Skip to content
OpenAdvisories

Archive

2 December 2009

Vulnerabilities first published on this day (UTC), newest first.

← November 2009 2009 / December /2 January 2010 →
  1. 17
  2. 235
  3. 312
  4. 421
  5. 5 
  6. 6 
  7. 711
  8. 821
  9. 914
  10. 1036
  11. 116
  12. 12 
  13. 1310
  14. 1412
  15. 156
  16. 1623
  17. 1730
  18. 1814
  19. 19 
  20. 204
  21. 2126
  22. 2225
  23. 2316
  24. 2416
  25. 25 
  26. 26 
  27. 27 
  28. 2823
  29. 2913
  30. 3030
  31. 3129
All Critical High Medium Low Exploited only Public exploit

14 results · Clear filters · Feed

  • Unscored —
    CVE-2009-4147 Public exploit

    The _rtld function in the Run-Time Link-Editor (rtld) in libexec/rtld-elf/rtld.c in FreeBSD 7.1 and 8.0 does not clear …

  • Unscored —
    CVE-2009-4171 Public exploit

    An ActiveX control in YahooBridgeLib.dll for Yahoo! Messenger 9.0.0.2162, and possibly other 9.0 versions, allows remot…

  • Unscored —
    CVE-2009-4175 Public exploit

    CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allows remote attackers to obtain sensitive information via an inva…

  • Unscored —
    CVE-2009-4172 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews 8 and 8b, when magic…

  • Unscored —
    CVE-2009-4173 Public exploit

    Cross-site request forgery (CSRF) vulnerability in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allows remote at…

  • Unscored —
    CVE-2009-4174 Public exploit

    The editnews module in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b, when magic_quotes_gpc is disabled, allows r…

  • Unscored —
    CVE-2009-4146 Public exploit

    The _rtld function in the Run-Time Link-Editor (rtld) in libexec/rtld-elf/rtld.c in FreeBSD 7.1, 7.2, and 8.0 does not …

  • Unscored —
    CVE-2009-4170 Public exploit

    WP-Cumulus Plug-in 1.20 for WordPress, and possibly other versions, allows remote attackers to obtain sensitive informa…

  • Unscored —
    CVE-2009-4168 Public exploit

    Cross-site scripting (XSS) vulnerability in Roy Tanck tagcloud.swf, as used in the WP-Cumulus plugin before 1.23 for Wo…

  • Unscored —
    CVE-2009-4154 Public exploit

    Directory traversal vulnerability in includes/feedcreator.class.php in Elxis CMS allows remote attackers to read arbitr…

  • Unscored —
    CVE-2009-4156 Public exploit

    PHP remote file inclusion vulnerability in modules/pms/index.php in Ciamos CMS 0.9.5 and earlier allows remote attacker…

  • Unscored —
    CVE-2009-4155 Public exploit

    Multiple SQL injection vulnerabilities in Eshopbuilde CMS allow remote attackers to execute arbitrary SQL commands via …

  • Unscored —
    CVE-2009-4157 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in index.php in the ProofReader (com_proofreader) component 1.0 RC9…

  • Unscored —
    CVE-2009-3672 Public exploit EPSS 72%

    Microsoft Internet Explorer 6 and 7 does not properly handle objects in memory that (1) were not properly initialized o…