest OS users to cause a denial of service (Linux host OS reboot) via a…

  • Unscored —
    CVE-2008-6911 Public exploit

    SQL injection vulnerability in the authenticateUser function in includes/authentication.inc.php in BrewBlogger (BB) 2.1…

  • Unscored —
    CVE-2008-6906 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in BabbleBoard 1.1.6 allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2008-6905 Public exploit

    Cross-site request forgery (CSRF) vulnerability in index.php in BabbleBoard 1.1.6 allows remote authenticated users to …

  • Unscored —
    CVE-2008-6907 Public exploit

    Multiple SQL injection vulnerabilities in checkuser.php in 2532designs 2532|Gigs 1.2.2 Stable, when magic_quotes_gpc is…

  • Unscored —
    CVE-2008-6902 Public exploit

    Unrestricted file upload vulnerability in upload_flyer.php in 2532designs 2532|Gigs 1.2.2 Stable allows remote attacker…

  • Unscored —
    CVE-2008-6900 Public exploit

    Unrestricted file upload vulnerability in "Add Pen/Author Name" feature in addpen.php in AvailScript Article Script all…

  • Unscored —
    CVE-2008-6901 Public exploit

    Multiple directory traversal vulnerabilities in 2532designs 2532|Gigs 1.2.2 Stable, when register_globals is enabled an…

  • Unscored —
    CVE-2008-6899 Public exploit

    Multiple buffer overflows in freeSSHd 1.2.1 allow remote authenticated users to cause a denial of service (crash) and e…

  • Unscored —
    CVE-2008-6897 Public exploit

    Multiple buffer overflows in Getleft.exe in Andres Garcia Getleft 1.2 allow remote attackers to cause a denial of servi…

  • Unscored —
    CVE-2008-6898 Public exploit EPSS 32%

    Buffer overflow in the XHTTP Module 4.1.0.0 in the ActiveX control for SaschArt SasCam Webcam Server 2.6.5 allows remot…

  • Unscored —
    CVE-2009-2669 Public exploit

    A certain debugging component in IBM AIX 5.3 and 6.1 does not properly handle the (1) _LIB_INIT_DBG and (2) _LIB_INIT_D…

  • Unscored —
    CVE-2009-2579 Public exploit

    SQL injection vulnerability in reward_points.post.php in the Reward points addon in CS-Cart before 2.0.6 allows remote …

  • Unscored —
    CVE-2008-6892 Public exploit

    SQL injection vulnerability in lire/index.php in Peel 3.1 allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2008-6891 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in ASP Forum Script allow remote attackers to inject arbitrary web …

  • Unscored —
    CVE-2008-6887 Public exploit

    SQL injection vulnerability in detailad.asp in Pre Classified Listings 1.0 allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2008-6888 Public exploit

    Cross-site scripting (XSS) vulnerability in signup.asp in Pre Classified Listings 1.0 allows remote attackers to inject…

  • Unscored —
    CVE-2008-6890 Public exploit

    SQL injection vulnerability in messages.asp in ASP Forum Script allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2008-6889 Public exploit

    SQL injection vulnerability in Merchantsadd.asp in ASPReferral 5.3 allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2009-2653 Public exploit

    The NtUserConsoleControl function in win32k.sys in Microsoft Windows XP SP2 and SP3, and Server 2003 before SP1, allows…

  • Unscored —
    CVE-2009-2655 Public exploit EPSS 23%

    mshtml.dll in Microsoft Internet Explorer 7 and 8 on Windows XP SP3 allows remote attackers to cause a denial of servic…

  • Unscored —
    CVE-2009-2654 Public exploit

    Mozilla Firefox before 3.0.13, and 3.5.x before 3.5.2, allows remote attackers to spoof the address bar, and possibly c…