Skip to content
OpenAdvisories

Archive

10 December 2009

Vulnerabilities first published on this day (UTC), newest first.

14 results · Clear filters · Feed

  • Unscored —
    CVE-2009-4238 Public exploit

    Multiple SQL injection vulnerabilities in TestLink before 1.8.5 allow remote authenticated users to execute arbitrary S…

  • Unscored —
    CVE-2009-4237 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in TestLink before 1.8.5 allow remote attackers to inject arbitrary…

  • Unscored —
    CVE-2009-4179 Public exploit EPSS 67%

    Stack-based buffer overflow in ovalarm.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows rem…

  • Unscored —
    CVE-2009-4178 Public exploit EPSS 74%

    Heap-based buffer overflow in OvWebHelp.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows re…

  • Unscored —
    CVE-2009-3849 Public exploit EPSS 74%

    Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote at…

  • Unscored —
    CVE-2009-4263 Public exploit

    SQL injection vulnerability in main_forum.php in PTCPay GeN3 forum 1.3 allows remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2009-4264 Public exploit

    PHP remote file inclusion vulnerability in components/core/connect.php in AROUNDMe 1.1 and earlier, when register_globa…

  • Unscored —
    CVE-2009-4266 Public exploit

    Cross-site scripting (XSS) vulnerability in search.php in YABSoft Advanced Image Hosting (AIH) Script 2.2, and possibly…

  • Unscored —
    CVE-2009-4265 Public exploit EPSS 31%

    Stack-based buffer overflow in Ideal Administration 2009 9.7.1, and possibly other versions, allows remote attackers to…

  • Unscored —
    CVE-2009-4253 Public exploit

    Cross-site scripting (XSS) vulnerability in dspStats.php in PowerPhlogger 2.2.5 allows remote attackers to inject arbit…

  • Unscored —
    CVE-2009-4256 Public exploit

    Multiple SQL injection vulnerabilities in cource.php in AlefMentor 2.0 and 2.2 allow remote attackers to execute arbitr…

  • Unscored —
    CVE-2009-4250 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allow remote…

  • Unscored —
    CVE-2009-4249 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in CutePHP CuteNews 1.4.6, when register_globals is enabled and mag…

  • Unscored —
    CVE-2009-4251 Public exploit

    Stack-based buffer overflow in Jasc Paint Shop Pro 8.10 (aka Corel Paint Shop Pro) allows user-assisted remote attacker…