Skip to content
OpenAdvisories

Archive

28 December 2009

Vulnerabilities first published on this day (UTC), newest first.

← November 2009 2009 / December /28 January 2010 →
  1. 17
  2. 235
  3. 312
  4. 421
  5. 5 
  6. 6 
  7. 711
  8. 821
  9. 914
  10. 1036
  11. 116
  12. 12 
  13. 1310
  14. 1412
  15. 156
  16. 1623
  17. 1730
  18. 1814
  19. 19 
  20. 204
  21. 2126
  22. 2225
  23. 2316
  24. 2416
  25. 25 
  26. 26 
  27. 27 
  28. 2823
  29. 2913
  30. 3030
  31. 3129
All Critical High Medium Low Exploited only Public exploit

23 results · Feed

  • Unscored —
    CVE-2009-1798 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities on the Network Management Card (NMC) on American Power Conversion (…

  • Unscored —
    CVE-2009-1797

    Multiple cross-site request forgery (CSRF) vulnerabilities on the Network Management Card (NMC) on American Power Conve…

  • Unscored —
    CVE-2009-4440

    Directory Proxy Server (DPS) in Sun Java System Directory Server Enterprise Edition 6.0 through 6.3.1 does not properly…

  • Unscored —
    CVE-2009-4442

    Directory Proxy Server (DPS) in Sun Java System Directory Server Enterprise Edition 6.0 through 6.3.1 does not properly…

  • Unscored —
    CVE-2009-4441

    Directory Proxy Server (DPS) in Sun Java System Directory Server Enterprise Edition 6.0 through 6.3.1 does not enable t…

  • Unscored —
    CVE-2009-4439

    Unspecified vulnerability in the Query Compiler, Rewrite, and Optimizer component in IBM DB2 9.5 before FP5 allows remo…

  • Unscored —
    CVE-2009-4443

    Unspecified vulnerability in the psearch (aka persistent search) functionality in Directory Proxy Server (DPS) in Sun J…

  • Unscored —
    CVE-2009-4438

    The Query Compiler, Rewrite, and Optimizer component in IBM DB2 9.1 before FP8, 9.5 before FP5, and 9.7 before FP1 does…

  • Unscored —
    CVE-2009-4007

    Unspecified vulnerability in the NormaliseTrainConsist function in src/train_cmd.cpp in OpenTTD before 0.7.5-RC1 allows…

    openttd Debian
  • Unscored —
    CVE-2009-4435 Public exploit

    Multiple directory traversal vulnerabilities in F3Site 2009 allow remote attackers to include and execute arbitrary loc…

  • Unscored —
    CVE-2009-4433 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in IDevSpot iSupport 1.8 and earlier allow remote attackers to inje…

  • Unscored —
    CVE-2009-4431 Public exploit

    PHP remote file inclusion vulnerability in cal_popup.php in the Anything Digital Development JCal Pro (aka com_jcalpro …

  • Unscored —
    CVE-2009-4429 Public exploit

    Cross-site scripting (XSS) vulnerability in the Sections module 5.x before 5.x-1.3 and 6.x before 6.x-1.3 for Drupal al…

  • Unscored —
    CVE-2009-4425

    Cross-site scripting (XSS) vulnerability in index.php in iDevCart 1.09 allows remote attackers to inject arbitrary web …

  • Unscored —
    CVE-2009-4424 Public exploit

    SQL injection vulnerability in results.php in the Pyrmont plugin 2 for WordPress allows remote attackers to execute arb…

  • Unscored —
    CVE-2009-4436 Public exploit

    Multiple SQL injection vulnerabilities in Active Web Softwares eWebquiz 8 allow remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2009-4428 Public exploit

    SQL injection vulnerability in the JoomPortfolio (com_joomportfolio) component 1.0.0 for Joomla! allows remote attacker…

  • Unscored —
    CVE-2009-4432 Public exploit

    SQL injection vulnerability in index.php in CodeMight VideoCMS 3.1 allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2009-4427 Public exploit

    Directory traversal vulnerability in cmd.php in phpLDAPadmin 1.1.0.5 allows remote attackers to include and execute arb…

    phpldapadmin Debian
  • Unscored —
    CVE-2009-4426 Public exploit

    Multiple directory traversal vulnerabilities in Ignition 1.2, when magic_quotes_gpc is disabled, allow remote attackers…

  • Unscored —
    CVE-2009-4434 Public exploit

    Directory traversal vulnerability in index.php in IDevSpot iSupport 1.8 and earlier allows remote attackers to read arb…

  • Unscored —
    CVE-2009-4437 Public exploit

    Multiple SQL injection vulnerabilities in Active Auction House 3.6 allow remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2009-4430 Public exploit

    SQL injection vulnerability in index.php in VirtueMart 1.0 allows remote attackers to execute arbitrary SQL commands vi…