Skip to content
OpenAdvisories

Archive

31 December 2009

Vulnerabilities first published on this day (UTC), newest first.

10 results · Clear filters · Feed

  • Unscored —
    CVE-2009-4523 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Zainu 1.0 allows remote attackers to inject arbitrary web scri…

  • Unscored —
    CVE-2009-4522 Public exploit

    Cross-site scripting (XSS) vulnerability in search.5.html in BloofoxCMS 0.3.5 allows remote attackers to inject arbitra…

  • Unscored —
    CVE-2009-4512 Public exploit

    Directory traversal vulnerability in index.php in Oscailt 3.3, when Use Friendly URL's is disabled, allows remote attac…

  • Unscored —
    CVE-2009-4531 Public exploit

    httpdx 1.4.4 and earlier allows remote attackers to obtain the source code for a web page by appending a . (dot) charac…

  • Unscored —
    CVE-2009-4521 Public exploit

    Cross-site scripting (XSS) vulnerability in birt-viewer/run in Eclipse Business Intelligence and Reporting Tools (BIRT)…

  • Unscored —
    CVE-2009-4535 Public exploit

    Mongoose 2.8.0 and earlier allows remote attackers to obtain the source code for a web page by appending a / (slash) ch…

  • Unscored —
    CVE-2009-4498 Public exploit EPSS 32%

    The node_process_command function in Zabbix Server before 1.8 allows remote attackers to execute arbitrary commands via…

  • Unscored —
    CVE-2009-4499 Public exploit

    SQL injection vulnerability in the get_history_lastid function in the nodewatcher component in Zabbix Server before 1.6…

  • Unscored —
    CVE-2009-4501 Public exploit

    The zbx_get_next_field function in libs/zbxcommon/str.c in Zabbix Server before 1.6.8 allows remote attackers to cause …

  • Unscored —
    CVE-2009-4502 Public exploit EPSS 22%

    The NET_TCP_LISTEN function in net.c in Zabbix Agent before 1.6.7, when running on FreeBSD or Solaris, allows remote at…