Skip to content
OpenAdvisories

Archive

11 May 2009

Vulnerabilities first published on this day (UTC), newest first.

← April 2009 2009 / May /11 June 2009 →
  1. 133
  2. 2 
  3. 3 
  4. 411
  5. 517
  6. 619
  7. 719
  8. 85
  9. 9 
  10. 10 
  11. 1127
  12. 1227
  13. 1320
  14. 1412
  15. 1512
  16. 168
  17. 1712
  18. 1813
  19. 195
  20. 2013
  21. 2118
  22. 2231
  23. 23 
  24. 24 
  25. 25 
  26. 2617
  27. 275
  28. 2815
  29. 2925
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium —
    CVE-2009-1595 Public exploit

    Ignite Realtime Openfire Allows Users to Change Passwords of Arbitrary Accounts

    The jabber:iq:auth implementation in IQAuthHandler.java in Ignite Realtime Openfire before 3.6.4 allows remote authenticated users to change the passwords of arbitrary accounts via a modified username element in a passwd_change action.

    org.igniterealtime.openfire:parent Maven