Skip to content
OpenAdvisories

Archive

17 September 2009

Vulnerabilities first published on this day (UTC), newest first.

13 results · Feed

  • Unscored —

    Cross-site request forgery (CSRF) vulnerability in PunBB before 1.2.17 allows remote attackers to hijack the authentica…

  • Unscored —
    CVE-2008-7242 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in MODx CMS 0.9.6.1 and 0.9.6.1p1 allo remote attackers to inject a…

  • Unscored —
    CVE-2008-7240 Public exploit

    Directory traversal vulnerability in include/unverified.inc.php in Linux Web Shop (LWS) php User Base 1.3beta allows re…

  • Unscored —

    Cross-site request forgery (CSRF) vulnerability in page 34 in MODx CMS 0.9.6.1 and 0.9.6.1p1 allows remote attackers to…

  • Unscored —

    The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, 8.2 before 8.2.14, 8.1 before 8.1.18, 8.0 b…

  • Unscored —

    pam-auth-update for PAM, as used in Ubuntu 8.10 and 9.4, and Debian GNU/Linux, does not properly handle an "empty selec…

  • Unscored —

    Multiple stack-based buffer overflows in the Sieve plugin in Dovecot 1.0 before 1.0.4 and 1.1 before 1.1.7, as derived …

  • Unscored —

    The core server component in PostgreSQL 8.3 before 8.3.8 and 8.2 before 8.2.14, when using LDAP authentication with ano…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Horde Application Framework 3.2 before 3.2.5 and 3.3 before 3.3.…

  • Unscored —

    The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, and 8.2 before 8.2.14 allows remote authent…

  • Unscored —

    The form library in Horde Application Framework 3.2 before 3.2.5 and 3.3 before 3.3.5; Groupware 1.1 before 1.1.6 and 1…

  • Unscored —
    CVE-2009-3233 Public exploit

    changetrack 4.3 allows local users to execute arbitrary commands via CRLF sequences and shell metacharacters in a filen…

  • Unscored —
    CVE-2009-3234 Public exploit

    Buffer overflow in the perf_copy_attr function in kernel/perf_counter.c in the Linux kernel 2.6.31-rc1 allows local use…