Skip to content
OpenAdvisories

Archive

9 September 2009

Vulnerabilities first published on this day (UTC), newest first.

← August 2009 2009 / September /9 October 2009 →
  1. 126
  2. 220
  3. 316
  4. 412
  5. 5 
  6. 6 
  7. 7 
  8. 864
  9. 924
  10. 1055
  11. 1131
  12. 12 
  13. 136
  14. 1430
  15. 1524
  16. 1626
  17. 1713
  18. 1839
  19. 19 
  20. 20 
  21. 2116
  22. 2211
  23. 2329
  24. 2439
  25. 2515
  26. 26 
  27. 27 
  28. 2827
  29. 2924
  30. 3027
All Critical High Medium Low Exploited only Public exploit

24 results · Feed

  • Unscored —
    CVE-2009-3120

    Cross-site scripting (XSS) vulnerability in public/index.php in BIGACE Web CMS 2.6 allows remote attackers to inject ar…

  • Unscored —
    CVE-2009-3123 Public exploit

    Directory traversal vulnerability in gallery/gallery.php in Wap-Motor before 18.1 allows remote attackers to read arbit…

  • Unscored —
    CVE-2009-3121

    Cross-site scripting (XSS) vulnerability in the Ajax Table module 5.x for Drupal allows remote attackers to inject arbi…

  • Unscored —
    CVE-2009-3122

    The Ajax Table module 5.x for Drupal does not perform access control, which allows remote attackers to delete arbitrary…

  • Unscored —
    CVE-2009-3114

    The RSS reader widget in IBM Lotus Notes 8.0 and 8.5 saves items from an RSS feed as local HTML documents, which allows…

  • Unscored —
    CVE-2009-3117 Public exploit

    SQL injection vulnerability in category.php in Snow Hall Silurus System 1.0 allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2009-3115 Public exploit EPSS 11%

    SolarWinds TFTP Server 9.2.0.111 and earlier allows remote attackers to cause a denial of service (service stop) via a …

  • Unscored —
    CVE-2009-3116 Public exploit

    SQL injection vulnerability in index.php in Uiga Church Portal allows remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2009-3124 Public exploit

    Directory traversal vulnerability in get_message.cgi in QuarkMail allows remote attackers to read arbitrary files via a…

  • Unscored —
    CVE-2009-3118

    SQL injection vulnerability in mod/poll/comment.php in the vote module in Danneo CMS 0.5.2 and earlier allows remote at…

  • Unscored —
    CVE-2009-3119 Public exploit

    SQL injection vulnerability in screen.php in the Download System mSF (dsmsf) module for PHP-Fusion allows remote attack…

  • Unscored —
    CVE-2009-2205

    Stack-based buffer overflow in the Java Web Start command launcher in Java for Mac OS X 10.5 before Update 5 allows att…

  • Unscored —
    CVE-2008-7192 Public exploit

    Cross-site request forgery (CSRF) vulnerability in index.php in WoltLab Burning Board (wBB) 3.0.1, and possibly other 3…

  • Unscored —
    CVE-2008-7193

    PHPKIT 1.6.4 PL1 includes the session ID in the URL, which allows remote attackers to conduct cross-site request forger…

  • Unscored —
    CVE-2009-3113

    Unspecified vulnerability in OXID eShop Professional, Enterprise, and Community Edition before 4.1.2, 3.x, and 2.x allo…

  • Unscored —
    CVE-2009-3112

    Unspecified vulnerability in OXID eShop Professional, Enterprise, and Community Edition before 4.1.0 allows remote atta…

  • Unscored —
    CVE-2009-3111 Public exploit EPSS 11%

    The rad_decode function in FreeRADIUS before 1.1.8 allows remote attackers to cause a denial of service (radiusd crash)…

    freeradius Debian
  • Unscored —
    CVE-2008-7191

    Unspecified vulnerability in Polipo before 1.0.4 allows remote attackers to cause a denial of service (crash) via a lon…

  • Unscored —
    CVE-2008-7190

    Unspecified vulnerability in Adium before 1.2 has unknown impact and attack vectors related to javascript: URLs, possib…

  • Unscored —
    CVE-2008-7189

    Multiple unspecified vulnerabilities in Local Media Browser before 0.1 have unknown impact and attack vectors related t…

  • Unscored —
    CVE-2008-7188 Public exploit

    ClipShare 2.6 does not properly restrict access to certain functionality, which allows remote attackers to change the p…

  • Unscored —
    CVE-2008-7186

    Coppermine Photo Gallery (CPG) 1.4.14 does not restrict access to update.php, which allows remote attackers to obtain s…

  • Unscored —
    CVE-2008-7187

    Coppermine Photo Gallery (CPG) 1.4.14 allows remote attackers to obtain sensitive information via a direct request to i…

  • Unscored —
    CVE-2009-2266

    OXID eShop 4.x before 4.1.4-21266, 3.x, and 2.x allows remote attackers to obtain sensitive information (session detail…