Skip to content
OpenAdvisories

Archive

27 October 2009

Vulnerabilities first published on this day (UTC), newest first.

15 results · Feed

  • Unscored —
    CVE-2009-3806 Public exploit

    SQL injection vulnerability in feedback_js.php in DedeCMS 5.1 allows remote attackers to execute arbitrary SQL commands…

  • Unscored —

    SQL injection vulnerability in index.php in OpenDocMan 1.2.5 allows remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2009-3802 Public exploit

    Amiro.CMS 5.4.0.0 and earlier allows remote attackers to obtain sensitive information via an invalid loginname ("%%%") …

  • Unscored —
    CVE-2009-3809 Public exploit

    Acoustica MP3 Audio Mixer 1.0 and possibly 2.471 allows remote attackers to cause a denial of service (crash) via a lon…

  • Unscored —
    CVE-2009-3810 Public exploit

    Heap-based buffer overflow in Acoustica MP3 Audio Mixer 2.471 allows remote attackers to cause a denial of service (cra…

  • Unscored —
    CVE-2009-3808 Public exploit

    MixSense DJ Studio 1.0.0.1 allows remote attackers to cause a denial of service (application crash) and possibly execut…

  • Unscored —
    CVE-2009-3804 Public exploit

    Multiple SQL injection vulnerabilities in modules/forum/post.php in RunCMS 2M1 allow remote authenticated users to exec…

  • Unscored —
    CVE-2009-3811 Public exploit

    Stack-based buffer overflow in Music Tag Editor 1.61 build 212 allows remote attackers to execute arbitrary code via an…

  • Unscored —

    Multiple SQL injection vulnerabilities in RunCMS 2M1 allow remote authenticated users to execute arbitrary SQL commands…

  • Unscored —
    CVE-2009-3807 Public exploit

    Stack-based buffer overflow in MixVibes 7.043 Pro allows remote attackers to cause a denial of service (crash) via a lo…

  • Unscored —

    Static code injection vulnerability in RunCMS 2M1 allows remote authenticated administrators to execute arbitrary PHP c…

  • Unscored —
    CVE-2009-3803 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Amiro.CMS 5.4.0.0 and earlier allow remote attackers to inject a…

  • Unscored —
    CVE-2009-3805 Public exploit

    gpg2.exe in Gpg4win 2.0.1, as used in KDE Kleopatra 2.0.11, allows remote attackers to cause a denial of service (appli…

  • Unscored —
    CVE-2009-3812 Public exploit

    Heap-based buffer overflow in OtsAV DJ trial version 1.85.64.0, Radio trial version 1.85.64.0, TV trial version 1.85.64…

  • Unscored —

    RunCMS 2M1, when running with certain error_reporting levels, allows remote attackers to obtain sensitive information v…