Skip to content
OpenAdvisories

Archive

October 2009

Vulnerabilities first published in this month (UTC), newest first.

← September 2009 2009 / October November 2009 →
  1. 121
  2. 216
  3. 3 
  4. 4 
  5. 56
  6. 610
  7. 74
  8. 813
  9. 917
  10. 10 
  11. 1112
  12. 12 
  13. 1314
  14. 1429
  15. 153
  16. 1623
  17. 17 
  18. 18 
  19. 1931
  20. 206
  21. 216
  22. 2262
  23. 237
  24. 24 
  25. 25 
  26. 2615
  27. 2715
  28. 2814
  29. 2918
  30. 3010
  31. 31 
All Critical High Medium Low Exploited only Public exploit

137 results · Clear filters · Feed

  • Unscored —
    CVE-2009-3535 Public exploit

    Directory traversal vulnerability in image.php in Clear Content 1.1 allows remote attackers to read arbitrary files via…

  • Unscored —
    CVE-2009-3528 Public exploit

    SQL injection vulnerability in Profile.php in MyMsg 1.0.3 allows remote authenticated users to execute arbitrary SQL co…

  • Unscored —
    CVE-2009-3530 Public exploit

    Cross-site scripting (XSS) vulnerability in storefront.php in RadScripts RadBids Gold 4 allows remote attackers to inje…

  • Unscored —
    CVE-2009-3541 Public exploit

    PHP remote file inclusion vulnerability in CoupleDB.php in PHPGenealogy 2.0 allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2009-3523 Public exploit

    aavmKer4.sys in avast! Home and Professional for Windows before 4.8.1356 does not properly validate input to IOCTLs (1)…

  • Unscored —
    CVE-2009-3522 Public exploit

    Stack-based buffer overflow in aswMon2.sys in avast! Home and Professional for Windows 4.8.1351, and possibly other ver…

  • Unscored —
    CVE-2009-3518 Public exploit

    Argument injection vulnerability in the iim: URI handler in IBMIM.exe in IBM Installation Manager 1.3.2 and earlier, as…

  • Unscored —
    CVE-2009-3508 Public exploit

    Multiple directory traversal vulnerabilities in MUJE CMS 1.0.4.34 allow remote attackers to include and execute arbitra…

  • Unscored —
    CVE-2009-3511 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in justVisual 1.2 allow remote attackers to execute arbitrary PHP co…

  • Unscored —
    CVE-2009-3513 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Pilot Group (PG) eTraining allow remote attackers to inject arbi…

  • Unscored —
    CVE-2009-3507 Public exploit

    Directory traversal vulnerability in modules.php in CMSphp 0.21 allows remote attackers to include and execute arbitrar…

  • Unscored —
    CVE-2009-3509 Public exploit

    Cross-site scripting (XSS) vulnerability in admin/admin_index.php in CJ Dynamic Poll PRO 2.0 allows remote attackers to…

  • Unscored —
    CVE-2009-3515 Public exploit

    Directory traversal vulnerability in dnet_admin/index.php in d.net CMS allows remote authenticated administrators to in…

  • Unscored —
    CVE-2009-3514 Public exploit

    Multiple SQL injection vulnerabilities in d.net CMS allow remote attackers to execute arbitrary SQL commands via (1) th…

  • Unscored —
    CVE-2009-3506 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in CMSphp 0.21 allow remote attackers to inject arbitrary web scrip…

  • Unscored —
    CVE-2009-3512 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in MyWeight 1.0 allow remote attackers to inject arbitrary web scri…

  • Unscored —
    CVE-2009-3510 Public exploit

    SQL injection vulnerability in viewListing.php in linkSpheric 0.74 Beta 6 allows remote attackers to execute arbitrary …