Skip to content
OpenAdvisories

Archive

22 September 2009

Vulnerabilities first published on this day (UTC), newest first.

← August 2009 2009 / September /22 October 2009 →
  1. 126
  2. 220
  3. 316
  4. 412
  5. 5 
  6. 6 
  7. 7 
  8. 864
  9. 924
  10. 1055
  11. 1131
  12. 12 
  13. 136
  14. 1430
  15. 1524
  16. 1626
  17. 1713
  18. 1839
  19. 19 
  20. 20 
  21. 2116
  22. 2211
  23. 2329
  24. 2439
  25. 2515
  26. 26 
  27. 27 
  28. 2827
  29. 2924
  30. 3027
All Critical High Medium Low Exploited only Public exploit

11 results · Feed

  • Unscored —
    CVE-2009-3291

    The php_openssl_apply_verification_policy function in PHP before 5.2.11 does not properly perform certificate validatio…

  • Unscored —
    CVE-2009-3294

    The popen API function in TSRM/tsrm_win32.c in PHP before 5.2.11 and 5.3.x before 5.3.1, when running on certain Window…

  • Unscored —
    CVE-2009-3289

    The g_file_copy function in glib 2.0 sets the permissions of a target file to the permissions of a symbolic link (777),…

    glib2.0 Debian
  • Unscored —
    CVE-2009-3283

    Cross-site scripting (XSS) vulnerability in phpspot PHP BBS, PHP Image Capture BBS, PHP & CSS BBS, PHP BBS CE, PHP_RSS_…

  • High —
    CVE-2009-3287

    High severity vulnerability that affects thin

    lib/thin/connection.rb in Thin web server before 1.2.4 relies on the X-Forwarded-For header to determine the IP address of the client, which allows remote attackers to spoof the IP address and hide activities via a modified X-Forwarded-For header.

    thin thin Debian RubyGems
  • Unscored —
    CVE-2009-3288

    The sg_build_indirect function in drivers/scsi/sg.c in Linux kernel 2.6.28-rc1 through 2.6.31-rc8 uses an incorrect var…

  • Unscored —
    CVE-2009-3292

    Unspecified vulnerability in PHP before 5.2.11, and 5.3.x before 5.3.1, has unknown impact and attack vectors related t…

  • Unscored —
    CVE-2009-3286

    NFSv4 in the Linux kernel 2.6.18, and possibly other versions, does not properly clean up an inode when an O_EXCL creat…

  • Unscored —
    CVE-2009-3290

    The kvm_emulate_hypercall function in arch/x86/kvm/x86.c in KVM in the Linux kernel 2.6.25-rc1, and other versions befo…

  • Unscored —
    CVE-2009-3284

    Directory traversal vulnerability in phpspot PHP BBS, PHP Image Capture BBS, PHP & CSS BBS, PHP BBS CE, PHP_RSS_Builder…

  • Unscored —
    CVE-2009-3293

    Unspecified vulnerability in the imagecolortransparent function in PHP before 5.2.11 has unknown impact and attack vect…