CVEs published in June 2009
455 vulnerabilities, 103 critical, 3 exploited.
- a-link wl54ap2, wl54ap3 +1 moreThe management interface on the A-LINK WL54AP3 and WL54AP2 access points has a blank default...10.0 High
- a-link wl54ap2, wl54ap3 +1 moreMultiple cross-site request forgery (CSRF) vulnerabilities in the management interface on the A...6.8 Medium
- newearthpt imguploadUnrestricted file upload vulnerability in uploadp.php in New Earth Programming Team (NEPT)...7.5 High
- apache apr-util, http server, apple mac os x +4 more +6 moreThe expat XML parser in the apr_xml_* interface in xml/apr_xml.c in Apache APR-util before 1.3.7,...7.5 High
- apache apr-util, http server +1 moreThe apr_strmatch_precompile function in strmatch/apr_strmatch.c in Apache APR-util before 1.3.5...4.3 Medium
- ibm db2The DRDA Services component in IBM DB2 9.1 before FP7 and 9.5 before FP4 allows remote attackers...4.3 Medium
- ibm db2The Common Code Infrastructure component in IBM DB2 8 before FP17, 9.1 before FP7, and 9.5 before...2.6 Low
- ibm db2Buffer overflow in the DAS server in IBM DB2 8 before FP17, 9.1 before FP5, and 9.5 before FP2...10.0 High
- ibm db2The db2fmp process in IBM DB2 8 before FP17, 9.1 before FP5, and 9.5 before FP2 on Windows runs...10.0 High
- ibm db2IBM DB2 8 before FP17, 9.1 before FP5, and 9.5 before FP2 provides an INSTALL_JAR (aka sqlj...6.0 Medium
- trustwave modsecurity, fedoraproject fedora +1 moreThe PDF XSS protection feature in ModSecurity before 2.5.8 allows remote attackers to cause a...4.3 Medium
- trustwave modsecurity, fedoraproject fedora +1 moreThe multipart processor in ModSecurity before 2.5.9 allows remote attackers to cause a denial of...5.0 Medium
- ibm websphere application serverThe Security component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35 permits ...10.0 High
- ibm websphere application serverThe Configservice APIs in the Administrative Console component in IBM WebSphere Application...5.0 Medium
- ibm websphere application serverUnspecified vulnerability in the Administrative Configservice API in the System Management...10.0 High
- ibm websphere application serverThe secure login page in the Administrative Console component in IBM WebSphere Application Server...5.0 Medium
- ibm integrated solutions console, websphere application server, websphere portal +2 moreIBM WebSphere Application Server (WAS) 6.1 through 6.1.0.24 and 7.0 through 7.0.0.4, IBM...4.3 Medium
- ibm websphere mqBuffer overflow in the queue manager in IBM WebSphere MQ 6.x before 6.0.2.7 and 7.x before 7.0.1...10.0 High
- apple quicktimeHeap-based buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute...9.3 High
- apple quicktimeApple QuickTime before 7.6.2 does not properly initialize memory before use in handling movie...9.3 High
- apple quicktimeApple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial...9.3 High
- apple quicktimeHeap-based buffer overflow in Apple QuickTime before 7.6.2 on Windows allows remote attackers to...9.3 High
- apple quicktimeHeap-based buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute...9.3 High
- apple quicktimeBuffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code...9.3 High
- apple quicktimeHeap-based buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute...9.3 High
- apple itunesStack-based buffer overflow in Apple iTunes before 8.2 allows remote attackers to execute...9.3 High
- xvidHeap-based buffer overflow in the decoder_create function in the initialization functionality in...10.0 High
- xvidMultiple heap-based buffer overflows in xvidcore/src/decoder.c in the xvidcore library in Xvid...10.0 High
- apple quicktimeApple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial...9.3 High
- apple quicktimeHeap-based buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute...9.3 High
- imagemagickInteger overflow in the XMakeImage function in magick/xwindow.c in ImageMagick 6.5.2-8, and...9.3 High
- mt312 img-bbsCross-site scripting (XSS) vulnerability in MT312 IMG-BBS allows remote attackers to inject...4.3 Medium
- mt312 rep-bbsCross-site scripting (XSS) vulnerability in MT312 REP-BBS allows remote attackers to inject...4.3 Medium
- sun jre, sdk +1 moreSun SDK and Java Runtime Environment (JRE) 1.4.2 through 1.4.2_04, 1.4.1 through 1.4.1_07, and 1...10.0 High
- apple cups, mac os x, mac os x server +4 more +6 moreThe ippReadIO function in cups/ipp.c in cupsd in CUPS before 1.3.10 does not properly initialize...7.5 High
- sun iplanet web server, one web server +1 moreThe default configuration of Sun ONE/iPlanet Web Server 4.1 SP1 through SP12 and 6.0 SP1 through...5.8 Medium
- sun j2eeThe PointBase 4.6 database component in the J2EE 1.4 reference implementation (J2EE/RI) allows...10.0 High
- sun jmfSun Java Media Framework (JMF) 2.1.1 through 2.1.1c allows unsigned applets to cause a denial of...9.3 High
- cmsnx million dollar text linksMillion Dollar Text Links 1.0 allows remote attackers to bypass authentication and gain...7.5 High
- kenseiboard kensei boardMultiple SQL injection vulnerabilities in index.php in Kensei Board 2.0 BETA (aka 2.0.0b) and...7.5 High
- graphiks myforumMultiple SQL injection vulnerabilities in Graphiks MyForum 1.3 allow remote attackers to execute...7.5 High
- benjamin curtis phpbugtrackerSQL injection vulnerability in include.php in phpBugTracker 1.0.4 and earlier allows remote...7.5 High
- benjamin curtis phpbugtrackerSQL injection vulnerability in index.php in phpBugTracker 1.0.3 allows remote attackers to...7.5 High
- paessler prtg traffic grapher, prtg traffic grapher6.0.5.416 +1 moreCross-site scripting (XSS) vulnerability in the Monitor_Bandwidth function in PRTG Traffic...4.3 Medium
- joomlame com agoragroupSQL injection vulnerability in the JoomlaMe AgoraGroups (aka AG or com_agoragroup) component 0.3...7.5 High
- easypx41 easy px 41 cmsDirectory traversal vulnerability in index.php in Easy PX 41 CMS 9.0 B1 allows remote attackers...7.5 High
- bjsintay sitexMultiple directory traversal vulnerabilities in SiteX 0.7.4 Build 418 and earlier allow remote...7.5 High
- lussumo vanillaCross-site scripting (XSS) vulnerability in ajax/updatecheck.php in Lussumo Vanilla 1.1.5 and 1.1...4.3 Medium
- vmware ace, esx, esxi +4 more +6 moreUnspecified vulnerability in the VMware Descheduled Time Accounting driver in VMware Workstation...4.0 Medium
- microsoft windows 2003 server, windows vista +1 morewin32k.sys in Microsoft Windows Server 2003 and Vista allows local users to cause a denial of...4.7 Medium
- Show moreLoading…