Skip to content
OpenAdvisories

Archive

28 November 2009

Vulnerabilities first published on this day (UTC), newest first.

← October 2009 2009 / November /28 December 2009 →
  1. 1 
  2. 220
  3. 36
  4. 417
  5. 514
  6. 611
  7. 7 
  8. 8 
  9. 924
  10. 1029
  11. 1115
  12. 128
  13. 1312
  14. 14 
  15. 15 
  16. 1615
  17. 177
  18. 1813
  19. 194
  20. 2020
  21. 21 
  22. 22 
  23. 2310
  24. 2425
  25. 259
  26. 26 
  27. 2721
  28. 2819
  29. 29 
  30. 309
All Critical High Medium Low Exploited only Public exploit

19 results · Feed

  • Unscored —
    CVE-2009-4111

    Argument injection vulnerability in Mail/sendmail.php in the Mail package 1.1.14, 1.2.0b2, and possibly other versions …

    php-mail Debian
  • Unscored —
    CVE-2009-4025

    Argument injection vulnerability in the traceroute function in Traceroute.php in the Net_Traceroute package before 0.21…

  • Unscored —
    CVE-2009-4023

    Argument injection vulnerability in the sendmail implementation of the Mail::Send method (Mail/sendmail.php) in the Mai…

    php-mail Debian
  • Unscored —
    CVE-2009-4024

    Argument injection vulnerability in the ping function in Ping.php in the Net_Ping package before 2.4.5 for PEAR allows …

  • Unscored —
    CVE-2009-4096 Public exploit

    RADIO istek scripti 2.5 stores sensitive information under the web root with insufficient access control, which allows …

  • Unscored —
    CVE-2009-4109

    The install wizard in DotNetNuke 4.0 through 5.1.4 does not prevent anonymous users from accessing functionality relate…

  • Unscored —
    CVE-2009-4101

    infoRSS 1.1.4.2 and earlier extension for Firefox performs certain operations with chrome privileges, which allows remo…

  • Unscored —
    CVE-2009-4107 Public exploit

    Buffer overflow in Invisible Browsing 5.0.52 allows user-assisted remote attackers to execute arbitrary code via a craf…

  • Unscored —
    CVE-2009-4099 Public exploit

    SQL injection vulnerability in the Google Calendar GCalendar (com_gcalendar) component 1.1.2, 2.1.4, and possibly earli…

  • Unscored —
    CVE-2009-4108 Public exploit

    XM Easy Personal FTP Server 5.8.0 allows remote authenticated users to cause a denial of service (crash) by uploading o…

  • Unscored —
    CVE-2009-4102

    Sage 1.4.3 and earlier extension for Firefox performs certain operations with chrome privileges, which allows remote at…

  • Unscored —
    CVE-2009-4098 Public exploit EPSS 19%

    Unrestricted file upload vulnerability in banner-edit.php in OpenX adserver 2.8.1 and earlier allows remote authenticat…

  • Unscored —
    CVE-2009-4110

    Cross-site scripting (XSS) vulnerability in the search functionality in DotNetNuke 4.8 through 5.1.4 allows remote atta…

  • Unscored —
    CVE-2009-4100

    Yoono extension before 6.1.1 for Firefox performs certain operations with chrome privileges, which allows user-assisted…

  • Unscored —
    CVE-2009-4106 Public exploit

    Unrestricted file upload vulnerability in admintools/editpage-2.php in Agoko CMS 0.4 and earlier allows remote attacker…

  • Unscored —
    CVE-2009-4105 Public exploit

    TYPSoft FTP Server 1.10 allows remote authenticated users to cause a denial of service (crash) by sending an APPE (appe…

  • Unscored —
    CVE-2009-4104 Public exploit

    SQL injection vulnerability in Lyften Designs LyftenBloggie (com_lyftenbloggie) component 1.0.4 for Joomla! allows remo…

  • Unscored —
    CVE-2009-4097 Public exploit

    Stack-based buffer overflow in the MplayInputFile function in Serenity Audio Player 3.2.3 and earlier allows remote att…

  • Unscored —
    CVE-2009-4103

    Buffer overflow in Robo-FTP 3.6.17, and possibly other versions, allows remote FTP servers to cause a denial of service…