Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2009
July

CVEs published in July 2009

443 vulnerabilities, 77 critical, 2 exploited.

Known exploitedIn KEVPublic exploitFix available

xigla absolute banner manager.netAbsolute Banner Manager .NET 4.0 allows remote attackers to bypass authentication and gain...CVE-2008-6858Public exploit7.5 HighJuly 14, 2009
xigla absolute podcast.netAbsolute Podcast .NET 1.0 allows remote attackers to bypass authentication and gain...CVE-2008-6857Public exploit7.5 HighJuly 14, 2009
xigla absolute news manager.netXigla Software Absolute News Manager.NET 5.1 allows remote attackers to bypass authentication and...CVE-2008-6856Public exploit7.5 HighJuly 14, 2009
xigla absolute news feedXigla Software Absolute News Feed 1.0 and possibly 1.5 allows remote attackers to bypass...CVE-2008-6855Public exploit7.5 HighJuly 14, 2009
xigla absolute faq manager .netXigla Software Absolute FAQ Manager.NET 6.0 allows remote attackers to bypass authentication and...CVE-2008-6854Public exploit7.5 HighJuly 14, 2009
isc dhcpStack-based buffer overflow in the script_write_params method in client/dhclient.c in ISC DHCP...CVE-2009-0692Public exploitFix availableEPSS 25.8%10.0 HighJuly 14, 2009
tallemu personal firewall, online armor personal firewall av\+ +1 moreThe OAmon.sys kernel driver 3.1.0.0 and earlier in Tall Emu Online Armor Personal Firewall AV+...CVE-2009-2450Public exploit7.2 HighJuly 13, 2009
adbnewssenderDirectory traversal vulnerability in maillinglist/admin/change_config.php in ADbNewsSender before...CVE-2009-24497.5 HighJuly 13, 2009
esoftpro online guestbook proCross-site scripting (XSS) vulnerability in ogp_show.php in Online Guestbook Pro 5.1 allows...CVE-2009-24484.3 MediumJuly 13, 2009
esoftpro online guestbook proMultiple cross-site scripting (XSS) vulnerabilities in ogp_show.php in Online Guestbook Pro 5.1...CVE-2009-24474.3 MediumJuly 13, 2009
mysqlMultiple format string vulnerabilities in the dispatch_command function in libmysqld/sql_parse.cc...CVE-2009-2446Public exploitFix availableEPSS 10.6%8.5 HighJuly 13, 2009
sun java system web serverOracle iPlanet Web Server (formerly Sun Java System Web Server or Sun ONE Web Server) 6.1 before...CVE-2009-24455.0 MediumJuly 13, 2009
adbnewssenderDirectory traversal vulnerability in maillinglist/setup/step1.php.inc in ADbNewsSender before 1.5...CVE-2009-24447.5 HighJuly 13, 2009
siteframe cmsSiteframe 3.2.3, and other 3.2.x versions, allows remote attackers to obtain configuration...CVE-2009-2443Public exploit5.0 MediumJuly 13, 2009
linea21Cross-site scripting (XSS) vulnerability in public/index.php in Linea21 1.2.1 allows remote...CVE-2009-2442Public exploit4.3 MediumJuly 13, 2009
esoftpro online guestbook proCross-site scripting (XSS) vulnerability in ogp_show.php in Online Guestbook Pro 5.1 allows...CVE-2009-2441Public exploit4.3 MediumJuly 13, 2009
jnmsolutions guestbookCross-site scripting (XSS) vulnerability in index.php in JNM Guestbook 3.0 allows remote...CVE-2009-2440Public exploit4.3 MediumJuly 13, 2009
web development house alibaba cloneMultiple SQL injection vulnerabilities in Web Development House Alibaba Clone allow remote...CVE-2009-2439Public exploit7.5 HighJuly 13, 2009
clansphereCross-site scripting (XSS) vulnerability in index.php in the search module in ClanSphere 2009.0...CVE-2009-2438Public exploit4.3 MediumJuly 13, 2009
rentventoryMultiple cross-site scripting (XSS) vulnerabilities in index.php in Rentventory 1.0.1 allow...CVE-2009-2437Public exploit4.3 MediumJuly 13, 2009
phponlinedatingsoftware myphpdatingSQL injection vulnerability in page.php in Online Dating Software MyPHPDating 1.0 allows remote...CVE-2009-2436Public exploit7.5 HighJuly 13, 2009
ibm lotus instant messaging and web conferencingThe Sametime server in IBM Lotus Instant Messaging and Web Conferencing 6.5.1 generates error...CVE-2009-24355.0 MediumJuly 13, 2009
ibm aixBuffer overflow in the syscall implementation in IBM AIX 5.3 allows local users to gain...CVE-2009-24347.2 HighJuly 13, 2009
microsoft ie, internet explorer +1 moreStack-based buffer overflow in the AddFavorite method in Microsoft Internet Explorer allows...CVE-2009-2433Public exploitEPSS 18.9%4.3 MediumJuly 10, 2009
wordpress, wordpress mu +1 moreWordPress and WordPress MU before 2.8.1 allow remote attackers to obtain sensitive information...CVE-2009-2432Fix available5.0 MediumJuly 10, 2009
wordpressWordPress 2.7.1 places the username of a post's author in an HTML comment, which allows remote...CVE-2009-2431Fix available5.0 MediumJuly 10, 2009
wordpress, wordpress mu +1 moreThe forgotten mail interface in WordPress and WordPress MU before 2.8.1 exhibits different...CVE-2009-2336Fix available5.0 MediumJuly 10, 2009
wordpress, wordpress mu +1 moreWordPress and WordPress MU before 2.8.1 exhibit different behavior for a failed login attempt...CVE-2009-2335Public exploitFix availableEPSS 85.0%5.0 MediumJuly 10, 2009
wordpress, wordpress mu +1 morewp-admin/admin.php in WordPress and WordPress MU before 2.8.1 does not require administrative...CVE-2009-2334Public exploitFix available4.9 MediumJuly 10, 2009
sun opensolaris, solaris +1 moreUnspecified vulnerability in auditconfig in Sun Solaris 8, 9, 10, and OpenSolaris snv_01 through...CVE-2009-24304.6 MediumJuly 10, 2009
mcafee smartfilterSmartFilter Web Gateway Security 4.2.1.00 stores user credentials in cleartext in admin_backup...CVE-2009-24294.6 MediumJuly 10, 2009
tauschregal.de tausch ticket scriptMultiple SQL injection vulnerabilities in Tausch Ticket Script 3 allow remote attackers to...CVE-2009-2428Public exploit7.5 HighJuly 10, 2009
jobbrSQL injection vulnerability in co-profile.php in Jobbr 2.2.7 allows remote attackers to execute...CVE-2009-2427Public exploit7.5 HighJuly 10, 2009
torThe connection_edge_process_relay_cell_not_open function in src/or/relay.c in Tor 0.2.x before 0...CVE-2009-2426Fix available5.0 MediumJuly 10, 2009
torTor before 0.2.0.35 allows remote attackers to cause a denial of service (application crash) via...CVE-2009-2425Fix available5.0 MediumJuly 10, 2009
clone2009 ebay cloneCross-site scripting (XSS) vulnerability in search.php in Ebay Clone 2009 allows remote attackers...CVE-2009-2424Public exploit4.3 MediumJuly 10, 2009
ebayclonescript ebay cloneSQL injection vulnerability in category.php in Ebay Clone 2009 allows remote attackers to execute...CVE-2009-2423Public exploit7.5 HighJuly 10, 2009
rubyonrails ruby on rails, apple mac os x, mac os x server +2 morerails vulnerable to improper authenticationCVE-2009-2422Fix available9.8 CriticalJuly 10, 2009
awingsoft awakening winds3d viewer pluginInsecure method vulnerability in Awingsoft Awakening Winds3D Viewer plugin 3.5.0.0, 3.0.0.5, and...CVE-2009-2386Public exploit9.3 HighJuly 10, 2009
apache http server, canonical ubuntu linux, debian linux +6 more +8 moreThe mod_deflate module in Apache httpd 2.2.11 and earlier compresses large files until completion...CVE-2009-1891Fix availableEPSS 17.1%7.1 HighJuly 10, 2009
apple iphone os, ipod touch, safari +2 moreWebKit in Apple Safari before 4.0.2, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for...CVE-2009-17259.3 HighJuly 9, 2009
apple iphone os, ipod touch, safari +2 moreCross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0.2, as used on...CVE-2009-1724Public exploit4.3 MediumJuly 9, 2009
apple safariThe CFCharacterSetInitInlineBuffer method in CoreFoundation.dll in Apple Safari 3.2.3 allows...CVE-2009-24215.0 MediumJuly 9, 2009
apple safariApple Safari 3.2.3 does not properly implement the file: protocol handler, which allows remote...CVE-2009-24205.8 MediumJuly 9, 2009
apple safariUse-after-free vulnerability in the servePendingRequests function in WebCore in WebKit in Apple...CVE-2009-2419Public exploit4.3 MediumJuly 9, 2009
shinjichiba scmpxHeap-based buffer overflow in SCMPX 1.5.1 allows remote attackers to cause a denial of service ...CVE-2009-2403Public exploit9.3 HighJuly 9, 2009
phpecho cms cmsSQL injection vulnerability in index.php in the forum module in PHPEcho CMS 2.0-rc3 allows remote...CVE-2009-2402Public exploit7.5 HighJuly 9, 2009
phpecho cms cmsCross-site scripting (XSS) vulnerability in PHPEcho CMS 2.0-rc3 allows remote attackers to inject...CVE-2009-2401Public exploit4.3 MediumJuly 9, 2009
fijiwebdesign com phpSQL injection vulnerability in the PHP (com_php) component for Joomla! allows remote attackers to...CVE-2009-2400Public exploit7.5 HighJuly 9, 2009
dutchmonkey dm filemanagerPHP remote file inclusion vulnerability in dm-albums/template/album.php in DM FileManager 3.9.4,...CVE-2009-2399Public exploit6.8 MediumJuly 9, 2009
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open