Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2009
May

CVEs published in May 2009

364 vulnerabilities, 82 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

diangemilang dgnewsSQL injection vulnerability in berita.php in Dian Gemilang DGNews 3.0 Beta allows remote...CVE-2009-1746Public exploit7.5 HighMay 21, 2009
armorlogic profense web application firewallArmorlogic Profense Web Application Firewall before 2.2.22, and 2.4.x before 2.4.4, has a default...CVE-2009-174510.0 HighMay 21, 2009
ibm websphere partner gatewayIBM WebSphere Partner Gateway (WPG) 6.1.0 before 6.1.0.1 and 6.1.1 before 6.1.1.1 allows remote...CVE-2009-08974.0 MediumMay 21, 2009
sun java system communications expressMultiple cross-site scripting (XSS) vulnerabilities in Sun Java System Communications Express 6...CVE-2009-1729Public exploit4.3 MediumMay 21, 2009
armorlogic profense web application firewallArmorlogic Profense Web Application Firewall before 2.2.22, and 2.4.x before 2.4.4, does not...CVE-2009-15947.5 HighMay 21, 2009
armorlogic profense web application firewallArmorlogic Profense Web Application Firewall before 2.2.22, and 2.4.x before 2.4.4, does not...CVE-2009-1593Public exploit4.3 MediumMay 21, 2009
cisco ciscoworks common services, security manager, telepresence readiness assessment manager +7 more +9 moreDirectory traversal vulnerability in the TFTP service in Cisco CiscoWorks Common Services (CWCS)...CVE-2009-1161EPSS 16.5%10.0 HighMay 21, 2009
pinnaclesys pinnacle studioInstallHFZ.exe 6.5.201.0 in Pinnacle Hollywood Effects 6, a module in Pinnacle Systems Pinnacle...CVE-2009-1744Public exploit4.3 MediumMay 21, 2009
pinnaclesys pinnacle studioDirectory traversal vulnerability in InstallHFZ.exe 6.5.201.0 in Pinnacle Hollywood Effects 6, a...CVE-2009-1743Public exploit9.3 HighMay 21, 2009
squirrelmail, squirrelmail imap general.php +1 moreThe map_yp_alias function in functions/imap_general.php in SquirrelMail before 1.4.19-1 on Debian...CVE-2009-1381Fix available6.8 MediumMay 21, 2009
pc4arb pc4 uploadercode.php in PC4Arb Pc4 Uploader 9.0 and earlier makes it easier for remote attackers to conduct...CVE-2009-1742Public exploit7.5 HighMay 20, 2009
dutchmonkey dm filemanagerMultiple SQL injection vulnerabilities in login.php in DM FileManager 3.9.2, when...CVE-2009-1741Public exploit6.8 MediumMay 20, 2009
dlink mpeg4 viewer activex controlMultiple heap-based buffer overflows in the D-Link MPEG4 Viewer ActiveX Control (csviewer.ocx) 2...CVE-2009-17409.3 HighMay 20, 2009
phpeasycode pad site scriptsPAD Site Scripts 3.6 allows remote attackers to bypass authentication and gain privileges as...CVE-2009-1739Public exploit7.5 HighMay 20, 2009
ivanjaros feed blockCross-site scripting (XSS) vulnerability in Feed Block 6.x-1.x before 6.x-1.1, a module for...CVE-2009-17383.5 LowMay 20, 2009
diqiye mypicDirectory traversal vulnerability in bom.php in MyPic 2.1 allows remote attackers to list files...CVE-2009-17377.8 HighMay 20, 2009
joomla com gsticketsystemSQL injection vulnerability in the GridSupport (GS) Ticket System (com_gsticketsystem) component...CVE-2009-1736Public exploit7.5 HighMay 20, 2009
omnisoftsol vidshareproCross-site scripting (XSS) vulnerability in search.php in VidSharePro allows remote attackers to...CVE-2009-1735Public exploit4.3 MediumMay 20, 2009
omnisoftsol vidshareproSQL injection vulnerability in listing_video.php in VidSharePro allows remote attackers to...CVE-2009-1734Public exploit7.5 HighMay 20, 2009
richard ellerbrock ipplanCross-site request forgery (CSRF) vulnerability in IPplan 4.91a allows remote attackers to hijack...CVE-2009-17336.8 MediumMay 20, 2009
richard ellerbrock ipplanCross-site scripting (XSS) vulnerability in admin/usermanager in IPplan 4.91a allows remote...CVE-2009-1732Fix available4.3 MediumMay 20, 2009
mlffatSQL injection vulnerability in panel/index.php in MLFFAT 2.1 allows remote attackers to execute...CVE-2009-17317.5 HighMay 20, 2009
netmechanica netdecision tftp serverMultiple directory traversal vulnerabilities in NetMechanica NetDecision TFTP Server 4.2 allow...CVE-2009-1730Public exploitEPSS 54.5%10.0 HighMay 20, 2009
nlnetlabs nsdOff-by-one error in the packet_read_query_section function in packet.c in nsd 3.2.1, and...CVE-2009-1755Fix available5.0 MediumMay 20, 2009
hp system management homepageCross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 3.0.1.73...CVE-2009-14184.3 MediumMay 19, 2009
opensslUse-after-free vulnerability in the dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in...CVE-2009-1379Public exploitFix availableEPSS 18.2%5.0 MediumMay 19, 2009
openssl, canonical ubuntu linux +1 moreMultiple memory leaks in the dtls1_process_out_of_seq_message function in ssl/d1_both.c in...CVE-2009-1378Fix availableEPSS 12.7%5.0 MediumMay 19, 2009
opensslThe dtls1_buffer_record function in ssl/d1_pkt.c in OpenSSL 0.9.8k and earlier 0.9.8 versions...CVE-2009-1377Fix availableEPSS 11.3%5.0 MediumMay 19, 2009
ntpStack-based buffer overflow in the crypto_recv function in ntp_crypto.c in ntpd in NTP before 4.2...CVE-2009-1252Fix availableEPSS 21.3%6.8 MediumMay 19, 2009
bitweaverDirectory traversal vulnerability in the saveFeed function in rss/feedcreator.class.php in...CVE-2009-1678Public exploit7.5 HighMay 18, 2009
bitweaverMultiple static code injection vulnerabilities in the saveFeed function in rss/feedcreator.class...CVE-2009-1677Public exploit6.5 MediumMay 18, 2009
electrasoft 32bit ftpStack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to...CVE-2009-1675Public exploitEPSS 13.8%9.3 HighMay 18, 2009
microchip mplab ideStack-based buffer overflow in Microchip MPLAB IDE 8.30 allows user-assisted remote attackers to...CVE-2009-1674Public exploit9.3 HighMay 18, 2009
sun solarisThe kernel in Sun Solaris 9 allows local users to cause a denial of service (panic) by calling...CVE-2009-16734.9 MediumMay 18, 2009
sun jreThe Deployment Toolkit ActiveX control in deploytk.dll 6.0.130.3 in Sun Java SE Runtime...CVE-2009-1672Public exploit9.3 HighMay 18, 2009
sun jreMultiple buffer overflows in the Deployment Toolkit ActiveX control in deploytk.dll 6.0.130.3 in...CVE-2009-1671Public exploitEPSS 10.3%9.3 HighMay 18, 2009
tcpdbuser/index.php in TCPDB 3.8 does not require administrative authentication, which allows remote...CVE-2009-1670Public exploit7.5 HighMay 18, 2009
smartyThe smarty_function_math function in libs/plugins/function.math.php in Smarty 2.6.22 allows...CVE-2009-1669Public exploitEPSS 14.1%10.0 HighMay 18, 2009
typsoft ftp serverTYPSoft FTP Server 1.11 allows remote attackers to cause a denial of service (CPU consumption) by...CVE-2009-1668Public exploit4.0 MediumMay 18, 2009
mini-stream castripperStack-based buffer overflow in Mini-stream CastRipper 2.50.70 allows remote attackers to execute...CVE-2009-1667Public exploitEPSS 27.8%9.3 HighMay 18, 2009
cyclomedia cycloscopeliteMultiple unspecified vulnerabilities in CycloMedia CycloScopeLite 2.50.3.0 allow remote attackers...CVE-2009-16669.3 HighMay 18, 2009
hp remote graphics softwareUnspecified vulnerability in Easy Login in the Sender module in HP Remote Graphics Software (RGS)...CVE-2009-072110.0 HighMay 18, 2009
easy-scripts answer and question scriptmyaccount.php in Easy Scripts Answer and Question Script allows remote attackers to remove...CVE-2009-1665Public exploit6.4 MediumMay 17, 2009
easy-scripts answer and question scriptmyaccount.php in Easy Scripts Answer and Question Script does not verify the original password...CVE-2009-1664Public exploit7.5 HighMay 17, 2009
easy-scripts answer and question scriptUnrestricted file upload vulnerability in myaccount.php in Easy Scripts Answer and Question...CVE-2009-1663Public exploit6.8 MediumMay 17, 2009
recipescript recipe scriptMultiple SQL injection vulnerabilities in admin/login.php in Wright Way Services Recipe Script 5...CVE-2009-1662Public exploit7.5 HighMay 17, 2009
anoldman utopicSQL injection vulnerability in admin/utopic.php in uTopic 1.0, when magic_quotes_gpc is disabled,...CVE-2009-1661Public exploit6.8 MediumMay 17, 2009
urusoft viplay3Stack-based buffer overflow in URUWorks ViPlay3 3.0 and earlier allows remote attackers to cause...CVE-2009-1660Public exploit9.3 HighMay 17, 2009
intelliants elitiusUnrestricted file upload vulnerability in admin/uploadimage.php in eLitius 1.0 allows remote...CVE-2009-1659Public exploit6.8 MediumMay 17, 2009
realtywebware realty web-baseMultiple SQL injection vulnerabilities in admin/admin.php in Realty Webware Technologies Realty...CVE-2009-1658Public exploit7.5 HighMay 17, 2009
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open