Br1ght D@rk Mambo Component SOBI2 RC 2.8.2 - SQL Injection
webapps php OSVDB-51795;CVE-2009-0380

SecureState MoinMoin 1.8 - 'AttachFile.py' Cross-Site Scripting
webapps cgi CVE-2009-0260;OSVDB-51485

Red Hat Apache JackRabbit 1.4/1.5 Content Repository (JCR) - 'swr.jsp?q' Cross-Site Scripting
webapps jsp CVE-2009-0026;OSVDB-51468

Red Hat Apache JackRabbit 1.4/1.5 Content Repository (JCR) - 'search.jsp?q' Cross-Site Scripting
webapps jsp CVE-2009-0026;OSVDB-51467

Osirys LinPHA Photo Gallery 2.0 - Remote Command Execution
webapps php

SirGod Max.Blog 1.0.6 - Arbitrary Delete Post
webapps php OSVDB-51482;CVE-2009-0383

InjEctOr5 Joomla! Component com_waticketsystem - Blind SQL Injection
webapps php OSVDB-51498;CVE-2009-0333

Osirys Gallery Kys 1.0 - Admin Password Disclosure / Persistent Cross-Site Scripting
webapps php

InjEctOr5 Joomla! Component com_pccookbook - 'recipe_id' Blind SQL Injection
webapps php OSVDB-51672;CVE-2009-0329

Jon Oberheide D-Bus Daemon < 1.2.4 - 'libdbus' Denial of Service
dos multiple CVE-2008-3834

Osirys Fhimage 1.2.1 - Remote Command Execution (mq = off)
webapps php OSVDB-51484

Osirys Fhimage 1.2.1 - Remote Index Change
webapps php OSVDB-51484

bd0rk ESPG (Enhanced Simple PHP Gallery) 1.72 - File Disclosure
webapps php OSVDB-51671;CVE-2009-0331

SuB-ZeRo Click&Email - Authentication Bypass
webapps php

Pouya_Server Blog Manager - 'categoryId' Cross-Site Scripting
webapps asp CVE-2009-0338;OSVDB-51618

Pouya_Server Blog Manager - 'ItemID' SQL Injection
webapps asp CVE-2009-0339;OSVDB-51617