CVEs published in June 2009
455 vulnerabilities, 103 critical, 3 exploited.
- skybluecanvasMultiple cross-site scripting (XSS) vulnerabilities in admin.php in SkyBlueCanvas 1.1 r237 allow...4.3 Medium
- fretsweb project fretswebMultiple SQL injection vulnerabilities in FretsWeb 1.2 allow remote attackers to execute...7.5 High
- frank-karau phpfkDirectory traversal vulnerability in include/page_bottom.php in phpFK 7.03 allows remote...7.5 High
- jnmsolutions db top sitesStatic code injection vulnerability in add_reg.php in DB Top Sites 1.0 allows remote attackers to...10.0 High
- jnmsolutions db top sitesMultiple directory traversal vulnerabilities in DB Top Sites 1.0, when magic_quotes_gpc is...7.6 High
- fretsweb project fretswebMultiple directory traversal vulnerabilities in FretsWeb 1.2 allow remote attackers to read...5.0 Medium
- gitgit-daemon in git 1.4.4.5 through 1.6.3 allows remote attackers to cause a denial of service ...5.0 Medium
- freebsdInteger overflow in the pipe_build_write_buffer function (sys/kern/sys_pipe.c) in the direct...4.9 Medium
- gforgeSQL injection vulnerability in GForge 4.5.14, 4.7.3, and possibly other versions allows remote...7.5 High
- gforgeMultiple cross-site scripting (XSS) vulnerabilities in GForge 4.5.14, 4.7.3, and possibly other...4.3 Medium
- webmediaexplorer webmedia explorerMultiple cross-site scripting (XSS) vulnerabilities in index.php in Webmedia Explorer (webmex) 5...4.3 Medium
- projektseminar proservice wwu virtual civil servicesSQL injection vulnerability in the Virtual Civil Services (civserv) extension 4.3.2 and earlier...7.5 High
- kasper skrhj references databaseSQL injection vulnerability in the References database (t3references) extension 0.1.1 and earlier...7.5 High
- udo von eynern modern guest book commenting systemCross-site scripting (XSS) vulnerability in the Modern Guestbook / Commenting System ...4.3 Medium
- steve grundell frontend mp3 playerSQL injection vulnerability in the Frontend MP3 Player (fe_mp3player) 0.2.3 and earlier extension...7.5 High
- com jumi jumiSQL injection vulnerability in the Jumi (com_jumi) component 2.0.3 and possibly other versions...7.5 High
- castro xl torrentvolveDirectory traversal vulnerability in archive.php in TorrentVolve 1.4, when register_globals is...6.8 Medium
- joomlapraise com projectforkDirectory traversal vulnerability in the JoomlaPraise Projectfork (com_projectfork) component 2.0...5.0 Medium
- ijoomla com rssfeederSQL injection vulnerability in the iJoomla RSS Feeder (com_ijoomla_rss) component for Joomla!...7.5 High
- micheal glazer phportalSQL injection vulnerability in topicler.php in phPortal 1.0 allows remote attackers to execute...7.5 High
- zokisoft zoki catalogSQL injection vulnerability in system/application/controllers/catalog.php in Zoki Soft Zoki...7.5 High
- david degner phpcollegeexchangeSQL injection vulnerability in house/listing_view.php in phpCollegeExchange 0.1.5c allows remote...7.5 High
- mundi king mailPHP remote file inclusion vulnerability in template/simpledefault/admin/_masterlayout.php in...6.8 Medium
- ca arcserve backupThe message engine in CA ARCserve Backup r12.0 and r12.0 SP1 for Windows allows remote attackers...5.0 Medium
- sun jreThe Aqua Look and Feel for Java implementation in Java 1.5 on Mac OS X 10.5 allows remote...7.5 High
- paul marquess compress-raw-zlib perl moduleOff-by-one error in the inflate function in Zlib.xs in Compress::Raw::Zlib Perl module before 2...6.8 Medium
- linux kernelBuffer overflow in the RTL8169 NIC driver (drivers/net/r8169.c) in the Linux kernel before 2.6.30...7.8 High
- mattias hutterer taxonomy managerCross-site scripting (XSS) vulnerability in the term data detail page in Taxonomy manager 5.x...3.5 Low
- creative web solutions multi-level cmsSQL injection vulnerability in insidepage.php in Creative Web Solutions Multi-Level CMS 1.21...7.5 High
- dxstudio dx studio playerWorldweaver DX Studio Player 3.0.29.0, 3.0.22.0, 3.0.12.0, and probably other versions before 3.0...9.3 High
- muttMutt 1.5.19, when linked against (1) OpenSSL (mutt_ssl.c) or (2) GnuTLS (mutt_ssl_gnutls.c),...6.8 Medium
- apache tomcatDirectory Traversal in Apache Tomcat5.0 Medium
- phpwebthingsDirectory traversal vulnerability in help.php in phpWebThings 1.5.2 and earlier, when...4.3 Medium
- mrcgiguy the ticket systemadmin.php in MRCGIGUY The Ticket System 2.0 does not properly restrict access, which allows...7.5 High
- drupal taxonomy managerCross-site scripting (XSS) vulnerability in the administrative page interface in Taxonomy manager...3.5 Low
- heine.familiedeelstra booktreeMultiple cross-site scripting (XSS) vulnerabilities in Booktree 5.x before 5.x-7.3 and 6.x before...4.3 Medium
- angrydonuts viewsDrupal 6.x before 6.x-2.6, a module for Drupal, allows remote authenticated users to bypass...4.0 Medium
- drupal viewsCross-site scripting (XSS) vulnerability in Views 6.x before 6.x-2.6, a module for Drupal, allows...3.5 Low
- angrydonuts nodequeueNodequeue 5.x before 5.x-2.7 and 6.x before 6.x-2.2, a module for Drupal, does not properly...7.5 High
- drupal nodequeueCross-site scripting (XSS) vulnerability in Nodequeue 5.x before 5.x-2.7 and 6.x before 6.x-2.2,...3.5 Low
- cisco wrt160nCross-site request forgery (CSRF) vulnerability in Linksys WRT160N wireless router hardware 1 and...6.8 Medium
- apple safariApple Safari does not require a cached certificate before displaying a lock icon for an https web...5.4 Medium
- google chromeGoogle Chrome before 1.0.154.53 displays a cached certificate for a (1) 4xx or (2) 5xx CONNECT...6.8 Medium
- opera browserOpera displays a cached certificate for a (1) 4xx or (2) 5xx CONNECT response page returned by a...6.8 Medium
- microsoft internet explorer, ie +1 moreMicrosoft Internet Explorer before 8 displays a cached certificate for a (1) 4xx or (2) 5xx...5.8 Medium
- operaGoogle Chrome detects http content in https web pages only when the top-level frame uses https,...5.8 Medium
- opera browserOpera detects http content in https web pages only when the top-level frame uses https, which...6.8 Medium
- apple safariApple Safari detects http content in https web pages only when the top-level frame uses https,...6.8 Medium
- mozilla firefoxMozilla Firefox 3.0.10, and possibly other versions, detects http content in https web pages only...6.8 Medium
- microsoft internet explorer, pocket ie +1 moreMicrosoft Internet Explorer 8, and possibly other versions, detects http content in https web...6.8 Medium
- Show moreLoading…