Skip to content
OpenAdvisories

Archive

22 October 2009

Vulnerabilities first published on this day (UTC), newest first.

18 results · Clear filters · Feed

  • Unscored —
    CVE-2009-1979 Public exploit EPSS 76%

    Unspecified vulnerability in the Network Authentication component in Oracle Database 10.1.0.5 and 10.2.0.4 allows remot…

  • Unscored —
    CVE-2009-3752 Public exploit

    SQL injection vulnerability in home.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands via the …

  • Unscored —
    CVE-2009-3747 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in TBmnetCMS 1.0 allows remote attackers to inject arbitrary web …

  • Unscored —
    CVE-2009-3749 Public exploit

    The Web Administrator service (STEMWADM.EXE) in Websense Personal Email Manager 7.1 before Hotfix 4 and Email Security …

  • Unscored —
    CVE-2009-3758 Public exploit

    SQL injection vulnerability in login.php in sample code in the XenServer Resource Kit in Citrix XenCenterWeb allows rem…

  • Unscored —
    CVE-2009-3753 Public exploit

    Unrestricted file upload vulnerability in Opial 1.0 allows remote attackers to execute arbitrary code by uploading a fi…

  • Unscored —
    CVE-2009-3748 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the Web Administrator in Websense Personal Email Manager 7.1 bef…

  • Unscored —
    CVE-2009-3759 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in sample code in the XenServer Resource Kit in Citrix XenCe…

  • Unscored —
    CVE-2009-3755 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in phpBMS 0.96 allow remote attackers to inject arbitrary web scrip…

  • Unscored —
    CVE-2009-3750 Public exploit

    SQL injection vulnerability in read.php in ToyLog 0.1 allows remote attackers to execute arbitrary SQL commands via the…

  • Unscored —
    CVE-2009-3754 Public exploit

    Multiple SQL injection vulnerabilities in phpBMS 0.96 allow remote attackers to execute arbitrary SQL commands via the …

  • Unscored —
    CVE-2009-3760 Public exploit

    Static code injection vulnerability in config/writeconfig.php in the sample code in the XenServer Resource Kit in Citri…

  • Unscored —
    CVE-2009-3756 Public exploit

    phpBMS 0.96 allows remote attackers to obtain sensitive information via a direct request to (1) footer.php, (2) header.…

  • Unscored —
    CVE-2009-3757 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in sample code in the XenServer Resource Kit in Citrix XenCenterWeb…

  • Unscored —
    CVE-2009-3751 Public exploit

    Cross-site scripting (XSS) vulnerability in home.php in Opial 1.0 allows remote attackers to inject arbitrary web scrip…

  • Unscored —
    CVE-2009-1479 Public exploit

    Directory traversal vulnerability in client/desktop/default.htm in Boxalino before 09.05.25-0421 allows remote attacker…

  • Unscored —
    CVE-2009-3744 Public exploit

    rep_serv.exe 6.3.1.3 in the server in EMC RepliStor allows remote attackers to cause a denial of service via a crafted …

  • Unscored —
    CVE-2009-3621 Public exploit

    net/unix/af_unix.c in the Linux kernel 2.6.31.4 and earlier allows local users to cause a denial of service (system han…