Skip to content
OpenAdvisories

Archive

6 November 2009

Vulnerabilities first published on this day (UTC), newest first.

11 results · Feed

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in the Identity Provider (IdP) 1.3.x before 1.3.4 and 2.x before 2.…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in e-Courier CMS allow remote attackers to inject arbitrary web scr…

  • Unscored —

    The connector layer in the Linux kernel before 2.6.31.5 does not require the CAP_SYS_ADMIN capability for certain inter…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in jspui/index.jsp in ManageEngine Netflow Analyzer 7.5 build 7500 …

  • Unscored —
    CVE-2009-3904 Public exploit

    classes/session/cc_admin_session.php in CubeCart 4.3.4 does not properly restrict administrative access permissions, wh…

  • Unscored —
    CVE-2009-3850 Public exploit

    Blender 2.34, 2.35a, 2.40, and 2.49b allows remote attackers to execute arbitrary code via a .blend file that contains …

  • Unscored —
    CVE-2009-3901 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in e-Courier CMS allow remote attackers to inject arbitrary web scr…

  • Unscored —
    CVE-2009-3902 Public exploit

    Directory traversal vulnerability in Cherokee Web Server 0.5.4 and earlier for Windows allows remote attackers to read …

  • Unscored —

    Unspecified vulnerability in the Cluster Management component in IBM PowerHA 5.4, 5.4.1, 5.5, and 6.1 on AIX allows rem…

  • Unscored —

    Memory leak in the Sockets Direct Protocol (SDP) driver in Sun Solaris 10, and OpenSolaris snv_57 through snv_94, allow…

  • Unscored —
    CVE-2009-2685 Public exploit EPSS 77%

    Stack-based buffer overflow in the login form in the management web server in HP Power Manager allows remote attackers …