Skip to content
OpenAdvisories

Archive

24 November 2009

Vulnerabilities first published on this day (UTC), newest first.

← October 2009 2009 / November /24 December 2009 →
  1. 1 
  2. 220
  3. 36
  4. 417
  5. 514
  6. 611
  7. 7 
  8. 8 
  9. 924
  10. 1029
  11. 1115
  12. 128
  13. 1312
  14. 14 
  15. 15 
  16. 1615
  17. 177
  18. 1813
  19. 194
  20. 2020
  21. 21 
  22. 22 
  23. 2310
  24. 2425
  25. 259
  26. 26 
  27. 2721
  28. 2819
  29. 29 
  30. 309
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Unscored —
    CVE-2009-3898 Public exploit EPSS 16%

    Directory traversal vulnerability in src/http/modules/ngx_http_dav_module.c in nginx (aka Engine X) before 0.7.63, and …

    nginx Debian
  • Unscored —
    CVE-2009-3578 Public exploit

    Autodesk Maya 8.0, 8.5, 2008, 2009, and 2010 and Alias Wavefront Maya 6.5 and 7.0 allow remote attackers to execute arb…

  • Unscored —
    CVE-2009-3577 Public exploit

    Autodesk 3D Studio Max (3DSMax) 6 through 9 and 2008 through 2010 allows remote attackers to execute arbitrary code via…

  • Unscored —
    CVE-2009-3576 Public exploit

    Autodesk Softimage 7.x and Softimage XSI 6.x allow remote attackers to execute arbitrary JavaScript code via a scene pa…

  • Unscored —
    CVE-2009-4059 Public exploit

    SQL injection vulnerability in the JoomClip (com_joomclip) component for Joomla! allows remote attackers to execute arb…

  • Unscored —
    CVE-2009-4056 Public exploit

    Directory traversal vulnerability in admin/popup.php in Betsy CMS 3.5 allows remote attackers to include and execute ar…

  • Unscored —
    CVE-2009-4060 Public exploit

    SQL injection vulnerability in includes/content/viewProd.inc.php in CubeCart before 4.3.7 remote attackers to execute a…

  • Unscored —
    CVE-2009-4057 Public exploit

    SQL injection vulnerability in the inertialFATE iF Portfolio Nexus (com_if_nexus) component 1.1 for Joomla! allows remo…

  • Unscored —
    CVE-2009-4058 Public exploit

    SQL injection vulnerability in allauctions.php in Telebid Auction Script allows remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2009-4017 Public exploit EPSS 12%

    PHP before 5.2.12 and 5.3.x before 5.3.1 does not restrict the number of temporary files created when handling a multip…

  • Unscored —
    CVE-2009-3843 Public exploit EPSS 79%

    HP Operations Manager 8.10 on Windows contains a "hidden account" in the XML file that specifies Tomcat users, which al…