Skip to content
OpenAdvisories

Archive

21 December 2009

Vulnerabilities first published on this day (UTC), newest first.

8 results · Clear filters · Feed

  • Unscored —
    CVE-2009-4372 Public exploit

    AlienVault Open Source Security Information Management (OSSIM) 2.1.5, and possibly other versions before 2.1.5-4, allow…

  • Unscored —
    CVE-2009-4365 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in admin.php in ScriptsEz Ez Blog 1.0 allow remote attackers…

  • Unscored —
    CVE-2009-4364 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in ScriptsEz Ez Blog allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2009-4142 Public exploit

    The htmlspecialchars function in PHP before 5.2.12 does not properly handle (1) overlong UTF-8 sequences, (2) invalid S…

  • Unscored —
    CVE-2009-4367 Public exploit

    The Staging Webservice ("sitecore modules/staging/service/api.asmx") in Sitecore Staging Module 5.4.0 rev.080625 and ea…

  • Unscored —
    CVE-2009-4375 Public exploit

    SQL injection vulnerability in repository/repository_attachment.php in AlienVault Open Source Security Information Mana…

  • Unscored —
    CVE-2009-4366 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in ScriptsEz Ez Blog 1.0 allows remote attackers to inject arbitr…

  • Unscored —
    CVE-2009-3701 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the administration interface in Horde Application Framework befo…