Skip to content
OpenAdvisories

Archive

2 September 2009

Vulnerabilities first published on this day (UTC), newest first.

← August 2009 2009 / September /2 October 2009 →
  1. 126
  2. 220
  3. 316
  4. 412
  5. 5 
  6. 6 
  7. 7 
  8. 864
  9. 924
  10. 1055
  11. 1131
  12. 12 
  13. 136
  14. 1430
  15. 1524
  16. 1626
  17. 1713
  18. 1839
  19. 19 
  20. 20 
  21. 2116
  22. 2211
  23. 2329
  24. 2439
  25. 2515
  26. 26 
  27. 27 
  28. 2827
  29. 2924
  30. 3027
All Critical High Medium Low Exploited only Public exploit

20 results · Feed

  • Unscored —
    CVE-2008-7155 Public exploit

    NetRisk 1.9.7 does not properly restrict access to admin/change_submit.php, which allows remote attackers to change the…

  • Unscored —
    CVE-2008-7156 Public exploit

    EkinBoard 1.1.0 and earlier, when register_globals is enabled, allows remote attackers to bypass authorization and gain…

  • Unscored —
    CVE-2008-7154 Public exploit

    Docebo 3.5.0.3 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) class/cl…

  • Unscored —
    CVE-2008-7157 Public exploit

    Unrestricted file upload vulnerability in EkinBoard 1.1.0 and earlier allows remote attackers to execute arbitrary code…

  • Unscored —
    CVE-2008-7153 Public exploit

    SQL injection vulnerability in the autoDetectRegion function in doceboCore/lib/lib.regset.php in Docebo 3.5.0.3 and ear…

  • Unscored —
    CVE-2008-7158

    Numara FootPrints 7.5a through 7.5a1 and 8.0 through 8.0a allows remote attackers to execute arbitrary commands via she…

  • Unscored —
    CVE-2009-0201

    Heap-based buffer overflow in OpenOffice.org (OOo) before 3.1.1 and StarOffice/StarSuite 7, 8, and 9 might allow remote…

  • Unscored —
    CVE-2009-0200

    Integer underflow in OpenOffice.org (OOo) before 3.1.1 and StarOffice/StarSuite 7, 8, and 9 might allow remote attacker…

  • Unscored —
    CVE-2009-3047

    Opera before 10.00, when a collapsed address bar is used, does not properly update the domain name from the previously …

  • Unscored —
    CVE-2009-3048

    Opera before 10.00 on Linux, Solaris, and FreeBSD does not properly implement the "INPUT TYPE=file" functionality, whic…

  • Unscored —
    CVE-2009-3050

    Buffer overflow in the set_page_size function in util.cxx in HTMLDOC 1.8.27 and earlier allows context-dependent attack…

    htmldoc Debian
  • Unscored —
    CVE-2009-3043 Public exploit

    The tty_ldisc_hangup function in drivers/char/tty_ldisc.c in the Linux kernel 2.6.31-rc before 2.6.31-rc8 allows local …

  • Unscored —
    CVE-2009-3044

    Opera before 10.00 does not properly handle a (1) '\0' character or (2) invalid wildcard character in a domain name in …

  • Unscored —
    CVE-2009-3049

    Opera before 10.00 does not properly display all characters in Internationalized Domain Names (IDN) in the address bar,…

  • Unscored —
    CVE-2009-3045

    Opera before 10.00 trusts root X.509 certificates signed with the MD2 algorithm, which makes it easier for man-in-the-m…

  • Unscored —
    CVE-2009-3046

    Opera before 10.00 does not check all intermediate X.509 certificates for revocation, which makes it easier for remote …

  • Unscored —
    CVE-2009-2700

    src/network/ssl/qsslcertificate.cpp in Nokia Trolltech Qt 4.x does not properly handle a '\0' character in a domain nam…

  • Unscored —
    CVE-2009-2968

    Directory traversal vulnerability in a support component in the web interface in VMware Studio 2.0 public beta before b…

  • Unscored —
    CVE-2009-2958 Public exploit EPSS 10%

    The tftp_request function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, allows remote attackers to caus…

    dnsmasq Debian
  • Unscored —
    CVE-2009-2957 Public exploit EPSS 15%

    Heap-based buffer overflow in the tftp_request function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, m…

    dnsmasq Debian