Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2009
June

CVEs published in June 2009

455 vulnerabilities, 103 critical, 3 exploited.

Known exploitedIn KEVPublic exploitFix available

torrenttrader classicbackup-database.php in TorrentTrader Classic 1.09 does not require administrative authentication,...CVE-2009-2159Public exploit6.4 MediumJune 22, 2009
torrenttrader project torrenttraderaccount-recover.php in TorrentTrader Classic 1.09 chooses random passwords from an insufficiently...CVE-2009-2158Public exploit7.5 HighJune 22, 2009
torrenttrader classicMultiple SQL injection vulnerabilities in TorrentTrader Classic 1.09 allow remote authenticated...CVE-2009-2157Public exploit6.5 MediumJune 22, 2009
torrenttrader classicMultiple cross-site scripting (XSS) vulnerabilities in TorrentTrader Classic 1.09 allow remote...CVE-2009-2156Public exploit3.5 LowJune 22, 2009
zohocorp webnmsCross-site scripting (XSS) vulnerability in report/ReportViewAction.do in WebNMS Free Edition 5...CVE-2009-21554.3 MediumJune 22, 2009
sappy.dk impleo music collectionSQL injection vulnerability in admin/login.php in Impleo Music Collection 2.0, when...CVE-2009-2154Public exploit6.8 MediumJune 22, 2009
sappy.dk impleo music collectionCross-site scripting (XSS) vulnerability in index.php in Impleo Music Collection 2.0 allows...CVE-2009-2153Public exploit4.3 MediumJune 22, 2009
isabela gasparini adaptwebSQL injection vulnerability in a_index.php in AdaptWeb 0.9.2 allows remote attackers to execute...CVE-2009-2152Public exploit7.5 HighJune 22, 2009
adaptwebDirectory traversal vulnerability in index.php in AdaptWeb 0.9.2 allows remote attackers to read...CVE-2009-2151Public exploit5.0 MediumJune 22, 2009
campusvirtualcomputrade campus virtual-lmsMultiple cross-site request forgery (CSRF) vulnerabilities in Campus Virtual-LMS allow (1) remote...CVE-2009-2150Public exploit6.8 MediumJune 22, 2009
campusvirtualcomputrade campus virtual-lmsMultiple cross-site scripting (XSS) vulnerabilities in Campus Virtual-LMS allow remote attackers...CVE-2009-2149Public exploit4.3 MediumJune 22, 2009
campusvirtualcomputrade campus virtual-lmsSQL injection vulnerability in news/index.php in Campus Virtual-LMS allows remote attackers to...CVE-2009-2148Public exploit7.5 HighJune 22, 2009
phpwebthingsSQL injection vulnerability in fdown.php in phpWebThings 1.5.2 and earlier allows remote...CVE-2009-2147Public exploit7.5 HighJune 22, 2009
sugarcrmUnrestricted file upload vulnerability in the Compose Email feature in the Emails module in Sugar...CVE-2009-2146Public exploitEPSS 21.4%6.0 MediumJune 22, 2009
pantha translucidMultiple cross-site scripting (XSS) vulnerabilities in transLucid 1.75 allow remote attackers to...CVE-2009-2145Public exploit4.3 MediumJune 22, 2009
edgewall firestatsSQL injection vulnerability in the FireStats plugin before 1.6.2-stable for WordPress allows...CVE-2009-21447.5 HighJune 22, 2009
firestatsPHP remote file inclusion vulnerability in firestats-wordpress.php in the FireStats plugin before...CVE-2009-21437.5 HighJune 22, 2009
zipstore zip store chatMultiple SQL injection vulnerabilities in admin/index.asp in Zip Store Chat 4.0 and 5.0 allow...CVE-2009-2142Public exploit7.5 HighJune 22, 2009
tbdev tbdev.netMultiple cross-site scripting (XSS) vulnerabilities in TBDev.NET 01-01-08 allow remote attackers...CVE-2009-2141Public exploit4.3 MediumJune 22, 2009
tbdev tbdev.netMultiple open redirect vulnerabilities in TBDev.NET 01-01-08 allow remote attackers to redirect...CVE-2009-2138Public exploit4.3 MediumJune 19, 2009
sun opensolaris, solaris +1 moreMemory leak in the Ultra-SPARC T2 crypto provider device driver (aka n2cp) in Sun Solaris 10, and...CVE-2009-21377.8 HighJune 19, 2009
sun opensolaris, solaris +1 moreUnspecified vulnerability in the TCP/IP networking stack in Sun Solaris 10, and OpenSolaris...CVE-2009-21367.8 HighJune 19, 2009
sun opensolaris, solaris +1 moreMultiple race conditions in the Solaris Event Port API in Sun Solaris 10 and OpenSolaris before...CVE-2009-21354.9 MediumJune 19, 2009
pivotpivot/tb.php in Pivot 1.40.4 and 1.40.7 allows remote attackers to obtain sensitive information...CVE-2009-2134Public exploit5.0 MediumJune 19, 2009
pivotMultiple cross-site scripting (XSS) vulnerabilities in Pivot 1.40.4 and 1.40.7 allow remote...CVE-2009-2133Public exploit4.3 MediumJune 19, 2009
4homepages 4imagesDirectory traversal vulnerability in global.php in 4images before 1.7.7, when magic_quotes_gpc is...CVE-2009-2132Public exploit6.8 MediumJune 19, 2009
4homepages 4imagesCross-site scripting (XSS) vulnerability in 4images 1.7.7 and earlier allows remote authenticated...CVE-2009-2131Public exploit3.5 LowJune 19, 2009
elvinbtsElvin 1.2.0 allows remote attackers to read the PHP source code of (1) login.ei, (2) jump_bug.ei,...CVE-2009-2130Public exploit5.0 MediumJune 19, 2009
elvinbtsCross-site request forgery (CSRF) vulnerability in login.php in Elvin 1.2.0 allows remote...CVE-2009-2129Public exploit6.8 MediumJune 19, 2009
elvinbtsSQL injection vulnerability in close_bug.php in Elvin before 1.2.1 allows remote attackers to...CVE-2009-21287.5 HighJune 19, 2009
elvinbtsCross-site scripting (XSS) vulnerability in show_activity.php in Elvin 1.2.0 allows remote...CVE-2009-2127Public exploit4.3 MediumJune 19, 2009
elvinbtsCross-site scripting (XSS) vulnerability in close_bug.php in Elvin before 1.2.1 allows remote...CVE-2009-21264.3 MediumJune 19, 2009
elvinbtsdelete_bug.php in Elvin before 1.2.1 does not require administrative privileges, which allows...CVE-2009-21254.0 MediumJune 19, 2009
elvinbtsDirectory traversal vulnerability in page.php in Elvin 1.2.0 allows remote attackers to include...CVE-2009-2124Public exploit7.5 HighJune 19, 2009
elvinbtsMultiple SQL injection vulnerabilities in Elvin 1.2.0 allow remote attackers to execute arbitrary...CVE-2009-2123Public exploit7.5 HighJune 19, 2009
paolo palmonari photoracer plugin for wordpressSQL injection vulnerability in viewimg.php in the Paolo Palmonari Photoracer plugin 1.0 for...CVE-2009-2122Public exploit7.5 HighJune 19, 2009
apple iphone os, ipod touch, safari +2 moreWebKit before r41741, as used in Apple iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1...CVE-2009-16927.1 HighJune 19, 2009
apple iphone os, ipod touch +1 moreThe Telephony component in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1...CVE-2009-16837.8 HighJune 19, 2009
apple iphone os, ipod touch +1 moreSafari in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 does...CVE-2009-16802.1 LowJune 19, 2009
apple iphone os, ipod touch +1 moreThe Profiles component in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1...CVE-2009-16792.1 LowJune 19, 2009
apple iphone os, ipod touch +1 moreThe Mail component in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through...CVE-2009-0961Public exploit5.0 MediumJune 19, 2009
apple iphone os, ipod touch +1 moreThe Mail component in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through...CVE-2009-09604.3 MediumJune 19, 2009
apple iphone os, ipod touch +1 moreThe MPEG-4 video codec in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1...CVE-2009-09597.1 HighJune 19, 2009
apple iphone os, ipod touch +1 moreApple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 stores an...CVE-2009-09584.3 MediumJune 19, 2009
tekbase all-in-oneMultiple SQL injection vulnerabilities in TekBase All-in-One 3.1 allow remote authenticated users...CVE-2009-2120Public exploit6.5 MediumJune 18, 2009
f5 firepass ssl vpnCross-site scripting (XSS) vulnerability in the login interface (my.logon.php3) in F5 FirePass...CVE-2009-21194.3 MediumJune 18, 2009
irfanviewInteger overflow in IrfanView 4.23, when the resampling or screen fitting option is enabled,...CVE-2009-21186.8 MediumJune 18, 2009
phportaluye_paneli.php in phPortal 1.0 allows remote attackers to bypass authentication and obtain...CVE-2009-2117Public exploit7.5 HighJune 18, 2009
skybluecanvasDirectory traversal vulnerability in admin.php in SkyBlueCanvas 1.1 r237 allows remote...CVE-2009-2116Public exploit4.0 MediumJune 18, 2009
skybluecanvasadmin.php in SkyBlueCanvas 1.1 r237 allows remote authenticated administrators to obtain...CVE-2009-21156.8 MediumJune 18, 2009
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open