Skip to content
OpenAdvisories

Archive

7 December 2009

Vulnerabilities first published on this day (UTC), newest first.

← November 2009 2009 / December /7 January 2010 →
  1. 17
  2. 235
  3. 312
  4. 421
  5. 5 
  6. 6 
  7. 711
  8. 821
  9. 914
  10. 1036
  11. 116
  12. 12 
  13. 1310
  14. 1412
  15. 156
  16. 1623
  17. 1730
  18. 1814
  19. 19 
  20. 204
  21. 2126
  22. 2225
  23. 2316
  24. 2416
  25. 25 
  26. 26 
  27. 27 
  28. 2823
  29. 2913
  30. 3030
  31. 3129
All Critical High Medium Low Exploited only Public exploit

11 results · Feed

  • Unscored —
    CVE-2009-4220 Public exploit

    PHP remote file inclusion vulnerability in includes/classes/pctemplate.php in PointComma 3.8b2 and earlier allows remot…

  • Unscored —
    CVE-2009-4216 Public exploit

    Directory traversal vulnerability in funzioni/lib/menulast.php in klinza professional cms 5.0.1 and earlier allows remo…

  • Unscored —
    CVE-2009-4215

    Panda Global Protection 2010, Internet Security 2010, and Antivirus Pro 2010 use weak permissions (Everyone: Full Contr…

  • Unscored —
    CVE-2009-4222 Public exploit

    phpBazar 2.1.1fix and earlier does not require administrative authentication for admin/admin.php, which allows remote a…

  • Unscored —
    CVE-2009-4217 Public exploit

    SQL injection vulnerability in the Itamar Elharar MusicGallery (com_musicgallery) component for Joomla! allows remote a…

  • Unscored —
    CVE-2009-4223 Public exploit Scanner template EPSS 55%

    PHP remote file inclusion vulnerability in adm/krgourl.php in KR-Web 1.1b2 and earlier allows remote attackers to execu…

  • Unscored —
    CVE-2009-4221 Public exploit

    SQL injection vulnerability in classified.php in phpBazar 2.1.1fix and earlier allows remote attackers to execute arbit…

  • Unscored —
    CVE-2009-4218 Public exploit

    Multiple SQL injection vulnerabilities in files/login.asp in JiRo's Banner System eXperience (JBSX) allow remote attack…

  • Unscored —
    CVE-2009-4219 Public exploit

    Stack-based buffer overflow in the MYACTIVEX.MyActiveXCtrl.1 ActiveX control in MyActiveX.ocx 1.4.8.0 in Haihaisoft Uni…

  • Medium —
    CVE-2009-4214

    Moderate severity vulnerability that affects rails

    Cross-site scripting (XSS) vulnerability in the strip_tags function in Ruby on Rails before 2.2.s, and 2.3.x before 2.3.5, allows remote attackers to inject arbitrary web script or HTML via vectors involving non-printing ASCII characters, related to HTML::Tok…

    rails rails Debian RubyGems
  • Unscored —
    CVE-2009-4224 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in SweetRice 0.5.4, 0.5.3, and earlier allow remote attackers to exe…