Skip to content
OpenAdvisories

Archive

28 September 2009

Vulnerabilities first published on this day (UTC), newest first.

27 results · Feed

  • Unscored —

    Open Source Security Information Management (OSSIM) before 2.1.2 allows remote attackers to bypass authentication, and …

  • Unscored —
    CVE-2009-3436 Public exploit

    Multiple SQL injection vulnerabilities in forum.asp in MaxWebPortal allow remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2009-3443 Public exploit

    SQL injection vulnerability in the Fastball (com_fastball) component 1.1.0 through 1.2 for Joomla! allows remote attack…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the variable editor in the Devel module 5.x before 5.x-1.2 and 6.x before 6…

  • Unscored —

    The Meta tags (aka Nodewords) module before 6.x-1.1 for Drupal does not properly follow permissions during assignment o…

  • Unscored —
    CVE-2009-3446 Public exploit

    SQL injection vulnerability in the MyRemote Video Gallery (com_mytube) component 1.0 Beta for Joomla! allows remote att…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the live preview feature in the Markdown Preview module 6.x for Drupal allo…

  • Unscored —
    CVE-2009-3439 Public exploit

    Multiple SQL injection vulnerabilities in Open Source Security Information Management (OSSIM) before 2.1.2 allow remote…

  • Unscored —
    CVE-2009-3438 Public exploit

    SQL injection vulnerability in the JoomlaFacebook (com_facebook) component for Joomla! allows remote attackers to execu…

  • Unscored —
    CVE-2009-3434 Public exploit

    SQL injection vulnerability in the Tupinambis (com_tupinambis) component 1.0 for Mambo and Joomla! allows remote attack…

  • Unscored —

    Unspecified vulnerability in Code-Crafters Ability Mail Server before 2.70 allows remote attackers to cause a denial of…

  • Unscored —
    CVE-2009-3444 Public exploit

    Cross-site scripting (XSS) vulnerability in email.php in e107 0.7.16 and earlier allows remote attackers to inject arbi…

  • Unscored —
    CVE-2009-3440 Public exploit

    Cross-site scripting (XSS) vulnerability in Open Source Security Information Management (OSSIM) before 2.1.2 allows rem…

  • Unscored —

    Unspecified vulnerability in clsetup in the configuration utility in Sun Solaris Cluster 3.2 allows local users to gain…

  • Unscored —

    Unspecified vulnerability in xscreensaver in Sun Solaris 10, and OpenSolaris before snv_112, when Xorg or Xnewt is used…

  • Unscored —

    Unspecified vulnerability in Cisco IOS 12.2 through 12.4, when the Cisco Unified Border Element feature is enabled, all…

  • Unscored —

    Buffer overflow in the login implementation in the Extension Mobility feature in the Unified Communications Manager Exp…

  • Unscored —

    Cisco IOS 12.0 through 12.4, when IP-based tunnels and the Cisco Express Forwarding feature are enabled, allows remote …

  • Unscored —

    The Object Groups for Access Control Lists (ACLs) feature in Cisco IOS 12.2XNB, 12.2XNC, 12.2XND, 12.4MD, 12.4T, 12.4XZ…

  • Unscored —

    Unspecified vulnerability in Cisco IOS 12.2 through 12.4 allows remote attackers to cause a denial of service (device r…

  • Unscored —

    Cisco IOS 12.0 through 12.4, when IP-based tunnels and the Cisco Express Forwarding feature are enabled, allows remote …

  • Unscored —

    Unspecified vulnerability in Cisco IOS 12.2 and 12.4, when SSLVPN sessions, SSH sessions, or IKE encrypted nonces are e…

  • Unscored —

    Race condition in the Firewall Authentication Proxy feature in Cisco IOS 12.0 through 12.4 allows remote attackers to b…

  • Unscored —

    Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 5.x before 5.1(3g), 6.x before 6.1(4), 7.0.x befo…

  • Unscored —

    Unspecified vulnerability in Cisco IOS 12.2XNA, 12.2XNB, 12.2XNC, 12.2XND, 12.4T, 12.4XZ, and 12.4YA, when Zone-Based P…

  • Unscored —

    Unspecified vulnerability in Cisco IOS 12.2 through 12.4, when certificate-based authentication is enabled for IKE, all…

  • Unscored —

    Unspecified vulnerability in Cisco IOS 12.2XNA, 12.2XNB, 12.2XNC, 12.2XND, 12.4MD, 12.4T, 12.4XZ, and 12.4YA allows rem…