Skip to content
OpenAdvisories

Archive

29 December 2009

Vulnerabilities first published on this day (UTC), newest first.

13 results · Feed

  • Unscored —

    The default configuration of Cisco ASA 5500 Series Adaptive Security Appliance (Cisco ASA) 7.0, 7.1, 7.2, 8.0, 8.1, and…

  • Unscored —
    CVE-2009-4454 Public exploit

    vccleaner in VideoCache 1.9.2 allows local users with Squid proxy user privileges to overwrite arbitrary files via a sy…

  • Unscored —
    CVE-2009-4453 Public exploit

    Insecure method vulnerability in SoftCab Sound Converter ActiveX control (sndConverter.ocx) 1.2 allows remote attackers…

  • Unscored —

    inc/functions_time.php in MyBB (aka MyBulletinBoard) 1.4.10, and possibly earlier versions, allows remote attackers to …

  • Unscored —
    CVE-2009-4450 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in map.php in LiveZilla 3.1.8.3 allow remote attackers to inject ar…

  • Unscored —

    Directory traversal vulnerability in MyBB (aka MyBulletinBoard) 1.4.10, and possibly earlier versions, when changing th…

  • Unscored —
    CVE-2009-4446 Public exploit

    Cross-site scripting (XSS) vulnerability in admin.php in phpInstantGallery 1.1 allows remote attackers to inject arbitr…

  • Unscored —
    CVE-2009-4452 Public exploit

    Kaspersky Anti-Virus 5.0 (5.0.712); Antivirus Personal 5.0.x; Anti-Virus 6.0 (6.0.3.837), 7 (7.0.1.325), 2009 (8.0.0.x)…

  • Unscored —
    CVE-2009-4447 Public exploit

    Jax Guestbook 3.5.0 allows remote attackers to bypass authentication and modify administrator settings via a direct req…

  • Unscored —
    CVE-2009-4451 Public exploit

    Unrestricted file upload vulnerability in upper.php in kandalf upper 0.1 allows remote attackers to execute arbitrary c…

  • Unscored —
    CVE-2009-4444 EPSS 64%

    Microsoft Internet Information Services (IIS) 5.x and 6.x uses only the portion of a filename before a ; (semicolon) ch…

  • Unscored —
    CVE-2009-4445 EPSS 13%

    Microsoft Internet Information Services (IIS), when used in conjunction with unspecified third-party upload application…

  • Unscored —
    CVE-2009-3295 EPSS 40%

    The prep_reprocess_req function in kdc/do_tgs_req.c in the cross-realm referral implementation in the Key Distribution …