CVEs published in June 2009

455 vulnerabilities, 103 critical, 3 exploited.

• awesomephp mega file manager Directory traversal vulnerability in index.php in Awesome PHP Mega File Manager 1.0 allows remote... CVE-2009-2263 Public exploit 7.5 HighJune 30, 2009
• myiosoft ajaxportal PHP remote file inclusion vulnerability in install/di.php in AjaxPortal 3.0 allows remote... CVE-2009-2262 7.5 HighJune 30, 2009
• giorgio tani peazip PeaZIP 2.6.1, 2.5.1, and earlier on Windows allows user-assisted remote attackers to execute... CVE-2009-2261 Public exploit EPSS 41.4% 9.3 HighJune 30, 2009
• stardict stardict 3.0.1, when Enable Net Dict is configured, sends the contents of the clipboard to a... CVE-2009-2260 Fix available 5.0 MediumJune 30, 2009
• netgear dg632, dg632 firmware +1 more Directory traversal vulnerability in cgi-bin/webcm in the administrative web interface on the... CVE-2009-2258 Public exploit 7.8 HighJune 30, 2009
• netgear dg632 The administrative web interface on the Netgear DG632 with firmware 3.4.0_ap allows remote... CVE-2009-2257 Public exploit 7.8 HighJune 30, 2009
• netgear dg632 The administrative web interface on the Netgear DG632 with firmware 3.4.0_ap allows remote... CVE-2009-2256 Public exploit 7.8 HighJune 30, 2009
• zen-cart zen cart Zen Cart 1.3.8a, 1.3.8, and earlier does not require administrative authentication for admin... CVE-2009-2255 Public exploit EPSS 31.0% 6.8 MediumJune 30, 2009
• zen-cart zen cart Zen Cart 1.3.8a, 1.3.8, and earlier does not require administrative authentication for admin... CVE-2009-2254 Public exploit EPSS 10.9% 7.5 HighJune 30, 2009
• linux kernel Heap-based buffer overflow in the parse_tag_3_packet function in fs/ecryptfs/keystore.c in the... CVE-2009-2407 6.9 MediumJune 28, 2009
• linux kernel Stack-based buffer overflow in the parse_tag_11_packet function in fs/ecryptfs/keystore.c in the... CVE-2009-2406 6.9 MediumJune 28, 2009
• debian linux, linux kernel, canonical ubuntu linux +2 more The kvm_arch_vcpu_ioctl_set_sregs function in the KVM in Linux kernel 2.6 before 2.6.30, when... CVE-2009-2287 Fix available 4.9 MediumJune 28, 2009
• debian linux, linux kernel, canonical ubuntu linux +2 more The personality subsystem in the Linux kernel before 2.6.31-rc3 has a PER_CLEAR_ON_SETID setting... CVE-2009-1895 7.2 HighJune 28, 2009
• aaronoutpost asp inline corporate calendar SQL injection vulnerability in active_appointments.asp in ASP Inline Corporate Calendar allows... CVE-2009-2243 Public exploit 7.5 HighJune 27, 2009
• aaronoutpost asp inline corporate calendar SQL injection vulnerability in active_appointments.asp in ASP Inline Corporate Calendar allows... CVE-2009-2242 Public exploit 6.8 MediumJune 27, 2009
• aaronoutpost asp inline corporate calendar Cross-site scripting (XSS) vulnerability in search.asp in ASP Inline Corporate Calendar allows... CVE-2009-2241 Public exploit 4.3 MediumJune 27, 2009
• ad2000 free-sw leger Cross-site scripting (XSS) vulnerability in AD2000 free-sw leger (aka Web Conference Room Free) 1... CVE-2009-2240 4.3 MediumJune 27, 2009
• joomla com casiino blackjack, com casino videopoker, com casinobase +2 more SQL injection vulnerability in the (1) casinobase (com_casinobase), (2) casino_blackjack ... CVE-2009-2239 Public exploit 7.5 HighJune 27, 2009
• dmxready registration manager Unrestricted file upload vulnerability in includes/shared_scripts/wysiwyg_editor/assetmanager... CVE-2009-2238 Public exploit 6.8 MediumJune 27, 2009
• karim ratib views bulk operations Unspecified vulnerability in Views Bulk Operations 5.x-1.x before 5.x-1.4 and 6.x-1.x before 6.x... CVE-2009-2237 7.5 HighJune 27, 2009
• yourarticlesdirectory your articles directory SQL injection vulnerability in yad-admin/login.php in Your Article Directory allows remote... CVE-2009-2236 Public exploit 7.5 HighJune 27, 2009
• yourarticlesdirectory your articles directory SQL injection vulnerability in page.php in Your Articles Directory allows remote attackers to... CVE-2009-2235 Public exploit 7.5 HighJune 27, 2009
• vicidial call center suite Multiple SQL injection vulnerabilities in admin.php in VICIDIAL Call Center Suite 2.0.5-173 allow... CVE-2009-2234 Public exploit 7.5 HighJune 27, 2009
• tgs-cms tgs content management Multiple cross-site scripting (XSS) vulnerabilities in TGS Content Management 0.3.2r2 allow... CVE-2008-6839 Public exploit 4.3 MediumJune 27, 2009
• zoph Cross-site scripting (XSS) vulnerability in search.php in Zoph 0.7.2.1 allows remote attackers to... CVE-2008-6838 Public exploitFix available 4.3 MediumJune 27, 2009
• zoph SQL injection vulnerability in Zoph 0.7.2.1 allows remote attackers to execute arbitrary SQL... CVE-2008-6837 Public exploitFix available 7.5 HighJune 27, 2009
• peter wolanin openid Cross-site request forgery (CSRF) vulnerability in OpenID 5.x before 5x.-1.2, a module for Drupal... CVE-2008-6836 6.8 MediumJune 27, 2009
• peter wolanin openid Cross-site scripting (XSS) vulnerability in OpenID 5.x before 5.x-1.2, a module for Drupal,... CVE-2008-6835 4.3 MediumJune 27, 2009
• awscripts gallery search engine The admin interface in AWScripts.com Gallery Search Engine 1.5 allows remote attackers to bypass... CVE-2009-2233 Public exploit 7.5 HighJune 26, 2009
• softbizscripts banner ad management script SQL injection vulnerability in image.php in Softbiz Banner Ad Management Script allows remote... CVE-2009-2232 7.5 HighJune 26, 2009
• mid.as midas MIDAS 1.43 allows remote attackers to bypass authentication and obtain administrative access via... CVE-2009-2231 Public exploit 7.5 HighJune 26, 2009
• mybulletinboard SQL injection vulnerability in inc/datahandlers/user.php in MyBB (aka MyBulletinBoard) before 1.4... CVE-2009-2230 Public exploit 7.5 HighJune 26, 2009
• kasseler-cms kasseler cms Directory traversal vulnerability in engine.php in Kasseler CMS 1.3.5 lite allows remote... CVE-2009-2229 Public exploit 5.0 MediumJune 26, 2009
• kasseler-cms kasseler cms Cross-site scripting (XSS) vulnerability in engine.php in Kasseler CMS allows remote attackers to... CVE-2009-2228 Public exploit 4.3 MediumJune 26, 2009
• blabsoft bopup communication server Stack-based buffer overflow in B Labs Bopup Communication Server 3.2.26.5460 allows remote... CVE-2009-2227 Public exploit EPSS 68.6% 10.0 HighJune 26, 2009
• net-snmp agent/snmp_agent.c in snmpd in net-snmp 5.0.9 in Red Hat Enterprise Linux (RHEL) 3 allows remote... CVE-2009-1887 Fix available 5.0 MediumJune 26, 2009
• unisys business information server Stack-based buffer overflow in mnet.exe in Unisys Business Information Server (BIS) 10 and 10.1... CVE-2009-1628 10.0 HighJune 26, 2009
• motorola timbuktu pro Stack-based buffer overflow in Motorola Timbuktu Pro 8.6.5 on Windows allows remote attackers to... CVE-2009-1394 Public exploit EPSS 33.3% 9.3 HighJune 26, 2009
• php.s3 tree bbs Cross-site scripting (XSS) vulnerability in Let's PHP! Tree BBS 2004/11/23 and earlier allows... CVE-2009-2226 4.3 MediumJune 26, 2009
• surething cd\/dvd labeler Stack-based buffer overflow in SureThing CD/DVD Labeler 5.1.616 trial version allows user... CVE-2009-2225 9.3 HighJune 26, 2009
• an guestbook guestbook Directory traversal vulnerability in ang/shared/flags.php in AN Guestbook 0.7.8, when... CVE-2009-2224 4.3 MediumJune 26, 2009
• teozkr lightopencms Directory traversal vulnerability in locms/smarty.php in LightOpenCMS 0.1 allows remote attackers... CVE-2009-2223 Public exploit 9.3 HighJune 26, 2009
• php.s3 php-i-board Directory traversal vulnerability in PHP-I-BOARD 1.2 and earlier allows remote attackers to read... CVE-2009-2222 5.0 MediumJune 26, 2009
• php.s3 php-i-board Cross-site scripting (XSS) vulnerability in PHP-I-BOARD 1.2 and earlier allows remote attackers... CVE-2009-2221 4.3 MediumJune 26, 2009
• tribiq cms Multiple directory traversal vulnerabilities in Tribiq CMS 5.0.12c, when register_globals is... CVE-2009-2220 Public exploit 5.1 MediumJune 26, 2009
• david degner phpcollegeexchange Multiple cross-site scripting (XSS) vulnerabilities in phpCollegeExchange 0.1.5c allow remote... CVE-2009-2219 Public exploit 4.3 MediumJune 25, 2009
• david degner phpcollegeexchange Multiple PHP remote file inclusion vulnerabilities in phpCollegeExchange 0.1.5c, when... CVE-2009-2218 Public exploit 6.8 MediumJune 25, 2009
• phantom-inker nbbc Cross-site scripting (XSS) vulnerability in NBBC before 1.4.2 allows remote attackers to inject... CVE-2009-2217 4.3 MediumJune 25, 2009
• directadmin Cross-site scripting (XSS) vulnerability in CMD_REDIRECT in DirectAdmin 1.33.6 and earlier allows... CVE-2009-2216 Public exploit 6.1 MediumJune 25, 2009
• urdland urd Multiple cross-site scripting (XSS) vulnerabilities in URD before 0.6.2 allow remote attackers to... CVE-2009-2215 4.3 MediumJune 25, 2009
• Show olderLoading…