Skip to content
OpenAdvisories

Archive

1 December 2009

Vulnerabilities first published on this day (UTC), newest first.

7 results · Feed

  • Unscored —
    CVE-2009-2626 Public exploit

    The zend_restore_ini_entry_cb function in zend_ini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific…

  • Unscored —
    CVE-2009-4120 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in Quick.Cart 3.4 allow remote attackers to hijack the authe…

  • Unscored —

    Multiple cross-site request forgery (CSRF) vulnerabilities in Quick.CMS 2.4 and Quick.CMS.Lite 2.4 allow remote attacke…

  • Unscored —
    CVE-2009-4118 Public exploit

    The StartServiceCtrlDispatcher function in the cvpnd service (cvpnd.exe) in Cisco VPN client for Windows before 5.0.06.…

  • Unscored —

    GNU GRand Unified Bootloader (GRUB) 2 1.97 only compares the submitted portion of a password with the actual password, …

  • Unscored —
    CVE-2009-4117 Public exploit

    Multiple stack-based buffer overflows in pdf_shade4.c in MuPDF before commit 20091125231942, as used in SumatraPDF befo…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Feed Element Mapper module 5.x before 5.x-1.3, 6.x before 6.x-1.3, and 6.x-…