Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2009
June

CVEs published in June 2009

455 vulnerabilities, 103 critical, 3 exploited.

Known exploitedIn KEVPublic exploitFix available

microsoft office, office compatibility pack, office word viewer +1 more +3 moreStack-based buffer overflow in Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP1 and SP2;...CVE-2009-0563In KEVEPSS 59.6%7.8 HighJune 10, 2009
microsoft windows searchCross-site scripting (XSS) vulnerability in Windows Search 4.0 for Microsoft Windows XP SP2 and...CVE-2009-0239EPSS 32.5%4.3 MediumJune 10, 2009
microsoft windows 2000, windows 2003 server, windows server +3 more +5 moreThe Windows Print Spooler in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista...CVE-2009-0230EPSS 34.9%9.0 HighJune 10, 2009
microsoft windows 2000, windows 2003 server, windows server 2008 +2 more +4 moreThe Windows Printing Service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2,...CVE-2009-0229Public exploit4.9 MediumJune 10, 2009
microsoft windows 2000Stack-based buffer overflow in the EnumeratePrintShares function in Windows Print Spooler Service...CVE-2009-0228EPSS 20.5%10.0 HighJune 10, 2009
apple safariWebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1...CVE-2009-16945.8 MediumJune 10, 2009
apple safariWebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1...CVE-2009-16935.8 MediumJune 10, 2009
apple safariCross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0...CVE-2009-16914.3 MediumJune 10, 2009
apple iphone os, safari, google chrome +2 moreUse-after-free vulnerability in WebKit, as used in Apple Safari before 4.0, iPhone OS 1.0 through...CVE-2009-16909.3 HighJune 10, 2009
apple safariCross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0...CVE-2009-16894.3 MediumJune 10, 2009
apple safariCross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0...CVE-2009-16884.3 MediumJune 10, 2009
apple safariThe JavaScript garbage collector in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2...CVE-2009-16879.3 HighJune 10, 2009
apple safariWebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1...CVE-2009-16869.3 HighJune 10, 2009
apple safariCross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0...CVE-2009-16854.3 MediumJune 10, 2009
apple safariCross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0...CVE-2009-1684Public exploit4.3 MediumJune 10, 2009
apple safariApple Safari before 4.0 does not properly check for revoked Extended Validation (EV) certificates...CVE-2009-16824.3 MediumJune 10, 2009
apple safariWebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1...CVE-2009-16814.3 MediumJune 10, 2009
microsoft internet information servicesThe WebDAV extension in Microsoft Internet Information Services (IIS) 5.1 and 6.0 allows remote...CVE-2009-1535Public exploitEPSS 98.1%7.5 HighJune 10, 2009
ubuntu, ubuntu 73-oubuntu +1 moreThe eCryptfs support utilities (ecryptfs-utils) 73-0ubuntu6.1 on Ubuntu 9.04 stores the mount...CVE-2009-1296Fix available1.9 LowJune 9, 2009
ebay enhanced picture uploader activex controleBay Enhanced Picture Uploader ActiveX control (EPUWALcontrol.dll) before 1.0.27 allows remote...CVE-2008-24759.3 HighJune 9, 2009
dutchmonkey dm filemanageradmin/login.php in DM FileManager 3.9.2 allows remote attackers to bypass authentication and gain...CVE-2009-2025Public exploit7.5 HighJune 9, 2009
vt.rovno asp vt authVlad Titarenko ASP VT Auth 1.0 stores sensitive information under the web root with insufficient...CVE-2009-2024Public exploit5.0 MediumJune 9, 2009
shop-scriptSQL injection vulnerability in index.php in Shop-Script Pro 2.12, when magic_quotes_gpc is...CVE-2009-2023Public exploit6.8 MediumJune 9, 2009
fipsasp fipscms lightfipsCMS Light 2.1 stores sensitive information under the web root with insufficient access...CVE-2009-2022Public exploit5.0 MediumJune 9, 2009
virtuenetz virtue classifiedsSQL injection vulnerability in search.php in Virtue Classifieds allows remote attackers to...CVE-2009-2021Public exploit7.5 HighJune 9, 2009
virtuenetz virtue news managerCross-site scripting (XSS) vulnerability in news_detail.php in Virtue News Manager allows remote...CVE-2009-2020Public exploit4.3 MediumJune 9, 2009
virtuenetz virtue news managerSQL injection vulnerability in news_detail.php in Virtue News Manager allows remote attackers to...CVE-2009-2019Public exploit7.5 HighJune 9, 2009
jaredeckersley mycarsSQL injection vulnerability in admin/index.php in Jared Eckersley MyCars, when magic_quotes_gpc...CVE-2009-2018Public exploit6.8 MediumJune 9, 2009
virtuenetz virtue book storeSQL injection vulnerability in products.php in Virtue Book Store allows remote attackers to...CVE-2009-2017Public exploit7.5 HighJune 9, 2009
virtuenetz virtue shopping mallSQL injection vulnerability in products.php in Virtue Shopping Mall allows remote attackers to...CVE-2009-2016Public exploit7.5 HighJune 9, 2009
ideal com moofaqDirectory traversal vulnerability in includes/file_includer.php in the Ideal MooFAQ (com_moofaq)...CVE-2009-2015Public exploit7.5 HighJune 9, 2009
joomla com schoolSQL injection vulnerability in the ComSchool (com_school) component 1.4 for Joomla! allows remote...CVE-2009-2014Public exploit7.5 HighJune 9, 2009
frontisgroup frontisSQL injection vulnerability in bin/aps_browse_sources.php in Frontis 3.9.01.24 allows remote...CVE-2009-2013Public exploit7.5 HighJune 9, 2009
sun opensolarisUnspecified vulnerability in idmap in Sun OpenSolaris snv_88 through snv_110, when a CIFS server...CVE-2009-20121.9 LowJune 9, 2009
apple cupsThe directory-services functionality in the scheduler in CUPS 1.1.17 and 1.1.22 allows remote...CVE-2009-1196Fix available5.0 MediumJune 9, 2009
apple cupsMultiple integer overflows in Xpdf 2.x and 3.x and Poppler 0.x, as used in the pdftops filter in...CVE-2009-0791Fix available6.8 MediumJune 9, 2009
haudenschilt family connections cmsMultiple SQL injection vulnerabilities in Haudenschilt Family Connections CMS (FCMS) 1.9 and...CVE-2009-2010Public exploit6.5 MediumJune 8, 2009
dokeosMultiple cross-site scripting (XSS) vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow...CVE-2009-20094.3 MediumJune 8, 2009
dokeosMultiple SQL injection vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow remote...CVE-2009-20086.8 MediumJune 8, 2009
dokeosMultiple directory traversal vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow remote...CVE-2009-20075.0 MediumJune 8, 2009
dokeosMultiple cross-site scripting (XSS) vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow...CVE-2009-20062.6 LowJune 8, 2009
dokeosCross-site request forgery (CSRF) vulnerability in Dokeos 1.8.5, and possibly earlier, allows...CVE-2009-20056.8 MediumJune 8, 2009
dokeosMultiple SQL injection vulnerabilities in main/mySpace/myStudents.php in Dokeos 1.8.5, and...CVE-2009-20047.5 HighJune 8, 2009
ascadnetworks password protector sdAscad Networks Password Protector SD 1.3.1 allows remote attackers to bypass authentication and...CVE-2009-2003Public exploit7.5 HighJune 8, 2009
atlassian jiraCross-site request forgery (CSRF) vulnerability in Atlassian JIRA Enterprise Edition 3.13 allows...CVE-2008-68326.8 MediumJune 8, 2009
atlassian jiraMultiple cross-site scripting (XSS) vulnerabilities in Atlassian JIRA Enterprise Edition 3.13...CVE-2008-68314.3 MediumJune 8, 2009
citrix web interfaceThe disconnection feature in Citrix Web Interface 5.0 and 5.0.1 for Java Application Servers does...CVE-2008-68304.0 MediumJune 8, 2009
vicftpsVicFTPS 5.0 allows remote attackers to cause a denial of service (crash) via a LIST command that...CVE-2008-6829Public exploitEPSS 37.6%5.0 MediumJune 8, 2009
symantec altiris deployment solutionSymantec Altiris Deployment Solution 6.x before 6.9.355 SP1 stores the Application Identity...CVE-2008-68287.8 HighJune 8, 2009
symantec altiris deployment solutionThe ListView control in the Client GUI (AClient.exe) in Symantec Altiris Deployment Solution 6.x...CVE-2008-6827Public exploit7.8 HighJune 8, 2009
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open