Skip to content
OpenAdvisories

Archive

June 2009

Vulnerabilities first published in this month (UTC), newest first.

← May 2009 2009 / June July 2009 →
  1. 120
  2. 216
  3. 313
  4. 417
  5. 525
  6. 612
  7. 7 
  8. 815
  9. 919
  10. 1066
  11. 1121
  12. 1224
  13. 13 
  14. 14 
  15. 1517
  16. 1618
  17. 1713
  18. 1814
  19. 1925
  20. 20 
  21. 21 
  22. 2231
  23. 2318
  24. 2412
  25. 2513
  26. 2617
  27. 2715
  28. 28 
  29. 29 
  30. 309
All Critical High Medium Low Exploited only Public exploit

450 results · Feed

  • Unscored —
    CVE-2009-2130 Public exploit

    Elvin 1.2.0 allows remote attackers to read the PHP source code of (1) login.ei, (2) jump_bug.ei, or (3) create_account…

  • Unscored —
    CVE-2009-2123 Public exploit

    Multiple SQL injection vulnerabilities in Elvin 1.2.0 allow remote attackers to execute arbitrary SQL commands via the …

  • Unscored —
    CVE-2009-2131 Public exploit

    Cross-site scripting (XSS) vulnerability in 4images 1.7.7 and earlier allows remote authenticated users to inject arbit…

  • Unscored —
    CVE-2009-2132 Public exploit

    Directory traversal vulnerability in global.php in 4images before 1.7.7, when magic_quotes_gpc is disabled, allows remo…

  • Unscored —
    CVE-2009-2124 Public exploit

    Directory traversal vulnerability in page.php in Elvin 1.2.0 allows remote attackers to include and execute arbitrary l…

  • Unscored —
    CVE-2009-2125

    delete_bug.php in Elvin before 1.2.1 does not require administrative privileges, which allows remote authenticated user…

  • Unscored —
    CVE-2009-2127 Public exploit

    Cross-site scripting (XSS) vulnerability in show_activity.php in Elvin 1.2.0 allows remote attackers to inject arbitrar…

  • Unscored —
    CVE-2009-2126

    Cross-site scripting (XSS) vulnerability in close_bug.php in Elvin before 1.2.1 allows remote attackers to inject arbit…

  • Unscored —
    CVE-2009-2128

    SQL injection vulnerability in close_bug.php in Elvin before 1.2.1 allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2009-2122 Public exploit

    SQL injection vulnerability in viewimg.php in the Paolo Palmonari Photoracer plugin 1.0 for WordPress allows remote att…

  • Unscored —
    CVE-2009-2129 Public exploit

    Cross-site request forgery (CSRF) vulnerability in login.php in Elvin 1.2.0 allows remote attackers to hijack the authe…

  • Unscored —
    CVE-2009-2133 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Pivot 1.40.4 and 1.40.7 allow remote attackers to inject arbitra…

  • Unscored —
    CVE-2009-0961 Public exploit

    The Mail component in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 dismisses the ca…

  • Unscored —
    CVE-2009-0959

    The MPEG-4 video codec in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 allows remot…

  • Unscored —
    CVE-2009-0960

    The Mail component in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 does not provide…

  • Unscored —
    CVE-2009-0958

    Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 stores an exception for a hostname whe…

  • Unscored —
    CVE-2009-1692

    WebKit before r41741, as used in Apple iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Safari,…

  • Unscored —
    CVE-2009-1683

    The Telephony component in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 allows remo…

  • Unscored —
    CVE-2009-1680

    Safari in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly clear the …

  • Unscored —
    CVE-2009-1679

    The Profiles component in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1, when instal…

  • Unscored —
    CVE-2009-2116 Public exploit

    Directory traversal vulnerability in admin.php in SkyBlueCanvas 1.1 r237 allows remote authenticated administrators to …

  • Unscored —
    CVE-2009-2110 Public exploit

    Multiple directory traversal vulnerabilities in DB Top Sites 1.0, when magic_quotes_gpc is disabled, allow remote attac…

  • Unscored —
    CVE-2009-2114 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in admin.php in SkyBlueCanvas 1.1 r237 allow remote attackers to in…

  • Unscored —
    CVE-2009-2119

    Cross-site scripting (XSS) vulnerability in the login interface (my.logon.php3) in F5 FirePass SSL VPN 5.5 through 5.5.…

  • Unscored —
    CVE-2009-2115

    admin.php in SkyBlueCanvas 1.1 r237 allows remote authenticated administrators to obtain sensitive information via an i…

  • Unscored —
    CVE-2009-2118

    Integer overflow in IrfanView 4.23, when the resampling or screen fitting option is enabled, allows remote attackers to…

  • Unscored —
    CVE-2009-2113 Public exploit

    Multiple SQL injection vulnerabilities in FretsWeb 1.2 allow remote attackers to execute arbitrary SQL commands via the…

  • Unscored —
    CVE-2009-2109 Public exploit

    Multiple directory traversal vulnerabilities in FretsWeb 1.2 allow remote attackers to read arbitrary files via directo…

  • Unscored —
    CVE-2009-2112 Public exploit

    Directory traversal vulnerability in include/page_bottom.php in phpFK 7.03 allows remote attackers to include and execu…

  • Unscored —
    CVE-2009-2120 Public exploit

    Multiple SQL injection vulnerabilities in TekBase All-in-One 3.1 allow remote authenticated users to execute arbitrary …

  • Unscored —
    CVE-2009-2111 Public exploit

    Static code injection vulnerability in add_reg.php in DB Top Sites 1.0 allows remote attackers to inject arbitrary PHP …

  • Unscored —
    CVE-2009-2117 Public exploit

    uye_paneli.php in phPortal 1.0 allows remote attackers to bypass authentication and obtain administrative access by set…

  • Unscored —
    CVE-2009-1935

    Integer overflow in the pipe_build_write_buffer function (sys/kern/sys_pipe.c) in the direct write optimization feature…

  • Unscored —
    CVE-2009-2108 Public exploit

    git-daemon in git 1.4.4.5 through 1.6.3 allows remote attackers to cause a denial of service (infinite loop and CPU con…

  • Unscored —
    CVE-2009-2107 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in index.php in Webmedia Explorer (webmex) 5.09 and 5.10 allow remo…

  • Unscored —
    CVE-2009-2098 Public exploit

    SQL injection vulnerability in topicler.php in phPortal 1.0 allows remote attackers to execute arbitrary SQL commands v…

  • Unscored —
    CVE-2009-2099 Public exploit

    SQL injection vulnerability in the iJoomla RSS Feeder (com_ijoomla_rss) component for Joomla! allows remote attackers t…

  • Unscored —
    CVE-2009-2104

    Cross-site scripting (XSS) vulnerability in the Modern Guestbook / Commenting System (ve_guestbook) extension 2.7.1 and…

  • Unscored —
    CVE-2009-2102 Public exploit

    SQL injection vulnerability in the Jumi (com_jumi) component 2.0.3 and possibly other versions for Joomla allows remote…

  • Unscored —
    CVE-2009-2096 Public exploit

    SQL injection vulnerability in house/listing_view.php in phpCollegeExchange 0.1.5c allows remote attackers to execute a…