Skip to content
OpenAdvisories

Archive

June 2009

Vulnerabilities first published in this month (UTC), newest first.

← May 2009 2009 / June July 2009 →
  1. 120
  2. 216
  3. 313
  4. 417
  5. 525
  6. 612
  7. 7 
  8. 815
  9. 919
  10. 1066
  11. 1121
  12. 1224
  13. 13 
  14. 14 
  15. 1517
  16. 1618
  17. 1713
  18. 1814
  19. 1925
  20. 20 
  21. 21 
  22. 2231
  23. 2318
  24. 2412
  25. 2513
  26. 2617
  27. 2715
  28. 28 
  29. 29 
  30. 309
All Critical High Medium Low Exploited only Public exploit

450 results · Feed

  • Unscored —
    CVE-2009-1697

    CRLF injection vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod …

  • Unscored —
    CVE-2009-1533 EPSS 36%

    Buffer overflow in the Works for Windows document converters in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 S…

  • Unscored —
    CVE-2009-1139 EPSS 39%

    Memory leak in the LDAP service in Active Directory on Microsoft Windows 2000 SP4 and Server 2003 SP2, and Active Direc…

  • Unscored —
    CVE-2009-1695

    Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone …

  • Unscored —
    CVE-2009-1704

    CFNetwork in Apple Safari before 4.0 misinterprets downloaded image files as local HTML documents in unspecified circum…

  • Unscored —
    CVE-2009-1718

    WebKit in Apple Safari before 4.0 allows user-assisted remote attackers to obtain sensitive information via vectors inv…

  • Unscored —
    CVE-2009-1138 EPSS 39%

    The LDAP service in Active Directory on Microsoft Windows 2000 SP4 does not properly free memory for LDAP and LDAPS req…

  • Unscored —
    CVE-2009-1714

    Cross-site scripting (XSS) vulnerability in Web Inspector in WebKit in Apple Safari before 4.0 allows user-assisted rem…

  • Unscored —
    CVE-2009-1705

    CoreGraphics in Apple Safari before 4.0 on Windows does not properly use arithmetic during automatic hinting of TrueTyp…

  • Unscored —
    CVE-2009-1709

    Use-after-free vulnerability in the garbage-collection implementation in WebCore in WebKit in Apple Safari before 4.0 a…

  • Unscored —
    CVE-2009-1708

    Apple Safari before 4.0 does not prevent calls to the open-help-anchor URL handler by web sites, which allows remote at…

  • Unscored —
    CVE-2009-1711

    WebKit in Apple Safari before 4.0 does not properly initialize memory for Attr DOM objects, which allows remote attacke…

  • Unscored —
    CVE-2009-1698

    WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not…

  • Unscored —
    CVE-2009-1710

    WebKit in Apple Safari before 4.0 allows remote attackers to spoof the browser's display of (1) the host name, (2) secu…

  • Unscored —
    CVE-2009-1700

    The XSLT implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch…

  • Unscored —
    CVE-2009-1716

    CFNetwork in Apple Safari before 4.0 on Windows does not properly protect the temporary files created for downloads, wh…

  • Unscored —
    CVE-2009-1712

    WebKit in Apple Safari before 4.0 does not prevent remote loading of local Java applets, which allows remote attackers …

  • Unscored —
    CVE-2009-1715

    Cross-site scripting (XSS) vulnerability in Web Inspector in WebKit in Apple Safari before 4.0 allows user-assisted rem…

  • Unscored —
    CVE-2009-1706

    The Private Browsing feature in Apple Safari before 4.0 on Windows does not remove cookies from the alternate cookie st…

  • Unscored —
    CVE-2009-1707

    Race condition in the Reset Safari implementation in Apple Safari before 4.0 on Windows might allow local users to read…

  • Unscored —
    CVE-2009-1535 Public exploit EPSS 98%

    The WebDAV extension in Microsoft Internet Information Services (IIS) 5.1 and 6.0 allows remote attackers to bypass URI…

  • Unscored —
    CVE-2009-1684 Public exploit

    Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone …

  • Unscored —
    CVE-2009-1689

    Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone …

  • Unscored —
    CVE-2009-1688

    Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone …

  • Unscored —
    CVE-2009-1691

    Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone …

  • Unscored —
    CVE-2009-1685

    Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone …

  • Unscored —
    CVE-2009-1690

    Use-after-free vulnerability in WebKit, as used in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, iPhone OS for …

  • Unscored —
    CVE-2009-1694

    WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not…

  • Unscored —
    CVE-2009-1686

    WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not…

  • Unscored —
    CVE-2009-1693

    WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows r…

  • Unscored —
    CVE-2009-1687

    The JavaScript garbage collector in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for i…

  • Unscored —
    CVE-2009-1682

    Apple Safari before 4.0 does not properly check for revoked Extended Validation (EV) certificates, which makes it easie…

  • Unscored —
    CVE-2009-1681

    WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not…

  • Unscored —
    CVE-2008-2475

    eBay Enhanced Picture Uploader ActiveX control (EPUWALcontrol.dll) before 1.0.27 allows remote attackers to execute arb…

  • Unscored —
    CVE-2009-1296

    The eCryptfs support utilities (ecryptfs-utils) 73-0ubuntu6.1 on Ubuntu 9.04 stores the mount passphrase in installatio…

    ecryptfs-utils Debian
  • Unscored —
    CVE-2009-2020 Public exploit

    Cross-site scripting (XSS) vulnerability in news_detail.php in Virtue News Manager allows remote attackers to inject ar…

  • Unscored —
    CVE-2009-2013 Public exploit

    SQL injection vulnerability in bin/aps_browse_sources.php in Frontis 3.9.01.24 allows remote attackers to execute arbit…

  • Unscored —
    CVE-2009-2014 Public exploit

    SQL injection vulnerability in the ComSchool (com_school) component 1.4 for Joomla! allows remote attackers to execute …

  • Unscored —
    CVE-2009-2024 Public exploit

    Vlad Titarenko ASP VT Auth 1.0 stores sensitive information under the web root with insufficient access control, which …

  • Unscored —
    CVE-2009-2022 Public exploit

    fipsCMS Light 2.1 stores sensitive information under the web root with insufficient access control, which allows remote…