Skip to content
OpenAdvisories

Archive

16 November 2009

Vulnerabilities first published on this day (UTC), newest first.

15 results · Feed

  • Unscored —

    Joomla! before 1.5.15 allows remote attackers to read an extension's XML file, and thereby obtain the extension's versi…

  • Unscored —
    CVE-2009-3949 Public exploit

    cp/profile.php in VivaPrograms Infinity 2.0.5 and earlier does not require administrative authentication for the donewa…

  • Unscored —

    Unspecified vulnerability in the Front-End Editor in the com_content component in Joomla! before 1.5.15 allows remote a…

  • Unscored —
    CVE-2009-3947 Public exploit

    Buffer overflow in the FTP service on the Tandberg MXP F7.0 allows remote attackers to cause a denial of service (proce…

  • Unscored —
    CVE-2009-3948 Public exploit

    JetAudio 7.5.3 COWON Media Center allows remote attackers to cause a denial of service (memory consumption and applicat…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Bractus SunTrack allow remote attackers to inject arbitrary web …

  • Unscored —

    Martin Lambers msmtp before 1.4.19, when OpenSSL is used, does not properly handle a '\0' character in a domain name in…

  • Unscored —
    CVE-2009-3888 Public exploit

    The do_mmap_pgoff function in mm/nommu.c in the Linux kernel before 2.6.31.6, when the CPU lacks a memory management un…

  • Unscored —

    The dbg_lvl file for the megaraid_sas driver in the Linux kernel before 2.6.27 has world-writable permissions, which al…

  • Unscored —

    The poll_mode_io file for the megaraid_sas driver in the Linux kernel 2.6.31.6 and earlier has world-writable permissio…

  • Unscored —

    Unspecified vulnerability in Guest Additions in Sun xVM VirtualBox 1.6.x and 2.0.x before 2.0.12, 2.1.x, and 2.2.x, and…

  • Unscored —

    Martin Lambers mpop before 1.0.19, when OpenSSL is used, does not properly handle a '\0' character in a domain name in …

  • Unscored —
    CVE-2009-3943 EPSS 13%

    Microsoft Internet Explorer 6 through 6.0.2900.2180 and 7 through 7.0.6000.16711 allows remote attackers to cause a den…

  • Unscored —

    Research In Motion (RIM) BlackBerry Browser on the BlackBerry 8800 allows remote attackers to cause a denial of service…

  • Unscored —

    Cross-site request forgery (CSRF) vulnerability in the administrative console in the Security component in IBM WebSpher…