Skip to content
OpenAdvisories

Archive

24 December 2009

Vulnerabilities first published on this day (UTC), newest first.

← November 2009 2009 / December /24 January 2010 →
  1. 17
  2. 235
  3. 312
  4. 421
  5. 5 
  6. 6 
  7. 711
  8. 821
  9. 914
  10. 1036
  11. 116
  12. 12 
  13. 1310
  14. 1412
  15. 156
  16. 1623
  17. 1730
  18. 1814
  19. 19 
  20. 204
  21. 2126
  22. 2225
  23. 2316
  24. 2416
  25. 25 
  26. 26 
  27. 27 
  28. 2823
  29. 2913
  30. 3030
  31. 3129
All Critical High Medium Low Exploited only Public exploit

16 results · Feed

  • Unscored —
    CVE-2009-4422

    Multiple cross-site scripting (XSS) vulnerabilities in the GetURLArguments function in jpgraph.php in Aditus Consulting…

  • Unscored —
    CVE-2009-4423 Public exploit

    SQL injection vulnerability in index.php in weenCompany 4.0.0 allows remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2009-4420

    Buffer overflow in the bd daemon in F5 Networks BIG-IP Application Security Manager (ASM) 9.4.4 through 9.4.7 and 10.0.…

  • Unscored —
    CVE-2009-4419

    Intel Q35, GM45, PM45 Express, Q45, and Q43 Express chipsets in the SINIT Authenticated Code Module (ACM), which allows…

  • Unscored —
    CVE-2009-4418

    The unserialize function in PHP 5.3.0 and earlier allows context-dependent attackers to cause a denial of service (reso…

  • Unscored —
    CVE-2009-4421 Public exploit

    Directory traversal vulnerability in languages_cgi.php in Simple PHP Blog 0.5.1 and earlier allows remote authenticated…

  • Unscored —
    CVE-2009-4417

    The shutdown function in the Zend_Log_Writer_Mail class in Zend Framework (ZF) allows context-dependent attackers to se…

  • Unscored —
    CVE-2009-4137 Public exploit EPSS 17%

    The loadContentFromCookie function in core/Cookie.php in Piwik before 0.5 does not validate strings obtained from cooki…

  • Unscored —
    CVE-2009-4411

    The (1) setfacl and (2) getfacl commands in XFS acl 2.2.47, when running in recursive (-R) mode, follow symbolic links …

    acl Debian
  • Unscored —
    CVE-2009-4412

    Unrestricted file upload vulnerability in Serendipity before 1.5 allows remote authenticated users to execute arbitrary…

  • Unscored —
    CVE-2009-4410

    The fuse_ioctl_copy_user function in the ioctl handler in fs/fuse/file.c in the Linux kernel 2.6.29-rc1 through 2.6.30.…

  • Unscored —
    CVE-2009-4413 Public exploit

    The httpClientDiscardBody function in client.c in Polipo 0.9.8, 0.9.12, 1.0.4, and possibly other versions, allows remo…

  • Unscored —
    CVE-2009-4414

    SQL injection vulnerability in phpgwapi /inc/class.auth_sql.inc.php in phpGroupWare 0.9.16.12, and possibly other versi…

  • Unscored —
    CVE-2009-4416

    Cross-site scripting (XSS) vulnerability in login.php in phpGroupWare 0.9.16.12, and possibly other versions before 0.9…

  • Unscored —
    CVE-2009-4415

    Multiple directory traversal vulnerabilities in phpGroupWare 0.9.16.12, and possibly other versions before 0.9.16.014, …

  • Unscored —
    CVE-2009-3305 Public exploit EPSS 10%

    Polipo 1.0.4, and possibly other versions, allows remote attackers to cause a denial of service (crash) via a request w…