Skip to content
OpenAdvisories

Archive

29 September 2009

Vulnerabilities first published on this day (UTC), newest first.

← August 2009 2009 / September /29 October 2009 →
  1. 126
  2. 220
  3. 316
  4. 412
  5. 5 
  6. 6 
  7. 7 
  8. 864
  9. 924
  10. 1055
  11. 1131
  12. 12 
  13. 136
  14. 1430
  15. 1524
  16. 1626
  17. 1713
  18. 1839
  19. 19 
  20. 20 
  21. 2116
  22. 2211
  23. 2329
  24. 2439
  25. 2515
  26. 26 
  27. 27 
  28. 2827
  29. 2924
  30. 3027
All Critical High Medium Low Exploited only Public exploit

24 results · Feed

  • Unscored —
    CVE-2009-3476

    Buffer overflow in OpenSAML before 1.1.3 as used in Internet2 Shibboleth Service Provider software 1.3.x before 1.3.4, …

    shibboleth-sp xmltooling opensaml Debian
  • Unscored —
    CVE-2009-3478

    Argument injection vulnerability in (1) src/content/js/connection/sftp.js and (2) src/content/js/connection/controlSock…

  • Unscored —
    CVE-2009-3475

    Internet2 Shibboleth Service Provider software 1.3.x before 1.3.3 and 2.x before 2.2.1, when using PKIX trust validatio…

    shibboleth-sp xmltooling opensaml Debian
  • Unscored —
    CVE-2009-3474

    OpenSAML 2.x before 2.2.1 and XMLTooling 1.x before 1.2.1, as used by Internet2 Shibboleth Service Provider 2.x before …

    xmltooling shibboleth-sp opensaml Debian
  • Unscored —
    CVE-2009-3477

    The Blackberry Browser in RIM BlackBerry Device Software 4.5.0 before 4.5.0.173, 4.6.0 before 4.6.0.303, 4.6.1 before 4…

  • Unscored —
    CVE-2009-3473

    IBM DB2 9.1 before FP8 does not require the SETSESSIONUSER privilege for the SET SESSION AUTHORIZATION statement, which…

  • Unscored —
    CVE-2009-3471

    IBM DB2 8 before FP18, 9.1 before FP8, 9.5 before FP4, and 9.7 before FP2 does not perform the expected drops of certai…

  • Unscored —
    CVE-2009-3470

    IBM Informix Dynamic Server (IDS) 10.00 before 10.00.xC11, 11.10 before 11.10.xC4, and 11.50 before 11.50.xC5 allows re…

  • Unscored —
    CVE-2009-3472

    IBM DB2 8 before FP18, 9.1 before FP8, and 9.5 before FP4 allows remote authenticated users to bypass intended access r…

  • Unscored —
    CVE-2009-3468

    Multiple unspecified vulnerabilities in Common Desktop Environment (CDE) in Sun Solaris 10, when Trusted Extensions is …

  • Unscored —
    CVE-2009-3469 Public exploit

    Cross-site scripting (XSS) vulnerability in profiles/html/simpleSearch.do in IBM Lotus Connections 2.0.1 allows remote …

  • Unscored —
    CVE-2009-2905

    Heap-based buffer overflow in textbox.c in newt 0.51.5, 0.51.6, and 0.52.2 allows local users to cause a denial of serv…

    newt perl-Newt Debian Azure Linux
  • Unscored —
    CVE-2009-3456

    Google Chrome, possibly 3.0.195.21 and earlier, does not properly handle a '\0' character in a domain name in the subje…

  • Unscored —
    CVE-2009-3455

    Apple Safari, possibly before 4.0.3, on Mac OS X does not properly handle a '\0' character in a domain name in the subj…

  • Unscored —
    CVE-2009-3457 Public exploit

    Cisco ACE XML Gateway (AXG) and ACE Web Application Firewall (WAF) before 6.1 allow remote attackers to obtain sensitiv…

  • Unscored —
    CVE-2009-3453

    Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Quickr 8.1.0 services for WebSphere Portal allow remot…

  • Unscored —
    CVE-2009-2683

    Unspecified vulnerability in the Sender module in HP Remote Graphics Software (RGS) 5.1.3 through 5.2.6 allows remote a…

  • Unscored —
    CVE-2009-2681

    Unspecified vulnerability in HP ProCurve Identity Driven Manager (IDM) A.02.x through A.02.03 and A.03.x through A.03.0…

  • Unscored —
    CVE-2009-3451

    Directory traversal vulnerability in WebCoreModule.ashx in RADactive I-Load before 2008.2.5.0 allows remote attackers t…

  • Unscored —
    CVE-2009-3447

    Unrestricted file upload vulnerability in RADactive I-Load before 2008.2.5.0 allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2009-3448

    npvmgr.exe in BakBone NetVault Backup 8.22 Build 29 allows remote attackers to cause a denial of service (daemon crash)…

  • Unscored —
    CVE-2009-3452

    WebCoreModule.ashx in RADactive I-Load before 2008.2.5.0 allows remote attackers to obtain sensitive information via un…

  • Unscored —
    CVE-2009-3449 Public exploit

    MP3 Collector 2.3 allows remote attackers to cause a denial of service (application crash) via a long URL in a .m3u pla…

  • Unscored —
    CVE-2009-3450

    Multiple cross-site scripting (XSS) vulnerabilities in WebCoreModule.ashx in RADactive I-Load before 2008.2.5.0 allow r…