Skip to content
OpenAdvisories

Archive

1 June 2009

Vulnerabilities first published on this day (UTC), newest first.

20 results · Feed

  • Unscored —

    The default configuration of Sun ONE/iPlanet Web Server 4.1 SP1 through SP12 and 6.0 SP1 through SP5 responds to the HT…

  • Unscored —

    The PointBase 4.6 database component in the J2EE 1.4 reference implementation (J2EE/RI) allows remote attackers to exec…

  • Unscored —

    Sun Java Media Framework (JMF) 2.1.1 through 2.1.1c allows unsigned applets to cause a denial of service (JVM crash) an…

  • Unscored —

    win32k.sys in Microsoft Windows Server 2003 and Vista allows local users to cause a denial of service (system crash) vi…

  • Unscored —
    CVE-2009-1850 Public exploit

    SQL injection vulnerability in index.php in phpBugTracker 1.0.3 allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2009-1847 Public exploit

    Directory traversal vulnerability in index.php in Easy PX 41 CMS 9.0 B1 allows remote attackers to include and execute …

  • Unscored —
    CVE-2009-1854 Public exploit

    Million Dollar Text Links 1.0 allows remote attackers to bypass authentication and gain administrative access by settin…

  • Unscored —

    Unspecified vulnerability in the VMware Descheduled Time Accounting driver in VMware Workstation 6.5.1 and earlier, VMw…

  • Unscored —
    CVE-2009-1852 Public exploit

    Multiple SQL injection vulnerabilities in Graphiks MyForum 1.3 allow remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2009-1845 Public exploit

    Cross-site scripting (XSS) vulnerability in ajax/updatecheck.php in Lussumo Vanilla 1.1.5 and 1.1.7 allows remote attac…

  • Unscored —
    CVE-2009-1848 Public exploit

    SQL injection vulnerability in the JoomlaMe AgoraGroups (aka AG or com_agoragroup) component 0.3.5.3 for Joomla! allows…

  • Unscored —
    CVE-2009-1846 Public exploit

    Multiple directory traversal vulnerabilities in SiteX 0.7.4 Build 418 and earlier allow remote attackers to include and…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the Monitor_Bandwidth function in PRTG Traffic Grapher 6.2.2.977 and earlie…

  • Unscored —

    SQL injection vulnerability in include.php in phpBugTracker 1.0.4 and earlier allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2009-1853 Public exploit

    Multiple SQL injection vulnerabilities in index.php in Kensei Board 2.0 BETA (aka 2.0.0b) and earlier allow remote atta…

  • Unscored —

    Mole Group Lastminute Script 4.0 and earlier stores passwords in cleartext, which allows context-dependent attackers to…

  • Unscored —

    Mole Group Real Estate Script 1.1 and earlier stores passwords in cleartext, which allows context-dependent attackers t…

  • Unscored —
    CVE-2009-1842 Public exploit

    SQL injection vulnerability in main/tracking/userLog.php in Francisco Burzi PHP-Nuke 8.0 allows remote attackers to exe…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Drupal 5.x before 5.18 and 6.x before 6.12 allow (1) remote auth…

  • Unscored —
    CVE-2009-1843 Public exploit

    Multiple SQL injection vulnerabilities in Flash Quiz Beta 2 allow remote attackers to execute arbitrary SQL commands vi…