Skip to content
OpenAdvisories

Archive

December 2009

Vulnerabilities first published in this month (UTC), newest first.

← November 2009 2009 / December January 2010 →
  1. 17
  2. 235
  3. 312
  4. 421
  5. 5 
  6. 6 
  7. 711
  8. 821
  9. 914
  10. 1036
  11. 116
  12. 12 
  13. 1310
  14. 1412
  15. 156
  16. 1623
  17. 1730
  18. 1814
  19. 19 
  20. 204
  21. 2126
  22. 2225
  23. 2316
  24. 2416
  25. 25 
  26. 26 
  27. 27 
  28. 2823
  29. 2913
  30. 3030
  31. 3129
All Critical High Medium Low Exploited only Public exploit

440 results · Feed

  • Unscored —
    CVE-2009-4007

    Unspecified vulnerability in the NormaliseTrainConsist function in src/train_cmd.cpp in OpenTTD before 0.7.5-RC1 allows…

    openttd Debian
  • Unscored —
    CVE-2009-4435 Public exploit

    Multiple directory traversal vulnerabilities in F3Site 2009 allow remote attackers to include and execute arbitrary loc…

  • Unscored —
    CVE-2009-4433 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in IDevSpot iSupport 1.8 and earlier allow remote attackers to inje…

  • Unscored —
    CVE-2009-4431 Public exploit

    PHP remote file inclusion vulnerability in cal_popup.php in the Anything Digital Development JCal Pro (aka com_jcalpro …

  • Unscored —
    CVE-2009-4429 Public exploit

    Cross-site scripting (XSS) vulnerability in the Sections module 5.x before 5.x-1.3 and 6.x before 6.x-1.3 for Drupal al…

  • Unscored —
    CVE-2009-4425

    Cross-site scripting (XSS) vulnerability in index.php in iDevCart 1.09 allows remote attackers to inject arbitrary web …

  • Unscored —
    CVE-2009-4424 Public exploit

    SQL injection vulnerability in results.php in the Pyrmont plugin 2 for WordPress allows remote attackers to execute arb…

  • Unscored —
    CVE-2009-4436 Public exploit

    Multiple SQL injection vulnerabilities in Active Web Softwares eWebquiz 8 allow remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2009-4428 Public exploit

    SQL injection vulnerability in the JoomPortfolio (com_joomportfolio) component 1.0.0 for Joomla! allows remote attacker…

  • Unscored —
    CVE-2009-4432 Public exploit

    SQL injection vulnerability in index.php in CodeMight VideoCMS 3.1 allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2009-4427 Public exploit

    Directory traversal vulnerability in cmd.php in phpLDAPadmin 1.1.0.5 allows remote attackers to include and execute arb…

    phpldapadmin Debian
  • Unscored —
    CVE-2009-4426 Public exploit

    Multiple directory traversal vulnerabilities in Ignition 1.2, when magic_quotes_gpc is disabled, allow remote attackers…

  • Unscored —
    CVE-2009-4434 Public exploit

    Directory traversal vulnerability in index.php in IDevSpot iSupport 1.8 and earlier allows remote attackers to read arb…

  • Unscored —
    CVE-2009-4437 Public exploit

    Multiple SQL injection vulnerabilities in Active Auction House 3.6 allow remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2009-4430 Public exploit

    SQL injection vulnerability in index.php in VirtueMart 1.0 allows remote attackers to execute arbitrary SQL commands vi…

  • Unscored —
    CVE-2009-4422

    Multiple cross-site scripting (XSS) vulnerabilities in the GetURLArguments function in jpgraph.php in Aditus Consulting…

  • Unscored —
    CVE-2009-4423 Public exploit

    SQL injection vulnerability in index.php in weenCompany 4.0.0 allows remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2009-4420

    Buffer overflow in the bd daemon in F5 Networks BIG-IP Application Security Manager (ASM) 9.4.4 through 9.4.7 and 10.0.…

  • Unscored —
    CVE-2009-4419

    Intel Q35, GM45, PM45 Express, Q45, and Q43 Express chipsets in the SINIT Authenticated Code Module (ACM), which allows…

  • Unscored —
    CVE-2009-4418

    The unserialize function in PHP 5.3.0 and earlier allows context-dependent attackers to cause a denial of service (reso…

  • Unscored —
    CVE-2009-4421 Public exploit

    Directory traversal vulnerability in languages_cgi.php in Simple PHP Blog 0.5.1 and earlier allows remote authenticated…

  • Unscored —
    CVE-2009-4417

    The shutdown function in the Zend_Log_Writer_Mail class in Zend Framework (ZF) allows context-dependent attackers to se…

  • Unscored —
    CVE-2009-4137 Public exploit EPSS 17%

    The loadContentFromCookie function in core/Cookie.php in Piwik before 0.5 does not validate strings obtained from cooki…

  • Unscored —
    CVE-2009-4411

    The (1) setfacl and (2) getfacl commands in XFS acl 2.2.47, when running in recursive (-R) mode, follow symbolic links …

    acl Debian
  • Unscored —
    CVE-2009-4412

    Unrestricted file upload vulnerability in Serendipity before 1.5 allows remote authenticated users to execute arbitrary…

  • Unscored —
    CVE-2009-4410

    The fuse_ioctl_copy_user function in the ioctl handler in fs/fuse/file.c in the Linux kernel 2.6.29-rc1 through 2.6.30.…

  • Unscored —
    CVE-2009-4413 Public exploit

    The httpClientDiscardBody function in client.c in Polipo 0.9.8, 0.9.12, 1.0.4, and possibly other versions, allows remo…

  • Unscored —
    CVE-2009-4414

    SQL injection vulnerability in phpgwapi /inc/class.auth_sql.inc.php in phpGroupWare 0.9.16.12, and possibly other versi…

  • Unscored —
    CVE-2009-4416

    Cross-site scripting (XSS) vulnerability in login.php in phpGroupWare 0.9.16.12, and possibly other versions before 0.9…

  • Unscored —
    CVE-2009-4415

    Multiple directory traversal vulnerabilities in phpGroupWare 0.9.16.12, and possibly other versions before 0.9.16.014, …

  • Unscored —
    CVE-2009-3305 Public exploit EPSS 10%

    Polipo 1.0.4, and possibly other versions, allows remote attackers to cause a denial of service (crash) via a request w…

  • High 7.5
    CVE-2009-4405

    Trac is vulnerable to improper policy checks and missing 'raw' role check in docutils

    Multiple unspecified vulnerabilities in Trac before 0.11.6 have unknown impact and attack vectors, possibly related to (1) "policy checks in report results when using alternate formats" or (2) a "check for the 'raw' role that is missing in docutils < 0.6."

    trac trac Debian PyPI
  • Unscored —
    CVE-2009-4407

    Multiple cross-site request forgery (CSRF) vulnerabilities in PyForum 1.0.3 and possibly earlier versions, and possibly…

  • Unscored —
    CVE-2009-4409

    The (1) CHAP and (2) MS-CHAP-V2 authentication capabilities in the PPP Access Concentrator (PPPAC) function in Internet…

  • Unscored —
    CVE-2009-4408

    Multiple cross-site scripting (XSS) vulnerabilities in models.parser in PyForum 1.0.3 and possibly earlier versions, an…

  • Unscored —
    CVE-2009-4406

    Cross-site scripting (XSS) vulnerability in Forms/login1 in American Power Conversion (APC) Switched Rack PDU AP7932 B2…

  • Unscored —
    CVE-2009-4145

    nm-connection-editor in NetworkManager (NM) 0.7.x exports connection objects over D-Bus upon actions in the connection …

    network-manager-applet Debian
  • Unscored —
    CVE-2009-4144

    NetworkManager (NM) 0.7.2 does not ensure that the configured Certification Authority (CA) certificate file for a (1) W…

    network-manager-applet Debian
  • Unscored —
    CVE-2009-4133

    Condor 6.5.4 through 7.2.4, 7.3.x, and 7.4.0, as used in MRG, Grid for MRG, and Grid Execute Node for MRG, allows remot…

  • Unscored —
    CVE-2009-4403 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Rumba XML 1.8 allows remote attackers to inject arbitrary web …