Skip to content
OpenAdvisories

Archive

May 2009

Vulnerabilities first published in this month (UTC), newest first.

← April 2009 2009 / May June 2009 →
  1. 133
  2. 2 
  3. 3 
  4. 411
  5. 517
  6. 619
  7. 719
  8. 85
  9. 9 
  10. 10 
  11. 1127
  12. 1227
  13. 1320
  14. 1412
  15. 1512
  16. 168
  17. 1712
  18. 1813
  19. 195
  20. 2013
  21. 2118
  22. 2231
  23. 23 
  24. 24 
  25. 25 
  26. 2617
  27. 275
  28. 2815
  29. 2925
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium —
    CVE-2009-1595 Public exploit

    Ignite Realtime Openfire Allows Users to Change Passwords of Arbitrary Accounts

    The jabber:iq:auth implementation in IQAuthHandler.java in Ignite Realtime Openfire before 3.6.4 allows remote authenticated users to change the passwords of arbitrary accounts via a modified username element in a passwd_change action.

    org.igniterealtime.openfire:parent Maven
  • Medium 5.3
    CVE-2009-1523 Public exploit EPSS 26%

    Directory traversal in Mort Bay Jetty

    Directory traversal vulnerability in the HTTP server in Mort Bay Jetty 5.1.14, 6.x before 6.1.17, and 7.x through 7.0.0.M2 allows remote attackers to access arbitrary files via directory traversal sequences in the URI.

    org.mortbay.jetty:jetty Maven