Archive
May 2009
Vulnerabilities first published in this month (UTC), newest first.
364 results · Feed
-
Unscored —CVE-2009-1830 Public exploit
Stack-based buffer overflow in Soulseek 156 and 157 NS allows remote attackers to execute arbitrary code via a long sea…
-
Unscored —
Unspecified vulnerability in the PCNFSD dissector in Wireshark 0.8.20 through 1.0.7 allows remote attackers to cause a …
-
Unscored —
The Nullsoft Modern Skins Support module (gen_ff.dll) in Nullsoft Winamp before 5.552 allows remote attackers to execut…
-
Unscored —CVE-2009-1826 Public exploit
modules/admuser.php in myGesuad 0.9.14 (aka 0.9) does not require administrative authentication, which allows remote au…
-
Unscored —CVE-2009-1828 Public exploit
Mozilla Firefox 3.0.10 allows remote attackers to cause a denial of service (infinite loop, application hang, and memor…
-
Unscored —CVE-2009-1825 Public exploit
modules/admuser.php in myColex 1.4.2 does not require administrative authentication, which allows remote authenticated …
-
Unscored —CVE-2009-1827 Public exploit
The SVG component in Mozilla Firefox 3.0.4 allows remote attackers to cause a denial of service (application hang) via …
-
Unscored —
The system.openURL function in StoneTrip Ston3D StandalonePlayer (aka S3DPlayer StandAlone) 1.6.2.4 and 1.7.0.1 and Web…
-
High 8.8
Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 thr…
KEV May 20, 2026 -
Unscored —CVE-2009-1824 Public exploit
The ps_drv.sys kernel driver in ArcaBit ArcaVir 2009 Antivirus Protection 9.4.3201.9 and earlier, ArcaVir 2009 Internet…
-
Unscored —CVE-2009-1809 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in myColex 1.4.2 allow remote attackers to inject arbitrary web scr…
-
Unscored —CVE-2009-1812 Public exploit
Multiple SQL injection vulnerabilities in myGesuad 0.9.14 (aka 0.9) allow remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2009-1820 Public exploit
Cross-site scripting (XSS) vulnerability in product.php in 2daybiz Custom T-shirt Design Script allows remote attackers…
-
Unscored —CVE-2009-1822 Public exploit
Multiple PHP remote file inclusion vulnerabilities in the InterJoomla ArtForms (com_artforms) component 2.1b7 for Jooml…
-
Unscored —CVE-2009-1815 Public exploit
Stack-based buffer overflow in Sonic Spot Audioactive Player 1.93b allows remote attackers to execute arbitrary code vi…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Print (aka Printer, e-mail and PDF versions) module 5.x before 5.x-4.7 …
-
Unscored —CVE-2009-1816 Public exploit
SQL injection vulnerability in admin.php in My Game Script 2.0 allows remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2009-1818 Public exploit
SQL injection vulnerability in admin/admin_manager.asp in MaxCMS 2.0 allows remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2009-1813 Public exploit
Multiple SQL injection vulnerabilities in admin/index.php in Submitter Script 2 allow remote attackers to execute arbit…
-
Unscored —CVE-2009-1811 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in myGesuad 0.9.14 (aka 0.9) allow remote attackers to inject arbit…
-
Unscored —CVE-2009-1814 Public exploit
SQL injection vulnerability in mail.php in PHPenpals 1.1 and earlier allows remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2009-1817 Public exploit
Multiple buffer overflows in DigiMode Maya 1.0.2 allow remote attackers to execute arbitrary code via a long string in …
-
Unscored —CVE-2009-1810 Public exploit
Multiple SQL injection vulnerabilities in myColex 1.4.2 allow remote attackers to execute arbitrary SQL commands via (1…
-
Unscored —CVE-2009-1819 Public exploit
SQL injection vulnerability in product.php in 2daybiz Custom T-shirt Design Script allows remote attackers to execute a…
-
Unscored —CVE-2009-1821 Public exploit
DMXReady Registration Manager 1.1 stores sensitive information under the web root with insufficient access control, whi…
-
Unscored —
pam_krb5 2.2.14 through 2.3.4, as used in Red Hat Enterprise Linux (RHEL) 5, generates different password prompts depen…
-
Unscored —CVE-2009-1807 Public exploit
Unspecified vulnerability in Config.dll in Baofeng products 3.09.04.17 and earlier allows remote attackers to execute a…
-
Unscored —
Multiple buffer overflows in the cifs subsystem in the Linux kernel before 2.6.29.4 allow remote CIFS servers to cause …
-
Unscored —
The Apache HTTP Server 2.2.11 and earlier 2.2 versions does not properly handle Options=IncludesNOEXEC in the AllowOver…
-
Unscored —
Unspecified vulnerability in IBM Hardware Management Console (HMC) 7 release 3.4.0 SP2, when Active Memory Sharing is u…
-
Unscored —CVE-2009-1808 Public exploit
Microsoft Windows XP SP3 allows local users to cause a denial of service (system crash) by making an SPI_SETDESKWALLPAP…
-
Unscored —CVE-2008-6814 Public exploit
Unrestricted file upload vulnerability in image_upload.php in the SimpleBoard (com_simpleboard) component 1.0.1 and ear…
-
Unscored —CVE-2008-6815 Public exploit
mykdownload.php in MyKtools 2.4 does not require administrative authentication, which allows remote attackers to read a…
-
Unscored —
Eaton MGEOPS Network Shutdown Module before 3.10 Build 13 allows remote attackers to execute arbitrary code by adding a…
-
Unscored —
FreePBX 2.5.1, and other 2.4.x, 2.5.x, and pre-release 2.6.x versions, generates different error messages for a failed …
-
Unscored —CVE-2009-1804 Public exploit
Multiple SQL injection vulnerabilities in admin/index.php in VideoScript.us YouTube Video Script allow remote attackers…
-
Unscored —CVE-2009-1799 Public exploit
Multiple SQL injection vulnerabilities in the getGalleryImage function in st_admin/gallery_output.php in ST-Gallery 0.1…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in FreePBX 2.5.1, and other 2.4.x, 2.5.x, and pre-release 2.6.x ver…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in FreePBX 2.5.1, and other 2.4.x, 2.5.x, and pre-release 2.…
-
Unscored —
Stack-based buffer overflow in the Chinagames CGAgent ActiveX control 1.x in CGAgent.dll, as distributed in Chinagames …