Skip to content
OpenAdvisories

Archive

25 September 2009

Vulnerabilities first published on this day (UTC), newest first.

15 results · Feed

  • Unscored —
    CVE-2009-3431 Public exploit EPSS 22%

    Stack consumption vulnerability in Adobe Reader and Acrobat 9.1.3, 9.1.2, 9.1.1, and earlier 9.x versions; 8.1.6 and ea…

  • Unscored —
    CVE-2009-3417 Public exploit

    SQL injection vulnerability in the IDoBlog (com_idoblog) component 1.1 build 30 for Joomla! allows remote attackers to …

  • Unscored —
    CVE-2009-3430 Public exploit

    SQL injection vulnerability in login.php in Allomani Mobile 2.5 allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2009-3419 Public exploit

    SQL injection vulnerability in index.php in the Publisher module 2.0 for Miniweb allows remote attackers to execute arb…

  • Unscored —
    CVE-2009-3421 Public exploit

    login.php in Zenas PaoBacheca Guestbook 2.1, when register_globals is enabled, allows remote attackers to bypass authen…

  • Unscored —
    CVE-2009-3425 Public exploit

    Directory traversal vulnerability in includes/inc.thcms_admin_dirtree.php in MaxCMS 3.11.20b allows remote attackers to…

  • Unscored —
    CVE-2009-3418 Public exploit

    Multiple SQL injection vulnerabilities in Plume CMS 1.2.3 allow (1) remote authenticated users to execute arbitrary SQL…

  • Unscored —
    CVE-2009-3428 Public exploit

    Stack-based buffer overflow in Easy Music Player 1.0.0.2 allows remote attackers to execute arbitrary code via a crafte…

  • Unscored —
    CVE-2009-3423 Public exploit

    login.php in Zenas PaoLink 1.0, when register_globals is enabled, allows remote attackers to bypass authentication and …

  • Unscored —
    CVE-2009-3420 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in index.php in the Publisher module 2.0 for Miniweb allow remote a…

  • Unscored —
    CVE-2009-3429 Public exploit EPSS 35%

    Stack-based buffer overflow in Pirate Radio Destiny Media Player 1.61 allows remote attackers to execute arbitrary code…

  • Unscored —
    CVE-2009-3426 Public exploit

    PHP remote file inclusion vulnerability in includes/file_manager/special.php in MaxCMS 3.11.20b allows remote attackers…

  • Unscored —
    CVE-2009-3424 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in MaxCMS 3.11.20b, when register_globals is enabled, allow remote a…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Kayako SupportSuite 3.50.06 allows remote attackers to inject arbitrary web…

  • Unscored —
    CVE-2009-3422 Public exploit

    login.php in Zenas PaoLiber 1.1, when register_globals is enabled, allows remote attackers to bypass authentication and…