Skip to content
OpenAdvisories

Archive

10 September 2009

Vulnerabilities first published on this day (UTC), newest first.

55 results · Feed

  • Unscored —
    CVE-2009-3153 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in x10 MP3 Search engine 1.6.5 allow remote attackers to inject arb…

  • Unscored —
    CVE-2009-3151 Public exploit

    Directory traversal vulnerability in actions/downloadFile.php in Ultrize TimeSheet 1.2.2 allows remote attackers to rea…

  • Unscored —

    Unspecified vulnerability in the rriDecompress function in IBM WebSphere MQ 7.0.0.0, 7.0.0.1, and 7.0.0.2 allows remote…

  • Unscored —
    CVE-2009-3150 Public exploit

    SQL injection vulnerability in index.php in Multi Website 1.5 allows remote attackers to execute arbitrary SQL commands…

  • Unscored —

    Unspecified vulnerability in Fujitsu Interstage HTTP Server, as used in Interstage Application Server 5.0, 7.0, 7.0.1, …

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in OpenWebMail before 2.53 (Stable) allow remote attackers to injec…

  • Unscored —

    Multiple unspecified vulnerabilities in phpns before 2.1.1beta1 have unknown impact and attack vectors.

  • Unscored —

    Phoenix Contact FL IL 24 BK-PAC allows remote attackers to cause a denial of service (hang) via (1) unspecified manipul…

  • Unscored —

    Unspecified vulnerability in Fujitsu Interstage HTTP Server, as used in Interstage Application Server Enterprise Editio…

  • Unscored —

    Multiple unspecified vulnerabilities in G15Daemon before 1.9.4 have unknown impact and attack vectors.

  • Unscored —

    Double free vulnerability in Deliantra server engine before 2.4 has unknown impact and attack vectors.

  • Unscored —

    Unspecified vulnerability in metashell before 0.03 has unknown impact and attack vectors related to a "PATH execution s…

  • Unscored —

    Lantronix MSS485-T allows remote attackers to cause a denial of service (unstable performance and service loss) via cer…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the web management interface in the ZyXEL P-330W router allows remote attac…

  • Unscored —

    Multiple cross-site request forgery (CSRF) vulnerabilities in the web management interface in the ZyXEL P-330W router a…