Skip to content
OpenAdvisories

Archive

August 2009

Vulnerabilities first published in this month (UTC), newest first.

← July 2009 2009 / August September 2009 →
  1. 1 
  2. 2 
  3. 318
  4. 411
  5. 516
  6. 625
  7. 715
  8. 8 
  9. 9 
  10. 1027
  11. 1122
  12. 1243
  13. 1325
  14. 1422
  15. 15 
  16. 16 
  17. 1714
  18. 1847
  19. 1921
  20. 2022
  21. 2138
  22. 22 
  23. 23 
  24. 2440
  25. 2529
  26. 2612
  27. 2727
  28. 2825
  29. 29 
  30. 30 
  31. 3128
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.8
    CVE-2009-1544 EPSS 21%

    Double free vulnerability in the Workstation service in Microsoft Windows allows remote authenticated users to gain pri…

  • High —
    CVE-2008-6954

    Cobbler Web Interface Kickstart Template Remote Privilege Escalation Vulnerability

    The web interface (CobblerWeb) in Cobbler before 1.2.9 allows remote authenticated users to execute arbitrary Python code in cobblerd by editing a Cheetah kickstart template to import arbitrary Python modules.

    cobbler PyPI
  • High 7.5
    CVE-2009-0669

    Zope Object Database (ZODB) Authentication bypass in ZEO storage servers

    Zope Object Database (ZODB) before 3.8.2, when certain Zope Enterprise Objects (ZEO) database sharing is enabled, allows remote attackers to bypass authentication via vectors involving the ZEO network protocol.

    zodb3 PyPI
  • High 7.5
    CVE-2009-2659

    Django Admin Media Handler Vulnerable to Directory Traversal

    The Admin media handler in core/servers/basehttp.py in Django 1.0 and 0.96 does not properly map URL requests to expected "static media files," which allows remote attackers to conduct directory traversal attacks and read arbitrary files via a crafted URL.

    python-django django Debian PyPI