Skip to content
OpenAdvisories

Archive

28 October 2009

Vulnerabilities first published on this day (UTC), newest first.

14 results · Feed

  • Unscored —
    CVE-2009-3641 Public exploit EPSS 39%

    Snort before 2.8.5.1, when the -v option is enabled, allows remote attackers to cause a denial of service (application …

  • Unscored —

    The mod_tls module in ProFTPD before 1.3.2b, and 1.3.3 before 1.3.3rc2, when the dNSNameRequired TLS option is enabled,…

  • Unscored —

    Buffer overflow in sgLog.c in squidGuard 1.3 and 1.4 allows remote attackers to cause a denial of service (application …

  • Unscored —

    Multiple buffer overflows in squidGuard 1.4 allow remote attackers to bypass intended URL blocking via a long URL, rela…

  • Unscored —
    CVE-2009-3825 Public exploit

    Multiple directory traversal vulnerabilities in GenCMS 2006 allow remote attackers to include and execute arbitrary loc…

  • Unscored —
    CVE-2009-3824 Public exploit

    Directory traversal vulnerability in include/processor.php in Greenwood PHP Content Manager 0.3.2 allows remote attacke…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Activities pages in the Mobile subsystem in IBM Lotus Connection…

  • Unscored —
    CVE-2009-3823 Public exploit

    Directory traversal vulnerability in myhtml.php in Mobilelib GOLD 3.0, when magic_quotes_gpc is enabled, allows remote …

  • Unscored —

    SQL injection vulnerability in the Flagbit Filebase (fb_filebase) extension 0.1.0 for TYPO3 allows remote attackers to …

  • Unscored —
    CVE-2009-3817 Public exploit

    PHP remote file inclusion vulnerability in doc/releasenote.php in the BookLibrary (com_booklibrary) component 1.0 for J…

  • Unscored —

    Unspecified vulnerability in the Random Images (maag_randomimage) extension 1.6.4 and earlier for TYPO3 allows remote a…

  • Medium —

    Apache Solr Search for TYPO3 vulnerable to Cross-site Scripting

    Cross-site scripting (XSS) vulnerability in the Apache Solr Search (solr) extension 1.0.0 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • Medium —

    freeCap CAPTCHA extension for TYPO3 has vulnerability in the session handling feature

    Unspecified vulnerability in the session handling feature in freeCap CAPTCHA (sr_freecap) extension 1.2.0 and earlier for TYPO3 has unknown impact and attack vectors.

  • Unscored —
    CVE-2009-3822 Public exploit

    PHP remote file inclusion vulnerability in Fiji Web Design Ajax Chat (com_ajaxchat) component 1.0 for Joomla! allows re…