Skip to content
OpenAdvisories

Archive

4 December 2009

Vulnerabilities first published on this day (UTC), newest first.

← November 2009 2009 / December /4 January 2010 →
  1. 17
  2. 235
  3. 312
  4. 421
  5. 5 
  6. 6 
  7. 711
  8. 821
  9. 914
  10. 1036
  11. 116
  12. 12 
  13. 1310
  14. 1412
  15. 156
  16. 1623
  17. 1730
  18. 1814
  19. 19 
  20. 204
  21. 2126
  22. 2225
  23. 2316
  24. 2416
  25. 25 
  26. 26 
  27. 27 
  28. 2823
  29. 2913
  30. 3030
  31. 3129
All Critical High Medium Low Exploited only Public exploit

14 results · Clear filters · Feed

  • Unscored —
    CVE-2009-4203 Public exploit

    Multiple SQL injection vulnerabilities in admin/aclass/admin_func.php in Arab Portal 2.2 allow remote attackers to exec…

  • Unscored —
    CVE-2009-4205 Public exploit

    Directory traversal vulnerability in admin.php in Flashlight Free Edition allows remote attackers to include and execut…

  • Unscored —
    CVE-2009-4209 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in admin/index.php in moziloCMS 1.11.1 allow remote attackers to in…

  • Unscored —
    CVE-2009-4200 Public exploit

    SQL injection vulnerability in the Seminar (com_seminar) component 1.28 for Joomla! allows remote attackers to execute …

  • Unscored —
    CVE-2009-4199 Public exploit

    Multiple SQL injection vulnerabilities in the Mambo Resident (aka Mos Res or com_mosres) component 1.0f for Mambo and J…

  • Unscored —
    CVE-2009-4202 Public exploit Scanner template

    Directory traversal vulnerability in the Omilen Photo Gallery (com_omphotogallery) component Beta 0.5 for Joomla! allow…

  • Unscored —
    CVE-2009-4198 Public exploit

    SQL injection vulnerability in my_orders.php in MyMiniBill allows remote authenticated users to execute arbitrary SQL c…

  • Unscored —
    CVE-2009-4208 Public exploit

    SQL injection vulnerability in the os_news module in Open-school (OS) 1.0 allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2009-4206 Public exploit

    SQL injection vulnerability in admin.link.modify.php in Million Dollar Text Links 1.0 and earlier allows remote attacke…

  • Unscored —
    CVE-2009-4148 Public exploit

    DAZ Studio 2.3.3.161, 2.3.3.163, and 3.0.1.135 allows remote attackers to execute arbitrary JavaScript code via a (1) .…

  • Unscored —
    CVE-2009-4204 Public exploit

    SQL injection vulnerability in read.php in Flashlight Free Edition allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2009-4195 Public exploit EPSS 71%

    Buffer overflow in Adobe Illustrator CS4 14.0.0, CS3 13.0.3 and earlier, and CS3 13.0.0 allows remote attackers to exec…

  • Unscored —
    CVE-2009-4196 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in multiple scripts in Forms/ in Huawei MT882 V100R002B020 ARG-T ru…

  • Unscored —
    CVE-2009-4197 Public exploit

    rpwizPppoe.htm in Huawei MT882 V100R002B020 ARG-T running firmware 3.7.9.98 contains a form that does not disable the a…