Skip to content
OpenAdvisories

Archive

January 2010

Vulnerabilities first published in this month (UTC), newest first.

← December 2009 2010 / January February 2010 →
  1. 1 
  2. 2 
  3. 3 
  4. 428
  5. 57
  6. 615
  7. 720
  8. 88
  9. 96
  10. 10 
  11. 11 
  12. 1214
  13. 1350
  14. 1413
  15. 1537
  16. 16 
  17. 17 
  18. 1816
  19. 197
  20. 2011
  21. 2119
  22. 2212
  23. 23 
  24. 24 
  25. 2518
  26. 266
  27. 272
  28. 2822
  29. 298
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

118 results · Clear filters · Feed

  • Unscored —
    CVE-2009-4497 Public exploit

    Cross-site scripting (XSS) vulnerability in LXR Cross Referencer 0.9.5 and 0.9.6 allows remote attackers to inject arbi…

  • Unscored —
    CVE-2009-4587 Public exploit

    Cherokee Web Server 0.5.4 allows remote attackers to cause a denial of service (daemon crash) via an MS-DOS reserved wo…

  • Unscored —
    CVE-2009-4588 Public exploit EPSS 32%

    Heap-based buffer overflow in the WindsPlayerIE.View.1 ActiveX control in WindsPly.ocx 3.5.0.0 Beta, 3.0.0.5, and earli…

  • Unscored —
    CVE-2010-0158 Public exploit

    SQL injection vulnerability in the JoomlaBamboo (JB) Simpla Admin template for Joomla! allows remote attackers to execu…

  • Unscored —
    CVE-2010-0157 Public exploit Scanner template EPSS 13%

    Directory traversal vulnerability in the Bible Study (com_biblestudy) component 6.1 for Joomla! allows remote attackers…

  • Unscored —
    CVE-2009-4575 Public exploit

    Cross-site scripting (XSS) vulnerability in the Q-Personel (com_qpersonel) component 1.0.2 RC2 for Joomla! allows remot…

  • Unscored —
    CVE-2009-4583 Public exploit

    SQL injection vulnerability in the DhForum (com_dhforum) component for Joomla! allows remote attackers to execute arbit…

  • Unscored —
    CVE-2009-4576 Public exploit

    SQL injection vulnerability in the BeeHeard (com_beeheard) component 1.x for Joomla! allows remote attackers to execute…

  • Unscored —
    CVE-2009-4574 Public exploit

    SQL injection vulnerability in country_escorts.php in I-Escorts Directory Script allows remote attackers to execute arb…

  • Unscored —
    CVE-2009-4582 Public exploit

    SQL injection vulnerability in detail.php in the Dictionary module for XOOPS 2.0.18 allows remote attackers to execute …

  • Unscored —
    CVE-2009-4585 Public exploit

    UranyumSoft Listing Service stores sensitive information under the web root with insufficient access control, which all…

  • Unscored —
    CVE-2009-4581 Public exploit

    Directory traversal vulnerability in modules/admincp.php in RoseOnlineCMS 3 B1 and earlier, when magic_quotes_gpc is di…

  • Unscored —
    CVE-2009-4578 Public exploit

    Cross-site scripting (XSS) vulnerability in the Facileforms (com_facileforms) component for Joomla! and Mambo allows re…

  • Unscored —
    CVE-2009-4567 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in editprofile.php in Viscacha 0.8 Gold allow remote authenticated …

  • Unscored —
    CVE-2009-4569 Public exploit

    SQL injection vulnerability in elkagroup Image Gallery allows remote attackers to execute arbitrary SQL commands via th…

  • Unscored —
    CVE-2009-4571 Public exploit

    Multiple SQL injection vulnerabilities in index.php in PhpShop 0.8.1 allow remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2009-4566 Public exploit

    SQL injection vulnerability in index.php in Zenphoto 1.2.5 allows remote attackers to execute arbitrary SQL commands vi…

  • Unscored —
    CVE-2009-4561 Public exploit

    Multiple SQL injection vulnerabilities in Admin/index.php in WebLeague 2.2.0, when magic_quotes_gpc is disabled, allow …

  • Unscored —
    CVE-2009-4556 Public exploit

    Quick Heal AntiVirus Plus 2009 10.00 SP1 and Quick Heal Total Security 2009 10.00 SP1 use weak permissions (Everyone: F…

  • Unscored —
    CVE-2009-4554 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Snitz Forums 2000 3.4.07 allow remote attackers to inject arbitr…

  • Unscored —
    CVE-2009-4563 Public exploit

    Cross-site request forgery (CSRF) vulnerability in zp-core/admin-options.php in Zenphoto 1.2.5 allows remote attackers …

  • Unscored —
    CVE-2009-4560 Public exploit

    SQL injection vulnerability in profile.php in WebLeague 2.2.0 allows remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2009-4562 Public exploit

    Cross-site scripting (XSS) vulnerability in zp-core/admin.php in Zenphoto 1.2.5 allows remote attackers to inject arbit…

  • Unscored —
    CVE-2009-4564 Public exploit

    SQL injection vulnerability in index.php in Zenphoto 1.2.5, when the ZenPage plugin is enabled, allows remote attackers…

  • Unscored —
    CVE-2009-4546 Public exploit

    globepersonnel_login.asp in Logoshows BBS 2.0 allows remote attackers to bypass authentication and gain administrative …

  • Unscored —
    CVE-2009-4542 Public exploit

    Cross-site scripting (XSS) vulnerability in newticket.php in IsolSoft Support Center 2.5 allows remote attackers to inj…

  • Unscored —
    CVE-2009-4551 Public exploit

    SQL injection vulnerability in the Survey Pro module for Miniweb 2.0 allows remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2009-4550 Public exploit

    SQL injection vulnerability in the Kunena Forum (com_kunena) component 1.5.3 and 1.5.4 for Joomla! allows remote attack…

  • Unscored —
    CVE-2009-4543 Public exploit

    PHP remote file inclusion vulnerability in index.php in Cromosoft Technologies Facil Helpdesk 2.3 Lite allows remote at…

  • Unscored —
    CVE-2009-4548 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in ViArt Helpdesk 3.x allow remote attackers to inject arbitrary we…

  • Unscored —
    CVE-2009-4540 Public exploit

    SQL injection vulnerability in page.php in Mini CMS 1.0.1 allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2009-4541 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in IsolSoft Support Center 2.5 allow remote attackers to execute arb…

  • Unscored —
    CVE-2009-4552 Public exploit

    Cross-site scripting (XSS) vulnerability in the Survey Pro module for Miniweb 2.0 allows remote attackers to inject arb…

  • Unscored —
    CVE-2009-4545 Public exploit

    Logoshows BBS 2.0 stores sensitive information under the web root with insufficient access control, which allows remote…

  • Unscored —
    CVE-2009-4544 Public exploit

    Cross-site scripting (XSS) vulnerability in kbase/kbase.php in Cromosoft Technologies Facil Helpdesk 2.3 Lite allows re…

  • Unscored —
    CVE-2009-4547 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in ViArt CMS 3.x allow remote attackers to inject arbitrary web scr…

  • Unscored —
    CVE-2009-4553 Public exploit

    Stack-based buffer overflow in iRehearse allows remote attackers to cause a denial of service (application crash) or po…

  • Unscored —
    CVE-2009-4549 Public exploit

    Stack-based buffer overflow in A2 Media Player Pro 2.51 allows remote attackers to execute arbitrary code via a long st…