Skip to content
OpenAdvisories

Archive

8 September 2009

Vulnerabilities first published on this day (UTC), newest first.

16 results · Clear filters · Feed

  • Unscored —
    CVE-2008-7184 Public exploit

    Cross-site scripting (XSS) vulnerability in Diigo Toolbar and Diigolet allows remote attackers to inject arbitrary web …

  • Unscored —
    CVE-2008-7185 Public exploit

    GNOME Rhythmbox 0.11.5 allows remote attackers to cause a denial of service (segmentation fault and crash) via a playli…

  • Unscored —
    CVE-2009-3103 Public exploit EPSS 92%

    Array index error in the SMBv2 protocol implementation in srv2.sys in Microsoft Windows Vista Gold, SP1, and SP2, Windo…

  • Unscored —
    CVE-2009-3099 Public exploit

    Unspecified vulnerability in HP OpenView Operations Manager 8.1 on Windows Server 2003 SP2 allows remote attackers to h…

  • Unscored —
    CVE-2008-7178 Public exploit

    Directory traversal vulnerability in Uploader module 1.1 for XOOPS allows remote attackers to read arbitrary files via …

  • Unscored —
    CVE-2008-7179 Public exploit

    OTManager CMS 2.4 allows remote attackers to bypass authentication and gain administrator privileges by setting the ADM…

  • Unscored —
    CVE-2008-7172 Public exploit

    Lightweight news portal (LNP) 1.0b does not properly restrict access to administrator functionality, which allows remot…

  • Unscored —
    CVE-2008-7176 Public exploit

    Multiple directory traversal vulnerabilities in Facil CMS 0.1RC allow remote attackers to read arbitrary files via a ..…

  • Unscored —
    CVE-2008-7167 Public exploit

    Unrestricted file upload vulnerability in upload.php in Page Manager 2006-02-04 allows remote attackers to execute arbi…

  • Unscored —
    CVE-2008-7168 Public exploit

    Insecure method vulnerability in the UUSee UUUpgrade ActiveX control (UUUpgrade.ocx 3.0.2.12) allows remote attackers t…

  • Unscored —
    CVE-2008-7182 Public exploit EPSS 24%

    Buffer overflow in the IMAP service in NetWin Surgemail 3.9e, and possibly other versions before 3.9g2, allows remote a…

  • Unscored —
    CVE-2008-7170 Public exploit

    GSC build 2067 and earlier relies on the client to enforce administrator privileges, which allows remote attackers to e…

  • Unscored —
    CVE-2008-7169 Public exploit

    SQL injection vulnerability in Jabode horoscope extension (com_jabode) for Joomla! allows remote attackers to execute a…

  • Unscored —
    CVE-2008-7171 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Lightweight news portal (LNP) 1.0b allow remote attackers to inj…

  • Unscored —
    CVE-2008-7180 Public exploit

    del_query1.php in Telephone Directory 2008 allows remote attackers to delete arbitrary contacts via a direct request wi…

  • Unscored —
    CVE-2008-7181 Public exploit

    Butterfly Organizer 2.0.0 allows remote attackers to (1) delete arbitrary categories via a modified tablehere parameter…