Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2009
August

CVEs published in August 2009

525 vulnerabilities, 81 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

phpstore real estateUnrestricted file upload vulnerability in PHPStore Real Estate allows remote authenticated users...CVE-2008-6930Public exploit6.5 MediumAugust 11, 2009
phpstore auto classifiedsUnrestricted file upload vulnerability in PHPStore Auto Classifieds allows remote authenticated...CVE-2008-6929Public exploit6.5 MediumAugust 11, 2009
phpstore complete classifiedsUnrestricted file upload vulnerability in PHPStore Complete Classifieds allows remote...CVE-2008-6928Public exploit6.5 MediumAugust 11, 2009
freenasCross-site scripting (XSS) vulnerability in FreeNAS before 0.69.2 allows remote attackers to...CVE-2009-27394.3 MediumAugust 11, 2009
freenasCross-site request forgery (CSRF) vulnerability in the WebGUI in FreeNAS before 0.7RC1 allows...CVE-2009-27384.3 MediumAugust 11, 2009
apache xerces-c\+\+Stack consumption vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ 2.7.0 and 2...CVE-2009-1885Fix available4.3 MediumAugust 11, 2009
sun-jester opennewsStatic code injection vulnerability in admin.php in sun-jester OpenNews 1.0 allows remote...CVE-2009-2736Public exploit6.5 MediumAugust 11, 2009
sun-jester opennewsSQL injection vulnerability in admin.php in sun-jester OpenNews 1.0, when magic_quotes_gpc is...CVE-2009-2735Public exploit6.8 MediumAugust 11, 2009
broadcom siteminder, sun j2ee +1 moreCA SiteMinder allows remote attackers to bypass cross-site scripting (XSS) protections for J2EE...CVE-2009-2705Public exploit4.3 MediumAugust 11, 2009
sun j2eeCA SiteMinder allows remote attackers to bypass cross-site scripting (XSS) protections for J2EE...CVE-2009-2704Public exploit4.3 MediumAugust 11, 2009
midnightbsd, mirbsd miros, netbsd +1 more +3 moreThe pf_test_rule function in OpenBSD Packet Filter (PF), as used in OpenBSD 4.2 through 4.5,...CVE-2009-0687Public exploit7.8 HighAugust 11, 2009
ibm aixStack-based buffer overflow in the _tt_internal_realpath function in the ToolTalk library (libtt...CVE-2009-2727Public exploitEPSS 26.7%9.3 HighAugust 10, 2009
sun java seRace condition in the java.lang package in Sun Java SE 5.0 before Update 20 has unknown impact...CVE-2009-27249.3 HighAugust 10, 2009
sun java seUnspecified vulnerability in deserialization in the Provider class in Sun Java SE 5.0 before...CVE-2009-272310.0 HighAugust 10, 2009
sun java seMultiple unspecified vulnerabilities in the Provider class in Sun Java SE 5.0 before Update 20...CVE-2009-272210.0 HighAugust 10, 2009
sun java seMultiple unspecified vulnerabilities in the Provider class in Sun Java SE 5.0 before Update 20...CVE-2009-272110.0 HighAugust 10, 2009
sun java seUnspecified vulnerability in the javax.swing.plaf.synth.SynthContext.isSubregion method in the...CVE-2009-27205.0 MediumAugust 10, 2009
sun java seThe Java Web Start implementation in Sun Java SE 6 before Update 15 allows context-dependent...CVE-2009-27195.0 MediumAugust 10, 2009
sun java seThe Abstract Window Toolkit (AWT) implementation in Sun Java SE 6 before Update 15 on X11 does...CVE-2009-27186.8 MediumAugust 10, 2009
sun java seThe Abstract Window Toolkit (AWT) implementation in Sun Java SE 6 before Update 15 on Windows...CVE-2009-27176.8 MediumAugust 10, 2009
sun java seThe plugin functionality in Sun Java SE 6 before Update 15 does not properly implement version...CVE-2009-27167.5 HighAugust 10, 2009
cpanelMultiple cross-site scripting (XSS) vulnerabilities in autoinstall4imagesgalleryupgrade.php in...CVE-2008-6927Public exploit4.3 MediumAugust 10, 2009
netenberg fantastico de luxeDirectory traversal vulnerability in autoinstall4imagesgalleryupgrade.php in the Fantastico De...CVE-2008-6926Public exploit6.8 MediumAugust 10, 2009
zenphotoCross-site scripting (XSS) vulnerability in function.php in Zenphoto 1.1.7 allows remote...CVE-2008-69254.3 MediumAugust 10, 2009
intelliants esyndicatMultiple cross-site scripting (XSS) vulnerabilities in register.php in eSyndiCat Directory 2.2...CVE-2008-6924Public exploit4.3 MediumAugust 10, 2009
sun java se, openjdk +1 moreThe encoder in Sun Java SE 6 before Update 15, and OpenJDK, grants read access to private...CVE-2009-26905.0 MediumAugust 10, 2009
sun java se, openjdk +1 moreJDK13Services.getProviders in Sun Java SE 5.0 before Update 20 and 6 before Update 15, and...CVE-2009-268910.0 HighAugust 10, 2009
sun java se, openjdk +1 moreThe Java Management Extensions (JMX) implementation in Sun Java SE 6 before Update 15, and...CVE-2009-247610.0 HighAugust 10, 2009
sun java se, openjdk +1 moreSun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, might allow context...CVE-2009-24757.8 HighAugust 10, 2009
ca advantage data transport, it client manager, software delivery +1 more +3 moreStack-based buffer overflow in a token searching function in the dtscore library in Data...CVE-2009-202610.0 HighAugust 10, 2009
sun openjdkThe Java Web Start framework in IcedTea in OpenJDK before 1.6.0.0-20.b16.fc10 on Fedora 10, and...CVE-2009-189610.0 HighAugust 10, 2009
joomla com contentSQL injection vulnerability in the content component (com_content) 1.0.0 for Joomla! allows...CVE-2008-6923Public exploit7.5 HighAugust 10, 2009
youngzsoft cmailserverMultiple stack-based buffer overflows in CMailCOM.dll in CMailServer 5.4.6 allow remote attackers...CVE-2008-6922Public exploit9.3 HighAugust 10, 2009
w2b phpadboardUnrestricted file upload vulnerability in index.php in phpAdBoard 1.8 allows remote attackers to...CVE-2008-6921Public exploit7.5 HighAugust 10, 2009
w2b phpemploymentUnrestricted file upload vulnerability in auth.php in phpEmployment 1.8 allows remote attackers...CVE-2008-6920Public exploit7.5 HighAugust 10, 2009
taskdriverprofileedit.php TaskDriver 1.3 and earlier allows remote attackers to bypass authentication and...CVE-2008-6919Public exploit7.5 HighAugust 10, 2009
theportal2.pl theportal2Unrestricted file upload vulnerability in admin/galeria.php in ThePortal2 2.2 allows remote...CVE-2008-6918Public exploit6.8 MediumAugust 10, 2009
xmlsoft libxml, libxml2, apple iphone os +16 more +18 moreMultiple use-after-free vulnerabilities in libxml2 2.5.10, 2.6.16, 2.6.26, 2.6.27, and 2.6.32,...CVE-2009-2416Fix available6.5 MediumAugust 10, 2009
xmlsoft libxml, libxml2 +1 moreStack consumption vulnerability in libxml2 2.5.10, 2.6.16, 2.6.26, 2.6.27, and 2.6.32, and libxml...CVE-2009-2414Fix available4.3 MediumAugust 10, 2009
mantis Debianmantis - information leakDSA-1856-1Fix availableNo scoreAugust 8, 2009
subversionMultiple integer overflows in the libsvn_delta library in Subversion before 1.5.7, and 1.6.x...CVE-2009-2411Fix available8.5 HighAugust 7, 2009
zope zodbZope Object Database (ZODB) Authentication bypass in ZEO storage serversCVE-2009-0669Fix available7.5 HighAugust 7, 2009
zope zodbZope Object Database (ZODB) vulnerable to arbitrary Python code execution in ZEO storage serversCVE-2009-0668Fix available6.5 MediumAugust 7, 2009
sun virtualboxSun VirtualBox 2.2 through 3.0.2 r49928 allows guest OS users to cause a denial of service (Linux...CVE-2009-2715Public exploit4.9 MediumAugust 7, 2009
sun virtualboxUnspecified vulnerability in Sun VirtualBox 3.0.0 and 3.0.2 allows guest OS users to cause a...CVE-2009-27144.9 MediumAugust 7, 2009
sun java system access manager, java system web server +1 moreThe CDCServlet component in Sun Java System Access Manager 7.0 2005Q4 and 7.1, when Cross Domain...CVE-2009-27134.3 MediumAugust 7, 2009
sun java system access manager, opensso enterprise, java system web server +2 moreSun Java System Access Manager 6.3 2005Q1, 7.0 2005Q4, and 7.1; and OpenSSO Enterprise 8.0; when...CVE-2009-27122.1 LowAugust 7, 2009
sun opensolaris, solaris, x.org x11 +2 moreXScreenSaver in Sun Solaris 9 and 10, OpenSolaris before snv_120, and X11 6.4.1 for Solaris 8,...CVE-2009-27114.9 MediumAugust 7, 2009
exoscripts exophpdeskSQL injection vulnerability in admin.php in Exocrew ExoPHPDesk 1.2 Final allows remote attackers...CVE-2008-6917Public exploit7.5 HighAugust 7, 2009
john doe netport software, siemens speedstream 5200 +1 moreSiemens SpeedStream 5200 with NetPort Software 1.1 allows remote attackers to bypass...CVE-2008-6916Public exploit10.0 HighAugust 7, 2009
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open