Skip to content
OpenAdvisories

Archive

22 December 2009

Vulnerabilities first published on this day (UTC), newest first.

← November 2009 2009 / December /22 January 2010 →
  1. 17
  2. 235
  3. 312
  4. 421
  5. 5 
  6. 6 
  7. 711
  8. 821
  9. 914
  10. 1036
  11. 116
  12. 12 
  13. 1310
  14. 1412
  15. 156
  16. 1623
  17. 1730
  18. 1814
  19. 19 
  20. 204
  21. 2126
  22. 2225
  23. 2316
  24. 2416
  25. 25 
  26. 26 
  27. 27 
  28. 2823
  29. 2913
  30. 3030
  31. 3129
All Critical High Medium Low Exploited only Public exploit

25 results · Feed

  • Unscored —
    CVE-2009-4392

    SQL injection vulnerability in the XDS Staff List (xds_staff) extension 0.0.3 and earlier for TYPO3 allows remote attac…

  • Unscored —
    CVE-2009-4400

    Cross-site scripting (XSS) vulnerability in the Parish Administration Database (ste_parish_admin) extension 0.1.3 and e…

  • Unscored —
    CVE-2009-4395

    Cross-site scripting (XSS) vulnerability in the Random Prayer 2 (ste_prayer2) extension 0.0.3 and earlier for TYPO3 all…

  • Unscored —
    CVE-2009-4385 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in Scriptsez.net Ez Poll Hoster (EPH) allow remote attackers…

  • Unscored —
    CVE-2009-4398

    Cross-site scripting (XSS) vulnerability in the Parish of the Holy Spirit Religious Art Gallery (hs_religiousartgallery…

  • Unscored —
    CVE-2009-4391

    Cross-site scripting (XSS) vulnerability in the File list (dr_blob) extension 2.1.1 for TYPO3 allows remote attackers t…

  • Unscored —
    CVE-2009-4396

    SQL injection vulnerability in the Diocese of Portsmouth Resources Database (pd_resources) extension 0.1.1 and earlier …

  • Unscored —
    CVE-2009-4389

    Unspecified vulnerability in the Watchdog (aba_watchdog) extension 2.0.2 and earlier for TYPO3 allows remote attackers …

  • Unscored —
    CVE-2009-4379

    Multiple cross-site scripting (XSS) vulnerabilities in Valarsoft Webmatic before 3.0.3 allow remote attackers to inject…

  • Unscored —
    CVE-2009-4393

    SQL injection vulnerability in the Document Directorys (danp_documentdirs) extension 1.10.7 and earlier for TYPO3 allow…

  • Unscored —
    CVE-2009-4384 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Scriptsez.net Ez Poll Hoster (EPH) allow remote attackers to inj…

  • Unscored —
    CVE-2009-4387

    The cross-site scripting (XSS) protection mechanism in ShowInContentAreaAction.do in ManageEngine Password Manager Pro …

  • Unscored —
    CVE-2009-4388

    Cross-site scripting (XSS) vulnerability in the ListMan (nl_listman) extension 1.2.1 for TYPO3 allows remote attackers …

  • Unscored —
    CVE-2009-4390

    SQL injection vulnerability in the Car (car) extension 0.1.1 for TYPO3 allows remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2009-4383

    Directory traversal vulnerability in Pforum.php in Rocomotion P forum before 1.28 allows remote attackers to read arbit…

  • Unscored —
    CVE-2009-4381 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in texmedia Million Pixel Script 3 allows remote attackers to inj…

  • Unscored —
    CVE-2009-4397

    Cross-site scripting (XSS) vulnerability in the Diocese of Portsmouth Resources Database (pd_resources) extension 0.1.1…

  • Unscored —
    CVE-2009-4394

    SQL injection vulnerability in the Random Prayer 2 (ste_prayer2) extension 0.0.3 and earlier for TYPO3 allows remote at…

  • Unscored —
    CVE-2009-4386 Public exploit

    SQL injection vulnerability in hotel_tiempolibre_ext.php in Venalsur Booking Centre Booking System for Hotels Group, wh…

  • Unscored —
    CVE-2009-4382 Public exploit

    Cross-site scripting (XSS) vulnerability in module.php in PHPFABER CMS, possibly 1.3.36, allows remote attackers to inj…

  • Unscored —
    CVE-2009-4399

    SQL injection vulnerability in the Parish of the Holy Spirit Religious Art Gallery (hs_religiousartgallery) extension 0…

  • Unscored —
    CVE-2009-4380

    Multiple SQL injection vulnerabilities in Valarsoft Webmatic before 3.0.3 allow remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2009-4401

    SQL injection vulnerability in the Parish Administration Database (ste_parish_admin) extension 0.1.3 and earlier for TY…

  • Unscored —
    CVE-2009-4140 Public exploit EPSS 76%

    Unrestricted file upload vulnerability in ofc_upload_image.php in Open Flash Chart v2 Beta 1 through v2 Lug Wyrm Charme…

  • Unscored —
    CVE-2009-3702 Public exploit

    Multiple absolute path traversal vulnerabilities in PHP-Calendar 1.1 allow remote attackers to include and execute arbi…