Skip to content
OpenAdvisories

Archive

9 October 2009

Vulnerabilities first published on this day (UTC), newest first.

← September 2009 2009 / October /9 November 2009 →
  1. 121
  2. 216
  3. 3 
  4. 4 
  5. 56
  6. 610
  7. 74
  8. 813
  9. 917
  10. 10 
  11. 1112
  12. 12 
  13. 1314
  14. 1429
  15. 153
  16. 1623
  17. 17 
  18. 18 
  19. 1931
  20. 206
  21. 216
  22. 2262
  23. 237
  24. 24 
  25. 25 
  26. 2615
  27. 2715
  28. 2814
  29. 2918
  30. 3010
  31. 31 
All Critical High Medium Low Exploited only Public exploit

17 results · Feed

  • Unscored —
    CVE-2009-3652

    Cross-site scripting (XSS) vulnerability in Organic Groups (OG) 5.x-7.x before 5.x-7.4, 5.x-8.x before 5.x-8.1, and 6.x…

    Web / CMS
  • Unscored —
    CVE-2009-3647 Public exploit

    Cross-site scripting (XSS) vulnerability in emaullinks.php in YABSoft Mega File Hosting Script (aka MFH or MFHS) 1.2 al…

  • Unscored —
    CVE-2009-3643 Public exploit

    Dxmsoft XM Easy Personal FTP Server 5.8.0 allows remote attackers to cause a denial of service via a long argument to t…

  • Unscored —
    CVE-2009-3646 Public exploit

    InterVations NaviCOPA Web Server 3.01 allows remote attackers to obtain the source code for a web page via an HTTP requ…

  • Unscored —
    CVE-2009-3654

    Unspecified vulnerability in Boost before 6.x-1.03, a module for Drupal, allows remote attackers to create new webroot …

    Web / CMS
  • Unscored —
    CVE-2009-3655

    Rhino Software Serv-U 7.0.0.1 through 8.2.0.3 allows remote attackers to cause a denial of service (server crash) via u…

  • Unscored —
    CVE-2009-3644 Public exploit

    SQL injection vulnerability in the Soundset (com_soundset) component 1.0 for Joomla! allows remote attackers to execute…

  • Unscored —
    CVE-2009-3656

    Cross-site request forgery (CSRF) vulnerability in Shared Sign-On 5.x and 6.x, a module for Drupal, allows remote attac…

    Web / CMS
  • Unscored —
    CVE-2009-3645 Public exploit

    SQL injection vulnerability in the JoomlaCache CB Resume Builder (com_cbresumebuilder) component for Joomla! allows rem…

  • Unscored —
    CVE-2009-3651

    Cross-site scripting (XSS) vulnerability in the "Monitor browsers' feature in Browscap before 5.x-1.1 and 6.x-1.1, a mo…

    Web / CMS
  • Unscored —
    CVE-2009-3649

    Cross-site scripting (XSS) vulnerability in forums/index.php in Power Bulletin Board (PBBoard) 2.0.2 and possibly earli…

  • Unscored —
    CVE-2009-3657

    Session fixation vulnerability in Shared Sign-On 5.x and 6.x, a module for Drupal, allows remote attackers to hijack we…

    Web / CMS
  • Unscored —
    CVE-2009-3653

    Cross-site scripting (XSS) vulnerability in the additional links interface in XML Sitemap 5.x-1.6, a module for Drupal,…

    Web / CMS
  • Unscored —
    CVE-2009-3658 Public exploit

    Use-after-free vulnerability in the Sb.SuperBuddy.1 ActiveX control (sb.dll) in America Online (AOL) 9.5.0.1 allows rem…

  • Unscored —
    CVE-2009-3650

    Cross-site scripting (XSS) vulnerability in Dex 5.x-1.0 and earlier and 6.x-1.0-rc1 and earlier, a module for Drupal, a…

    Web / CMS
  • Unscored —
    CVE-2009-3648

    Cross-site scripting (XSS) vulnerability in Service Links 6.x-1.0, a module for Drupal, allows remote authenticated use…

    Web / CMS
  • Unscored —
    CVE-2009-3642 Public exploit

    Multiple SQL injection vulnerabilities in the Call Logging feature in FrontRange HEAT 8.01 allow remote attackers to ex…