Skip to content
OpenAdvisories

Archive

18 September 2009

Vulnerabilities first published on this day (UTC), newest first.

20 results · Clear filters · Feed

  • Unscored —
    CVE-2008-7244 Public exploit

    Mozilla Firefox 3.0.1 and earlier allows remote attackers to cause a denial of service (browser hang) by calling the wi…

  • Unscored —
    CVE-2008-7245 Public exploit

    Opera 9.52 and earlier allows remote attackers to cause a denial of service (unusable browser) by calling the window.pr…

  • Unscored —
    CVE-2008-7246 Public exploit

    Google Chrome 0.2.149.29 and earlier allows remote attackers to cause a denial of service (unusable browser) by calling…

  • Unscored —
    CVE-2009-3270 Public exploit EPSS 28%

    Microsoft Internet Explorer 7 through 7.0.6000.16711 allows remote attackers to cause a denial of service (unusable bro…

  • Unscored —
    CVE-2009-2793 Public exploit

    The kernel in NetBSD, probably 5.0.1 and earlier, on x86 platforms does not properly handle a pre-commit failure of the…

  • Unscored —
    CVE-2009-3260 Public exploit

    Cross-site scripting (XSS) vulnerability in LiveStreet 0.2 allows remote attackers to inject arbitrary web script or HT…

  • Unscored —
    CVE-2009-3254 Public exploit

    Multiple stack-based buffer overflows in Ultimate Player 1.56 beta allow remote attackers to execute arbitrary code via…

  • Unscored —
    CVE-2009-3248 Public exploit

    Cross-site request forgery (CSRF) vulnerability in the RSS module in vtiger CRM 5.0.4 allows remote attackers to hijack…

  • Unscored —
    CVE-2009-3249 Public exploit

    Multiple directory traversal vulnerabilities in vtiger CRM 5.0.4 allow remote attackers to include and execute arbitrar…

  • Unscored —
    CVE-2009-3253 Public exploit

    Stack-based buffer overflow in TriceraSoft Swift Ultralite 1.032 allows remote attackers to cause a denial of service (…

  • Unscored —
    CVE-2009-3247 Public exploit

    Cross-site scripting (XSS) vulnerability in the Activities module in vtiger CRM 5.0.4 allows remote attackers to inject…

  • Unscored —
    CVE-2009-3252 Public exploit

    Multiple SQL injection vulnerabilities in news.php in Rock Band CMS 0.10 allow remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2009-3246 Public exploit

    SQL injection vulnerability in spnews.php in MyBuxScript PTC-BUX allows remote attackers to execute arbitrary SQL comma…

  • Unscored —
    CVE-2009-3250 Public exploit EPSS 11%

    The saveForwardAttachments procedure in the Compose Mail functionality in vtiger CRM 5.0.4 allows remote authenticated …

  • Unscored —
    CVE-2009-3256 Public exploit

    Cross-site scripting (XSS) vulnerability in include/ajax/blogInfo.php in LiveStreet 0.2 allows remote attackers to inje…

  • Unscored —
    CVE-2009-3243 Public exploit

    Unspecified vulnerability in the TLS dissector in Wireshark 1.2.0 and 1.2.1, when running on Windows, allows remote att…

  • Unscored —
    CVE-2009-3242 Public exploit

    Unspecified vulnerability in packet.c in the GSM A RR dissector in Wireshark 1.2.0 and 1.2.1 allows remote attackers to…

  • Unscored —
    CVE-2009-3244 Public exploit EPSS 20%

    Heap-based buffer overflow in the SwDir.dll ActiveX control in Adobe Shockwave Player 11.5.1.601 and earlier allows rem…

  • Unscored —
    CVE-2009-3241 Public exploit

    Unspecified vulnerability in the OpcUa (OPC UA) dissector in Wireshark 0.99.6 through 1.0.8 and 1.2.0 through 1.2.1 all…

  • Unscored —
    CVE-2009-2937 Public exploit

    Cross-site scripting (XSS) vulnerability in Planet 2.0 and Planet Venus allows remote attackers to inject arbitrary web…