Skip to content
OpenAdvisories

Archive

26 October 2009

Vulnerabilities first published on this day (UTC), newest first.

← September 2009 2009 / October /26 November 2009 →
  1. 121
  2. 216
  3. 3 
  4. 4 
  5. 56
  6. 610
  7. 74
  8. 813
  9. 917
  10. 10 
  11. 1112
  12. 12 
  13. 1314
  14. 1429
  15. 153
  16. 1623
  17. 17 
  18. 18 
  19. 1931
  20. 206
  21. 216
  22. 2262
  23. 237
  24. 24 
  25. 25 
  26. 2615
  27. 2715
  28. 2814
  29. 2918
  30. 3010
  31. 31 
All Critical High Medium Low Exploited only Public exploit

15 results · Feed

  • Unscored —
    CVE-2009-3782

    Unspecified vulnerability in Userpoints 6.x before 6.x-1.1, a module for Drupal, allows remote authenticated users with…

    Web / CMS
  • Unscored —
    CVE-2009-3785

    Multiple cross-site request forgery (CSRF) vulnerabilities in Simplenews Statistics 6.x before 6.x-2.0, a module for Dr…

    Web / CMS
  • Unscored —
    CVE-2009-3780

    Cross-site scripting (XSS) vulnerability in Abuse 5.x before 5.x-2.1 and 6.x before 6.x-1.1-alpha1, a module for Drupal…

    Web / CMS
  • Unscored —
    CVE-2009-3787 Public exploit

    files.php in Vivvo CMS 4.1.5.1 allows remote attackers to conduct directory traversal attacks and read arbitrary files …

  • Unscored —
    CVE-2009-3790

    Heap-based buffer overflow in FormMax (formerly AcroForm) evaluation 3.5 allows remote attackers to cause a denial of s…

  • Unscored —
    CVE-2009-3778

    SQL injection vulnerability in Moodle Course List 6.x before 6.x-1.2, a module for Drupal, allows remote attackers to e…

    Web / CMS
  • Unscored —
    CVE-2009-3783

    Cross-site scripting (XSS) vulnerability in Simplenews Statistics 6.x before 6.x-2.0, a module for Drupal, allows remot…

    Web / CMS
  • Unscored —
    CVE-2009-3789 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in OpenDocMan 1.2.5 allow remote attackers to inject arbitrary web …

  • Unscored —
    CVE-2009-3786

    Cross-site scripting (XSS) vulnerability in Organic Groups (OG) Vocabulary 5.x before 5.x-1.1 and 6.x before 6.x-1.1, a…

    Web / CMS
  • Unscored —
    CVE-2009-3784

    Open redirect vulnerability in Simplenews Statistics 6.x before 6.x-2.0, a module for Drupal, allows remote attackers t…

    Web / CMS
  • Unscored —
    CVE-2009-3781

    The filefield_file_download function in FileField 6.x-3.1, a module for Drupal, does not properly check node-access per…

    Web / CMS
  • Unscored —
    CVE-2009-3788

    SQL injection vulnerability in index.php in OpenDocMan 1.2.5 allows remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2009-3779

    Cross-site scripting (XSS) vulnerability in vCard 5.x before 5.x-1.4 and 6.x before 6.x-1.3, a module for Drupal, allow…

    Web / CMS
  • Unscored —
    CVE-2009-3625 Public exploit

    Directory traversal vulnerability in www/index.php in Sahana 0.6.2.2 allows remote attackers to include and execute arb…

  • Unscored —
    CVE-2009-3611

    common/snapshots.py in Back In Time (aka backintime) 0.9.26 changes certain permissions to 0777 before deleting the fil…

    backintime Debian