Skip to content
OpenAdvisories

Archive

30 December 2009

Vulnerabilities first published on this day (UTC), newest first.

← November 2009 2009 / December /30 January 2010 →
  1. 17
  2. 235
  3. 312
  4. 421
  5. 5 
  6. 6 
  7. 711
  8. 821
  9. 914
  10. 1036
  11. 116
  12. 12 
  13. 1310
  14. 1412
  15. 156
  16. 1623
  17. 1730
  18. 1814
  19. 19 
  20. 204
  21. 2126
  22. 2225
  23. 2316
  24. 2416
  25. 25 
  26. 26 
  27. 27 
  28. 2823
  29. 2913
  30. 3030
  31. 3129
All Critical High Medium Low Exploited only Public exploit

18 results · Clear filters · Feed

  • Unscored —
    CVE-2009-4477 Public exploit

    SQL injection vulnerability in page.html in Xstate Real Estate 1.0 allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2009-4475 Public exploit

    SQL injection vulnerability in the Joomlub (com_joomlub) component for Joomla! allows remote attackers to execute arbit…

  • Unscored —
    CVE-2009-4470 Public exploit

    SQL injection vulnerability in boardrule.php in DVBBS 2.0 allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2009-4471 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in FreeSchool 1.1.0 and earlier allow remote attackers to execute ar…

  • Unscored —
    CVE-2009-4474 Public exploit

    SQL injection vulnerability in the Mike de Boer zoom (com_zoom) component 2.0 for Mambo allows remote attackers to exec…

  • Unscored —
    CVE-2009-4484 Public exploit EPSS 70%

    Multiple stack-based buffer overflows in the CertDecoder::GetName function in src/asn.cpp in TaoCrypt in yaSSL before 1…

  • Unscored —
    CVE-2009-4472 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in PHPope 1.0.0 and earlier allow remote attackers to execute arbitr…

  • Unscored —
    CVE-2009-4478 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Xstate Real Estate 1.0 allow remote attackers to inject arbitrar…

  • Unscored —
    CVE-2009-4469 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in pagenumber.inc.php in phpPowerCards 2.0 allow remote attackers t…

  • Unscored —
    CVE-2009-4467 Public exploit

    misc.php in DeluxeBB 1.3 allows remote attackers to register accounts without a valid email address via a valemail acti…

  • Unscored —
    CVE-2009-4466 Public exploit

    DeluxeBB 1.3 allows remote attackers to obtain sensitive information via a crafted page parameter to misc.php, which re…

  • Unscored —
    CVE-2009-4462 Public exploit EPSS 20%

    Stack-based buffer overflow in the NetBiterConfig utility (NetBiterConfig.exe) 1.3.0 for Intellicom NetBiter WebSCADA a…

  • Unscored —
    CVE-2009-4464 Public exploit

    Cross-site scripting (XSS) vulnerability in searchadvance.asp in Active Business Directory 2 allows remote attackers to…

  • Unscored —
    CVE-2009-4461 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in FlatPress 0.909 allow remote attackers to inject arbitrary web s…

  • Unscored —
    CVE-2009-4468 Public exploit

    Cross-site scripting (XSS) vulnerability in misc.php in DeluxeBB 1.3 allows remote attackers to inject arbitrary web sc…

  • Unscored —
    CVE-2009-4465 Public exploit

    DeluxeBB 1.3 stores sensitive information under the web root with insufficient access control, which allows remote atta…

  • Unscored —
    CVE-2009-4458 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in FreePBX 2.5.2 and 2.6.0rc2, and possibly other versions, allow r…

  • Unscored —
    CVE-2009-4456 Public exploit

    SQL injection vulnerability in news_detail.php in Green Desktiny 2.3.1, and possibly earlier versions, allows remote at…