Skip to content
OpenAdvisories

Archive

6 November 2009

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • Unscored —
    CVE-2009-3904 Public exploit

    classes/session/cc_admin_session.php in CubeCart 4.3.4 does not properly restrict administrative access permissions, wh…

  • Unscored —
    CVE-2009-3850 Public exploit

    Blender 2.34, 2.35a, 2.40, and 2.49b allows remote attackers to execute arbitrary code via a .blend file that contains …

  • Unscored —
    CVE-2009-3901 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in e-Courier CMS allow remote attackers to inject arbitrary web scr…

  • Unscored —
    CVE-2009-3902 Public exploit

    Directory traversal vulnerability in Cherokee Web Server 0.5.4 and earlier for Windows allows remote attackers to read …

  • Unscored —
    CVE-2009-2685 Public exploit EPSS 77%

    Stack-based buffer overflow in the login form in the management web server in HP Power Manager allows remote attackers …