sCORPINo VUPlayer 2.49 - '.asx' HREF Local Buffer Overflow (1)
local windows OSVDB-52015;CVE-2009-0174

Harm S.I. Vaittes Netgear WG102 - Leaks SNMP Write Password With Read Access
remote hardware OSVDB-55305

x0r Fast FAQs System - Authentication Bypass
webapps php

Patrick Webster PRTG Traffic Grapher 6.2.1 - 'url' Cross-Site Scripting
webapps java

Erik IBM Websphere DataPower XML Security Gateway 3.6.1 XS40 - Remote Denial of Service
dos multiple CVE-2009-0120;OSVDB-52605

Federico Muttis Openfire 3.6.2 - 'log.jsp' Directory Traversal
webapps jsp CVE-2009-0497;OSVDB-51426

Federico Muttis Openfire 3.6.2 - 'log.jsp' Cross-Site Scripting
webapps jsp CVE-2009-0496;OSVDB-51420

Federico Muttis Openfire 3.6.2 - 'user-properties.jsp' Cross-Site Scripting
webapps jsp CVE-2009-0496;OSVDB-51422

Federico Muttis Openfire 3.6.2 - 'group-summary.jsp' Cross-Site Scripting
webapps jsp CVE-2009-0496;OSVDB-51421

StAkeR XOOPS 2.3.2 - 'mydirname' PHP Remote Code Execution
webapps php OSVDB-51447;OSVDB-51446;OSVDB-51445;OSVDB-51444

darkjoker Pizzis CMS 1.5.1 - Blind SQL Injection
webapps php OSVDB-51307

Khashayar Fereidani PHP-Fusion Mod vArcade 1.8 - 'comment_id' SQL Injection
webapps php OSVDB-51997

DATA_SNIPER GOM Player 2.0.12.3375 - '.asx' Local Stack Overflow
local windows

StAkeR CuteNews 1.4.6 - 'ip ban' Authorized Cross-Site Scripting / Command Execution
webapps php OSVDB-51386;OSVDB-51385

stylextra tadbook2 Module for XOOPS - 'open_book.php' SQL Injection
webapps php OSVDB-106967

Michel Arboi Multiple CA Service Management Products - Remote Command Execution
remote windows CVE-2009-0043;OSVDB-51189