Skip to content
OpenAdvisories

Archive

16 June 2009

Vulnerabilities first published on this day (UTC), newest first.

← May 2009 2009 / June /16 July 2009 →
  1. 120
  2. 216
  3. 313
  4. 417
  5. 525
  6. 612
  7. 7 
  8. 815
  9. 919
  10. 1066
  11. 1121
  12. 1224
  13. 13 
  14. 14 
  15. 1517
  16. 1618
  17. 1713
  18. 1814
  19. 1925
  20. 20 
  21. 21 
  22. 2231
  23. 2318
  24. 2412
  25. 2513
  26. 2617
  27. 2715
  28. 28 
  29. 29 
  30. 309
All Critical High Medium Low Exploited only Public exploit

18 results · Feed

  • Unscored —
    CVE-2009-1389

    Buffer overflow in the RTL8169 NIC driver (drivers/net/r8169.c) in the Linux kernel before 2.6.30 allows remote attacke…

  • Unscored —
    CVE-2009-1719

    The Aqua Look and Feel for Java implementation in Java 1.5 on Mac OS X 10.5 allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2009-1761

    The message engine in CA ARCserve Backup r12.0 and r12.0 SP1 for Windows allows remote attackers to cause a denial of s…

  • Unscored —
    CVE-2009-1391 Public exploit

    Off-by-one error in the inflate function in Zlib.xs in Compress::Raw::Zlib Perl module before 2.017, as used in AMaViS,…

    perl libcompress-raw-zlib-perl Debian
  • Unscored —
    CVE-2009-2084

    Simple Linux Utility for Resource Management (SLURM) 1.2 and 1.3 before 1.3.14 does not properly set supplementary grou…

  • Medium 5.3
    CVE-2008-5515 EPSS 19%

    Directory Traversal in Apache Tomcat

    Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, 6.0.0 through 6.0.18, and possibly earlier versions normalizes the target pathname before filtering the query string when using the RequestDispatcher method, which allows remote attackers to bypass int…

    org.apache.tomcat:tomcat Maven
  • Unscored —
    CVE-2009-1390

    Mutt 1.5.19, when linked against (1) OpenSSL (mutt_ssl.c) or (2) GnuTLS (mutt_ssl_gnutls.c), allows connections when on…

    mutt Debian
  • Unscored —
    CVE-2009-2082

    SQL injection vulnerability in insidepage.php in Creative Web Solutions Multi-Level CMS 1.21 allows remote attackers to…

  • Unscored —
    CVE-2009-2083

    Cross-site scripting (XSS) vulnerability in the term data detail page in Taxonomy manager 5.x before 5.x-1.2, a module …

    Web / CMS
  • Unscored —
    CVE-2009-2011 Public exploit EPSS 40%

    Worldweaver DX Studio Player 3.0.29.0, 3.0.22.0, 3.0.12.0, and probably other versions before 3.0.29.1, when used as a …

  • Unscored —
    CVE-2009-2078

    Multiple cross-site scripting (XSS) vulnerabilities in Booktree 5.x before 5.x-7.3 and 6.x before 6.x-1.1, a module for…

    Web / CMS
  • Unscored —
    CVE-2009-2081 Public exploit

    Directory traversal vulnerability in help.php in phpWebThings 1.5.2 and earlier, when magic_quotes_gpc is disabled, all…

  • Unscored —
    CVE-2009-2076

    Cross-site scripting (XSS) vulnerability in Views 6.x before 6.x-2.6, a module for Drupal, allows remote authenticated …

    Web / CMS
  • Unscored —
    CVE-2009-2080 Public exploit

    admin.php in MRCGIGUY The Ticket System 2.0 does not properly restrict access, which allows remote attackers to (1) obt…

  • Unscored —
    CVE-2009-2077

    Drupal 6.x before 6.x-2.6, a module for Drupal, allows remote authenticated users to bypass access restrictions and (1)…

    Web / CMS
  • Unscored —
    CVE-2009-2074

    Cross-site scripting (XSS) vulnerability in Nodequeue 5.x before 5.x-2.7 and 6.x before 6.x-2.2, a module for Drupal, a…

    Web / CMS
  • Unscored —
    CVE-2009-2079

    Cross-site scripting (XSS) vulnerability in the administrative page interface in Taxonomy manager 5.x before 5.x-1.2 an…

    Web / CMS
  • Unscored —
    CVE-2009-2075

    Nodequeue 5.x before 5.x-2.7 and 6.x before 6.x-2.2, a module for Drupal, does not properly restrict access when displa…

    Web / CMS