Skip to content
OpenAdvisories

Archive

14 September 2009

Vulnerabilities first published on this day (UTC), newest first.

← August 2009 2009 / September /14 October 2009 →
  1. 126
  2. 220
  3. 316
  4. 412
  5. 5 
  6. 6 
  7. 7 
  8. 864
  9. 924
  10. 1055
  11. 1131
  12. 12 
  13. 136
  14. 1430
  15. 1524
  16. 1626
  17. 1713
  18. 1839
  19. 19 
  20. 20 
  21. 2116
  22. 2211
  23. 2329
  24. 2439
  25. 2515
  26. 26 
  27. 27 
  28. 2827
  29. 2924
  30. 3027
All Critical High Medium Low Exploited only Public exploit

30 results · Feed

  • Unscored —
    CVE-2009-3183

    Heap-based buffer overflow in w in Sun Solaris 8 through 10, and OpenSolaris before snv_124, allows local users to gain…

  • Unscored —
    CVE-2009-2814

    Cross-site scripting (XSS) vulnerability in the Wiki Server in Apple Mac OS X 10.5.8 allows remote attackers to inject …

  • Unscored —
    CVE-2009-2812

    Launch Services in Apple Mac OS X 10.5.8 does not properly recognize an unsafe Uniform Type Identifier (UTI) in an expo…

  • Unscored —
    CVE-2009-2807

    Heap-based buffer overflow in the USB backend in CUPS in Apple Mac OS X 10.5.8 allows local users to gain privileges vi…

  • Unscored —
    CVE-2009-2813

    Samba 3.4 before 3.4.2, 3.3 before 3.3.8, 3.2 before 3.2.15, and 3.0.12 through 3.0.36, as used in the SMB subsystem in…

    samba Debian
  • Unscored —
    CVE-2009-2947

    Cross-site scripting (XSS) vulnerability in Xapian Omega before 1.0.16 allows remote attackers to inject arbitrary web …

    xapian-omega Debian
  • Unscored —
    CVE-2009-2803

    CarbonCore in Apple Mac OS X 10.4.11 and 10.5.8 allows attackers to execute arbitrary code or cause a denial of service…

  • Unscored —
    CVE-2009-2805

    Integer overflow in CoreGraphics in Apple Mac OS X 10.4.11 and 10.5.8 allows remote attackers to execute arbitrary code…

  • Unscored —
    CVE-2009-2811

    Incomplete blacklist vulnerability in Launch Services in Apple Mac OS X 10.5.8 allows user-assisted remote attackers to…

  • Unscored —
    CVE-2009-2809

    ImageIO in Apple Mac OS X 10.4.11 and 10.5.8 allows remote attackers to execute arbitrary code or cause a denial of ser…

  • Unscored —
    CVE-2009-2804

    Integer overflow in ColorSync in Apple Mac OS X 10.4.11 and 10.5.8, and Safari before 4.0.4 on Windows, allows remote a…

  • Unscored —
    CVE-2008-7226 Public exploit

    SQL injection vulnerability in index.php in the Recipes module 1.3, 1.4, and possibly other versions for PHP-Nuke allow…

  • Unscored —
    CVE-2008-7233

    Unspecified vulnerability in the E-Business Application client, as used in Oracle Application Server 1.1.8.26 and E-Bus…

  • Unscored —
    CVE-2008-7221

    Cross-site request forgery (CSRF) vulnerability in RunCMS 1.6.1 allows remote attackers to hijack the authentication of…

  • Unscored —
    CVE-2008-7223

    Multiple cross-site scripting (XSS) vulnerabilities in LinPHA before 1.3.3 allow remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2008-7230

    Unspecified vulnerability in Small Footprint CIM Broker (SFCB) before 1.2.5 has unknown impact and attack vectors.

  • Unscored —
    CVE-2008-7224

    Buffer overflow in entity_cache in ELinks before 0.11.4rc0 allows remote attackers to cause a denial of service (crash)…

    elinks Debian
  • Unscored —
    CVE-2008-7231

    Cross-site scripting (XSS) vulnerability in Meridio Document and Records Management before 4.3 SR1 allows remote authen…

  • Unscored —
    CVE-2008-7232 Public exploit EPSS 25%

    Buffer overflow in the report function in xtacacsd 4.1.2 and earlier allows remote attackers to execute arbitrary code …

  • Unscored —
    CVE-2008-7229

    GreenSQL Firewall (greensql-fw) before 0.9.2 allows remote attackers to bypass SQL injection protection via a crafted s…

  • Unscored —
    CVE-2008-7228

    Multiple format string vulnerabilities in White_Dune before 0.29beta851 have unspecified impact and attack vectors, a d…

  • Unscored —
    CVE-2008-7238

    Multiple unspecified vulnerabilities in Oracle E-Business Suite 12.0.3 allow (1) local users to affect confidentiality …

  • Unscored —
    CVE-2008-7234

    Unspecified vulnerability in the Oracle BPEL Worklist Application component in Oracle Application Server 10.1.2.2 and 1…

  • Unscored —
    CVE-2008-7236

    Unspecified vulnerability in the Oracle JDeveloper component in Oracle Application Server 10.1.2.2 and 10.1.3.1 allows …

  • Unscored —
    CVE-2008-7222 Public exploit

    Cross-site scripting (XSS) vulnerability in system/admin.php in RunCMS 1.6.1 allows remote attackers to inject arbitrar…

  • Unscored —
    CVE-2008-7237

    Unspecified vulnerability in the Oracle Internet Directory component in Oracle Application Server 9.0.4.3 and 10.1.2.2 …

  • Unscored —
    CVE-2008-7225

    Heap-based buffer overflow in Foxit Remote Access Server (aka WAC Server) 2.0 Build 3503 allows remote attackers to cau…

  • Unscored —
    CVE-2008-7239

    Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10.2 allow remote attackers to affect confidential…

  • Unscored —
    CVE-2008-7227

    PartialBufferOutputStream2 in GeoServer before 1.6.1 and 1.7.0-beta1 attempts to flush buffer contents even when it is …

  • Unscored —
    CVE-2008-7235

    Unspecified vulnerability in the Oracle Forms component in Oracle Application Server 10.1.2.2 and E-Business Suite 12.0…