Skip to content
OpenAdvisories

Archive

16 October 2009

Vulnerabilities first published on this day (UTC), newest first.

← September 2009 2009 / October /16 November 2009 →
  1. 121
  2. 216
  3. 3 
  4. 4 
  5. 56
  6. 610
  7. 74
  8. 813
  9. 917
  10. 10 
  11. 1112
  12. 12 
  13. 1314
  14. 1429
  15. 153
  16. 1623
  17. 17 
  18. 18 
  19. 1931
  20. 206
  21. 216
  22. 2262
  23. 237
  24. 24 
  25. 25 
  26. 2615
  27. 2715
  28. 2814
  29. 2918
  30. 3010
  31. 31 
All Critical High Medium Low Exploited only Public exploit

18 results · Clear filters · Feed

  • Unscored —
    CVE-2009-3704 Public exploit

    ZoIPer 2.22, and possibly other versions before 2.24 Library 5324, allows remote attackers to cause a denial of service…

  • Unscored —
    CVE-2009-3709 Public exploit

    Stack-based buffer overflow in the Meta Content Optimizer in Konae Technologies Alleycode HTML Editor 2.21 allows user-…

  • Unscored —
    CVE-2009-3707 Public exploit EPSS 11%

    VMware Authentication Daemon 1.0 in vmware-authd.exe in the VMware Authorization Service in VMware Workstation 7.0 befo…

  • Unscored —
    CVE-2009-3715 Public exploit

    Multiple SQL injection vulnerabilities in scr_login.php in MCshoutbox 1.1, when magic_quotes_gpc is disabled, allow rem…

  • Unscored —
    CVE-2009-3714 Public exploit

    Cross-site scripting (XSS) vulnerability in admin_login.php in MCshoutbox 1.1 allows remote attackers to inject arbitra…

  • Unscored —
    CVE-2009-3705 Public exploit

    PHP remote file inclusion vulnerability in debugger.php in Achievo before 1.4.0 allows remote attackers to execute arbi…

  • Unscored —
    CVE-2009-3713 Public exploit

    SQL injection vulnerability in fichero.php in MorcegoCMS 1.7.6 and earlier allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2009-3717 Public exploit

    Heap-based buffer overflow in LucVil PatPlayer 3.9 allows remote attackers to cause a denial of service (crash) or exec…

  • Unscored —
    CVE-2009-3712 Public exploit

    Multiple SQL injection vulnerabilities in Ebay Clone 2009 allow remote attackers to execute arbitrary SQL commands via …

  • Unscored —
    CVE-2009-3719 Public exploit

    Cross-site scripting (XSS) vulnerability in comment.asp in Battle Blog 1.25 and 1.30 build 2 allows remote attackers to…

  • Unscored —
    CVE-2009-3718 Public exploit

    SQL injection vulnerability in admin/authenticate.asp in Battle Blog 1.25 and 1.30 build 2 allows remote attackers to e…

  • Unscored —
    CVE-2009-3710 Public exploit

    RioRey RIOS 4.6.6 and 4.7.0 uses an undocumented, hard-coded username (dbadmin) and password (sq!us3r) for an SSH tunne…

  • Unscored —
    CVE-2009-3708 Public exploit

    Stack-based buffer overflow in the Meta Content Optimizer in Konae Technologies Alleycode HTML Editor 2.21 allows user-…

  • Unscored —
    CVE-2009-3716 Public exploit

    Unrestricted file upload vulnerability in admin.php in MCshoutbox 1.1 allows remote authenticated users to execute arbi…

  • Unscored —
    CVE-2009-3711 Public exploit EPSS 64%

    Stack-based buffer overflow in the h_handlepeer function in http.cpp in httpdx 1.4, and possibly 1.4.3, allows remote a…

  • Unscored —
    CVE-2009-3281 Public exploit

    The vmx86 kernel extension in VMware Fusion before 2.0.6 build 196839 does not use correct file permissions, which allo…

  • Unscored —
    CVE-2009-2733 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Achievo before 1.4.0 allow remote attackers to inject arbitrary …

  • Unscored —
    CVE-2009-2734 Public exploit

    SQL injection vulnerability in the get_employee function in classweekreport.inc in Achievo before 1.4.0 allows remote a…