Skip to content
OpenAdvisories

Archive

10 December 2009

Vulnerabilities first published on this day (UTC), newest first.

36 results · Feed

  • Unscored —
    CVE-2009-0898 EPSS 14%

    Stack-based buffer overflow in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers t…

  • Unscored —

    Buffer overflow in the URL filtering function in Internet Initiative Japan SEIL/X1, SEIL/X2, and SEIL/B1 firmware 2.40 …

  • Unscored —
    CVE-2009-4238 Public exploit

    Multiple SQL injection vulnerabilities in TestLink before 1.8.5 allow remote authenticated users to execute arbitrary S…

  • Unscored —

    Internet Initiative Japan SEIL/X1, SEIL/X2, and SEIL/B1 firmware 2.30 through 2.51, when NAT is enabled, allows remote …

  • Unscored —
    CVE-2009-4237 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in TestLink before 1.8.5 allow remote attackers to inject arbitrary…

  • Unscored —
    CVE-2009-4181 EPSS 11%

    Stack-based buffer overflow in ovwebsnmpsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow…

  • Unscored —
    CVE-2009-4180 EPSS 14%

    Stack-based buffer overflow in snmpviewer.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows …

  • Unscored —
    CVE-2009-4179 Public exploit EPSS 67%

    Stack-based buffer overflow in ovalarm.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows rem…

  • Unscored —
    CVE-2009-4177 EPSS 13%

    Buffer overflow in webappmon.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attack…

  • Unscored —
    CVE-2009-4178 Public exploit EPSS 74%

    Heap-based buffer overflow in OvWebHelp.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows re…

  • Unscored —
    CVE-2009-4176 EPSS 12%

    Multiple heap-based buffer overflows in ovsessionmgr.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7…

  • Unscored —
    CVE-2009-3845 EPSS 22%

    The port-3443 HTTP server in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to …

  • Unscored —
    CVE-2009-3846 EPSS 14%

    Multiple heap-based buffer overflows in ovlogin.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 a…

  • Unscored —
    CVE-2009-3848 EPSS 12%

    Stack-based buffer overflow in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow…

  • Unscored —
    CVE-2009-3849 Public exploit EPSS 74%

    Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote at…

  • Unscored —
    CVE-2009-3847 EPSS 10%

    Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to …

  • Unscored —

    Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 might allow attackers to execute arbitrary code via uns…

  • Unscored —

    Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 might allow attackers to execute arbitrary code via uns…

  • Unscored —
    CVE-2009-3794 EPSS 12%

    Heap-based buffer overflow in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 allows remote attackers t…

  • Unscored —

    Multiple unspecified vulnerabilities in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 allow attackers…

  • Unscored —

    Unspecified vulnerability in the Flash Player ActiveX control in Adobe Flash Player before 10.0.42.34 and Adobe AIR bef…

  • Unscored —

    Adobe Flash Player 10.x before 10.0.42.34 and Adobe AIR before 1.5.3 might allow attackers to execute arbitrary code vi…

  • Unscored —

    Integer overflow in the Verifier::parseExceptionHandlers function in Adobe Flash Player before 10.0.42.34 and Adobe AIR…

  • Unscored —

    Harold Bakker's NewsScript (HB-NS) 1.3 allows remote attackers to obtain access to the admin control panel via a direct…

  • Unscored —
    CVE-2009-4263 Public exploit

    SQL injection vulnerability in main_forum.php in PTCPay GeN3 forum 1.3 allows remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2009-4264 Public exploit

    PHP remote file inclusion vulnerability in components/core/connect.php in AROUNDMe 1.1 and earlier, when register_globa…

  • Unscored —
    CVE-2009-4266 Public exploit

    Cross-site scripting (XSS) vulnerability in search.php in YABSoft Advanced Image Hosting (AIH) Script 2.2, and possibly…

  • Unscored —
    CVE-2009-4265 Public exploit EPSS 31%

    Stack-based buffer overflow in Ideal Administration 2009 9.7.1, and possibly other versions, allows remote attackers to…

  • Unscored —

    PowerPhlogger 2.2.5 allows remote attackers to obtain sensitive information via a direct request to (1) edCss.inc.php, …

  • Unscored —
    CVE-2009-4253 Public exploit

    Cross-site scripting (XSS) vulnerability in dspStats.php in PowerPhlogger 2.2.5 allows remote attackers to inject arbit…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in images.php in Image Hosting Script DPI 1.1 Final (1.1F) allows remote attac…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the You!Hostit! template 1.0.1 for Joomla! allows remote attackers to injec…

  • Unscored —
    CVE-2009-4256 Public exploit

    Multiple SQL injection vulnerabilities in cource.php in AlefMentor 2.0 and 2.2 allow remote attackers to execute arbitr…

  • Unscored —
    CVE-2009-4250 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allow remote…

  • Unscored —
    CVE-2009-4249 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in CutePHP CuteNews 1.4.6, when register_globals is enabled and mag…

  • Unscored —
    CVE-2009-4251 Public exploit

    Stack-based buffer overflow in Jasc Paint Shop Pro 8.10 (aka Corel Paint Shop Pro) allows user-assisted remote attacker…