Skip to content
OpenAdvisories

Archive

August 2009

Vulnerabilities first published in this month (UTC), newest first.

← July 2009 2009 / August September 2009 →
  1. 1 
  2. 2 
  3. 318
  4. 411
  5. 516
  6. 625
  7. 715
  8. 8 
  9. 9 
  10. 1027
  11. 1122
  12. 1243
  13. 1325
  14. 1422
  15. 15 
  16. 16 
  17. 1714
  18. 1847
  19. 1921
  20. 2022
  21. 2138
  22. 22 
  23. 23 
  24. 2440
  25. 2529
  26. 2612
  27. 2727
  28. 2825
  29. 29 
  30. 30 
  31. 3128
All Critical High Medium Low Exploited only Public exploit

527 results · Feed

  • Unscored —
    CVE-2008-6977 Public exploit

    Cross-site scripting (XSS) vulnerability in album.asp in Full Revolution aspWebAlbum 3.2 allows remote attackers to inj…

  • Unscored —
    CVE-2008-6987

    Unrestricted file upload vulnerability in eZoneScripts Dating Website script allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2008-6983 Public exploit

    modules/tool/hitcounter.php in devalcms 1.4a allows remote attackers to execute arbitrary PHP code via the HTTP Referer…

  • Unscored —
    CVE-2008-6978 Public exploit

    Unrestricted file upload vulnerability in Full Revolution aspWebAlbum 3.2 allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2008-6993

    Siemens Gigaset WLAN Camera 1.27 has an insecure default password, which allows remote attackers to conduct unauthorize…

  • Unscored —
    CVE-2008-6995 Public exploit

    Integer underflow in net/base/escape.cc in chrome.dll in Google Chrome 0.2.149.27 allows remote attackers to cause a de…

  • Unscored —
    CVE-2008-6984

    Plesk 8.6.0, when short mail login names (SHORTNAMES) are enabled, allows remote attackers to bypass authentication and…

  • Unscored —
    CVE-2008-6981

    index.php in phpAdultSite CMS, possibly 2.3.2, allows remote attackers to obtain the full installation path via an inva…

  • Unscored —
    CVE-2008-6991 Public exploit

    SQL injection vulnerability in public/page.php in Websens CMSbright allows remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2009-2789

    SQL injection vulnerability in the Permis (com_groups) component 1.0 for Joomla! allows remote attackers to execute arb…

  • Unscored —
    CVE-2009-2781 Public exploit

    SQL injection vulnerability in forum.php in Arab Portal 2.x, when magic_quotes_gpc is disabled, allows remote authentic…

  • Unscored —
    CVE-2009-2786 Public exploit

    SQL injection vulnerability in reputation.php in the Reputation plugin 2.2.4, 2.2.3, 2.0.4, and earlier for PunBB allow…

  • Unscored —
    CVE-2009-2787 Public exploit

    Directory traversal vulnerability in include/reputation/rep_profile.php in the Reputation plugin 2.2.4, 2.2.3, 2.0.4, a…

  • Unscored —
    CVE-2009-2788 Public exploit

    Multiple SQL injection vulnerabilities in Mobilelib GOLD 3 allow remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2009-2779 Public exploit

    SQL injection vulnerability in index.php in AJ Matrix DNA allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2009-2783 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in XOOPS 2.3.3 allow remote attackers to inject arbitrary web scrip…

  • Unscored —
    CVE-2009-2785

    Multiple cross-site scripting (XSS) vulnerabilities in PHP Open Classifieds Script allow remote attackers to inject arb…

  • Unscored —
    CVE-2009-2780 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in 68 Classifieds 4.1 allow remote attackers to inject arbitrary we…

  • Unscored —
    CVE-2009-2791 Public exploit

    PHP remote file inclusion vulnerability in pda_projects.php in WebDynamite ProjectButler 1.5.0 allows remote attackers …

  • Unscored —
    CVE-2009-2790 Public exploit

    SQL injection vulnerability in cat_products.php in SoftBiz Dating Script allows remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2009-2782 Public exploit

    SQL injection vulnerability in the JFusion (com_jfusion) component for Joomla! allows remote attackers to execute arbit…

  • Unscored —
    CVE-2009-2784 Public exploit

    Multiple directory traversal vulnerabilities in dit.cms 1.3, when register_globals is enabled, allow remote attackers t…

  • Unscored —
    CVE-2009-2792 Public exploit

    Directory traversal vulnerability in plugings/pagecontent.php in Really Simple CMS (RSCMS) 0.3a allows remote attackers…

  • Unscored —
    CVE-2009-2770 Public exploit

    PowerUpload 2.4 allows remote attackers to bypass authentication and gain administrative access via a MIME encoded valu…

  • Unscored —
    CVE-2009-2776 Public exploit

    SQL injection vulnerability in showresult.asp in Smart ASP Survey allows remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2009-2774 Public exploit

    SQL injection vulnerability in paidbanner.php in PHP Paid 4 Mail Script allows remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2009-2773 Public exploit

    PHP remote file inclusion vulnerability in home.php in PHP Paid 4 Mail Script allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2009-2771

    Cross-site scripting (XSS) vulnerability in Free Arcade Script 1.3 allows remote attackers to inject arbitrary web scri…

  • Unscored —
    CVE-2009-2777 Public exploit

    SQL injection vulnerability in visitor/view.php in GarageSales Script allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2009-2778 Public exploit

    Cross-site scripting (XSS) vulnerability in visitor/view.php in GarageSales Script allows remote attackers to inject ar…

  • Unscored —
    CVE-2009-2772 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in PG Roommate Finder Solution allow remote attackers to inject arb…

  • Unscored —
    CVE-2009-2769 Public exploit

    PHP remote file inclusion vulnerability in include/timesheet.php in Ultrize TimeSheet 1.2.2, when register_globals is e…

  • Unscored —
    CVE-2009-2775 Public exploit

    SQL injection vulnerability in linkout.php in PHPArcadeScript (PHP Arcade Script) 4.0 allows remote attackers to execut…

  • Unscored —
    CVE-2008-6974 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in apply.cgi in DD-WRT 24 sp1 and earlier allow remote attac…

  • Unscored —
    CVE-2008-6975 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in apply.cgi in DD-WRT 24 sp2 allow remote attackers to hija…

  • Unscored —
    CVE-2009-1048

    The web interface on the snom VoIP phones snom 300, snom 320, snom 360, snom 370, and snom 820 with firmware 6.5 before…

  • Unscored —
    CVE-2009-2768

    The load_flat_shared_library function in fs/binfmt_flat.c in the flat subsystem in the Linux kernel before 2.6.31-rc6 a…

  • Unscored —
    CVE-2009-2767 Public exploit

    The init_posix_timers function in kernel/posix-timers.c in the Linux kernel before 2.6.31-rc6 allows local users to cau…

  • Unscored —
    CVE-2009-2691

    The mm_for_maps function in fs/proc/base.c in the Linux kernel 2.6.30.4 and earlier allows local users to read (1) maps…

  • Unscored —
    CVE-2009-2692 Public exploit EPSS 15%

    The Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all function pointers for sock…