Skip to content
OpenAdvisories

Archive

4 January 2010

Vulnerabilities first published on this day (UTC), newest first.

← December 2009 2010 / January /4 February 2010 →
  1. 1 
  2. 2 
  3. 3 
  4. 428
  5. 57
  6. 615
  7. 720
  8. 88
  9. 96
  10. 10 
  11. 11 
  12. 1214
  13. 1350
  14. 1413
  15. 1537
  16. 16 
  17. 17 
  18. 1816
  19. 197
  20. 2011
  21. 2119
  22. 2212
  23. 23 
  24. 24 
  25. 2518
  26. 266
  27. 272
  28. 2822
  29. 298
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

28 results · Feed

  • Unscored —
    CVE-2009-4565

    sendmail before 8.14.4 does not properly handle a '\0' character in a Common Name (CN) field of an X.509 certificate, w…

    sendmail Debian
  • Unscored —
    CVE-2009-4566 Public exploit

    SQL injection vulnerability in index.php in Zenphoto 1.2.5 allows remote attackers to execute arbitrary SQL commands vi…

  • Unscored —
    CVE-2009-4561 Public exploit

    Multiple SQL injection vulnerabilities in Admin/index.php in WebLeague 2.2.0, when magic_quotes_gpc is disabled, allow …

  • Unscored —
    CVE-2009-4556 Public exploit

    Quick Heal AntiVirus Plus 2009 10.00 SP1 and Quick Heal Total Security 2009 10.00 SP1 use weak permissions (Everyone: F…

  • Unscored —
    CVE-2009-4554 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Snitz Forums 2000 3.4.07 allow remote attackers to inject arbitr…

  • Unscored —
    CVE-2009-4557

    Cross-site scripting (XSS) vulnerability in the Image Assist module 5.x-1.x before 5.x-1.8, 5.x-2.x before 2.0-alpha4, …

    Web / CMS
  • Unscored —
    CVE-2009-4563 Public exploit

    Cross-site request forgery (CSRF) vulnerability in zp-core/admin-options.php in Zenphoto 1.2.5 allows remote attackers …

  • Unscored —
    CVE-2009-4559

    Cross-site scripting (XSS) vulnerability in the Submitted By module 6.x before 6.x-1.3 for Drupal allows remote authent…

  • Unscored —
    CVE-2009-4560 Public exploit

    SQL injection vulnerability in profile.php in WebLeague 2.2.0 allows remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2009-4558

    The Image Assist module 5.x-1.x before 5.x-1.8, 5.x-2.x before 2.0-alpha4, 6.x-1.x before 6.x-1.1, 6.x-2.x before 2.0-a…

    Web / CMS
  • Unscored —
    CVE-2009-4555

    Multiple cross-site request forgery (CSRF) vulnerabilities in AgoraCart 5.2.005 and 5.2.006 and AgoraCart GOLD 5.5.005 …

  • Unscored —
    CVE-2009-4562 Public exploit

    Cross-site scripting (XSS) vulnerability in zp-core/admin.php in Zenphoto 1.2.5 allows remote attackers to inject arbit…

  • Unscored —
    CVE-2009-4564 Public exploit

    SQL injection vulnerability in index.php in Zenphoto 1.2.5, when the ZenPage plugin is enabled, allows remote attackers…

  • Unscored —
    CVE-2009-4546 Public exploit

    globepersonnel_login.asp in Logoshows BBS 2.0 allows remote attackers to bypass authentication and gain administrative …

  • Unscored —
    CVE-2009-4542 Public exploit

    Cross-site scripting (XSS) vulnerability in newticket.php in IsolSoft Support Center 2.5 allows remote attackers to inj…

  • Unscored —
    CVE-2009-4551 Public exploit

    SQL injection vulnerability in the Survey Pro module for Miniweb 2.0 allows remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2009-4550 Public exploit

    SQL injection vulnerability in the Kunena Forum (com_kunena) component 1.5.3 and 1.5.4 for Joomla! allows remote attack…

  • Unscored —
    CVE-2009-4543 Public exploit

    PHP remote file inclusion vulnerability in index.php in Cromosoft Technologies Facil Helpdesk 2.3 Lite allows remote at…

  • Unscored —
    CVE-2009-4548 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in ViArt Helpdesk 3.x allow remote attackers to inject arbitrary we…

  • Unscored —
    CVE-2009-4540 Public exploit

    SQL injection vulnerability in page.php in Mini CMS 1.0.1 allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2009-4541 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in IsolSoft Support Center 2.5 allow remote attackers to execute arb…

  • Unscored —
    CVE-2009-4552 Public exploit

    Cross-site scripting (XSS) vulnerability in the Survey Pro module for Miniweb 2.0 allows remote attackers to inject arb…

  • Unscored —
    CVE-2009-4539

    Cross-site scripting (XSS) vulnerability in main.php in SQLiteManager 1.2.0 allows remote attackers to inject arbitrary…

  • Unscored —
    CVE-2009-4545 Public exploit

    Logoshows BBS 2.0 stores sensitive information under the web root with insufficient access control, which allows remote…

  • Unscored —
    CVE-2009-4544 Public exploit

    Cross-site scripting (XSS) vulnerability in kbase/kbase.php in Cromosoft Technologies Facil Helpdesk 2.3 Lite allows re…

  • Unscored —
    CVE-2009-4547 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in ViArt CMS 3.x allow remote attackers to inject arbitrary web scr…

  • Unscored —
    CVE-2009-4553 Public exploit

    Stack-based buffer overflow in iRehearse allows remote attackers to cause a denial of service (application crash) or po…

  • Unscored —
    CVE-2009-4549 Public exploit

    Stack-based buffer overflow in A2 Media Player Pro 2.51 allows remote attackers to execute arbitrary code via a long st…