Skip to content
OpenAdvisories

Archive

14 December 2009

Vulnerabilities first published on this day (UTC), newest first.

← November 2009 2009 / December /14 January 2010 →
  1. 17
  2. 235
  3. 312
  4. 421
  5. 5 
  6. 6 
  7. 711
  8. 821
  9. 914
  10. 1036
  11. 116
  12. 12 
  13. 1310
  14. 1412
  15. 156
  16. 1623
  17. 1730
  18. 1814
  19. 19 
  20. 204
  21. 2126
  22. 2225
  23. 2316
  24. 2416
  25. 25 
  26. 26 
  27. 27 
  28. 2823
  29. 2913
  30. 3030
  31. 3129
All Critical High Medium Low Exploited only Public exploit

12 results · Feed

  • Unscored —
    CVE-2009-4323

    The installation for Zen Cart stores sensitive information and insecure programs under the (1) docs, (2) extras, and (3…

  • Unscored —
    CVE-2009-4320

    Cross-site scripting (XSS) vulnerability in searchform.php in The Next Generation of Genealogy Sitebuilding (TNG) 7.1.2…

  • Unscored —
    CVE-2009-4321

    extras/curltest.php in Zen Cart 1.3.8 and 1.3.8a, and possibly other versions, allows remote attackers to read arbitrar…

  • Unscored —
    CVE-2009-4322

    extras/ipn_test_return.php in Zen Cart allows remote attackers to obtain sensitive information via a direct request, wh…

  • Unscored —
    CVE-2009-4319 Public exploit

    PHP remote file inclusion vulnerability in js/bbcodepress/bbcode-form.php in eoCMS 0.9.03 and earlier, when register_gl…

  • Unscored —
    CVE-2009-4315 Public exploit

    Directory traversal vulnerability in admin/ajaxsave.php in Nuggetz CMS 1.0, when magic_quotes_gpc is disabled, allows r…

  • Unscored —
    CVE-2009-4317

    Cross-site scripting (XSS) vulnerability in index.php in ScriptsEz Ez Cart allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2009-4316

    Cross-site scripting (XSS) vulnerability in searchresults_main.php in ZeeLyrics 3x allows remote attackers to inject ar…

  • Unscored —
    CVE-2009-4318

    Cross-site scripting (XSS) vulnerability in index.php in Real Estate Manager 1.0.1 allows remote attackers to inject ar…

  • Unscored —
    CVE-2009-4314

    Sun Ray Server Software 4.1 on Solaris 10, when Automatic Multi-Group Hotdesking (AMGH) is enabled, responds to a logou…

  • Unscored —
    CVE-2009-4129

    Race condition in Mozilla Firefox allows remote attackers to produce a JavaScript message with a spoofed domain associa…

  • Unscored —
    CVE-2009-4130

    Visual truncation vulnerability in the MakeScriptDialogTitle function in nsGlobalWindow.cpp in Mozilla Firefox allows r…