Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2009
August

CVEs published in August 2009

525 vulnerabilities, 81 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

wordpressWordpress before 2.8.3 does not check capabilities for certain actions, which allows remote...CVE-2009-2854Fix available6.4 MediumAugust 18, 2009
wordpressWordpress before 2.8.3 allows remote attackers to gain privileges via a direct request to (1)...CVE-2009-2853Fix available10.0 HighAugust 18, 2009
ryan.mcgeary wp-syntaxWP-Syntax plugin 0.9.1 and earlier for Wordpress, with register_globals enabled, allows remote...CVE-2009-2852Public exploit6.8 MediumAugust 18, 2009
wordpressCross-site scripting (XSS) vulnerability in the administrator interface in WordPress before 2.8.2...CVE-2009-2851Public exploitFix available4.3 MediumAugust 18, 2009
nasa goddard space flight center common data formatMultiple buffer overflows in NASA Common Data Format (CDF) allow context-dependent attackers to...CVE-2009-28509.3 HighAugust 18, 2009
linux kernelThe md driver (drivers/md/md.c) in the Linux kernel before 2.6.30.2 might allow local users to...CVE-2009-2849Fix available4.7 MediumAugust 18, 2009
linux kernel, canonical ubuntu linux, fedoraproject fedora +9 more +11 moreThe execve function in the Linux kernel, possibly 2.6.30-rc6 and earlier, does not properly clear...CVE-2009-28485.9 MediumAugust 18, 2009
linux kernelThe do_sigaltstack function in kernel/signal.c in Linux kernel 2.4 through 2.4.37 and 2.6 before...CVE-2009-2847Public exploit4.9 MediumAugust 18, 2009
linux kernelThe eisa_eeprom_read function in the parisc isa-eeprom component (drivers/parisc/eisa_eeprom.c)...CVE-2009-28467.8 HighAugust 18, 2009
linux kernelcfg80211 in net/wireless/scan.c in the Linux kernel 2.6.30-rc1 and other versions before 2.6.31...CVE-2009-28447.8 HighAugust 18, 2009
the-rat-cmsMultiple SQL injection vulnerabilities in login.php in The Rat CMS Alpha 2 allow remote attackers...CVE-2008-7003Public exploit7.5 HighAugust 18, 2009
phpPHP 5.2.5 does not enforce (a) open_basedir and (b) safe_mode_exec_dir restrictions for certain...CVE-2008-7002Public exploit7.2 HighAugust 18, 2009
creative mind creator cmsUnrestricted file upload vulnerability in the file manager in Creative Mind Creator CMS 5.0...CVE-2008-7001Public exploit7.5 HighAugust 18, 2009
phpauctionPHP remote file inclusion vulnerability in index.php in PHPAuction 3.2 allows remote attackers to...CVE-2008-7000Public exploit7.5 HighAugust 18, 2009
phpauctionphpAuction 3.2, and possibly 3.3.0 GPL Basic edition, allows remote attackers to obtain...CVE-2008-69995.0 MediumAugust 18, 2009
google chromeStack-based buffer overflow in chrome/common/gfx/url_elider.cc in Google Chrome 0.2.149.27 and...CVE-2008-6998Public exploit9.3 HighAugust 18, 2009
google chromeGoogle Chrome 0.2.149.27 allows user-assisted remote attackers to cause a denial of service ...CVE-2008-6997Public exploit4.3 MediumAugust 18, 2009
google chromeGoogle Chrome BETA (0.2.149.27) does not prompt the user before saving an executable file, which...CVE-2008-6996Public exploit5.0 MediumAugust 18, 2009
google chromeInteger underflow in net/base/escape.cc in chrome.dll in Google Chrome 0.2.149.27 allows remote...CVE-2008-6995Public exploit4.3 MediumAugust 18, 2009
google chromeStack-based buffer overflow in the SaveAs feature (SaveFileAsWithFilter function) in win_util.cc...CVE-2008-6994Public exploitEPSS 10.2%9.3 HighAugust 18, 2009
siemens gigaset wlan cameraSiemens Gigaset WLAN Camera 1.27 has an insecure default password, which allows remote attackers...CVE-2008-699310.0 HighAugust 18, 2009
greensql firewallGreenSQL Firewall (greensql-fw), possibly before 0.9.2 or 0.9.4, allows remote attackers to...CVE-2008-6992Public exploit7.5 HighAugust 18, 2009
cmsbrightSQL injection vulnerability in public/page.php in Websens CMSbright allows remote attackers to...CVE-2008-6991Public exploit7.5 HighAugust 18, 2009
ezphotogallerySQL injection vulnerability in gallery.php in Easy Photo Gallery (aka Ezphotogallery) 2.1 allows...CVE-2008-6990Public exploit7.5 HighAugust 18, 2009
ezphotogallerySQL injection vulnerability in gallery.php in Easy Photo Gallery (aka Ezphotogallery) 2.1 allows...CVE-2008-6989Public exploit7.5 HighAugust 18, 2009
ezphotogalleryMultiple cross-site scripting (XSS) vulnerabilities in Easy Photo Gallery (aka Ezphotogallery) 2...CVE-2008-6988Public exploit4.3 MediumAugust 18, 2009
ezonescripts dating website scriptUnrestricted file upload vulnerability in eZoneScripts Dating Website script allows remote...CVE-2008-69877.5 HighAugust 18, 2009
zen-cart zen cartSQL injection vulnerability in the actionMultipleAddProduct function in includes/classes...CVE-2008-69866.8 MediumAugust 18, 2009
zen-cart zen cartMultiple SQL injection vulnerabilities in includes/classes/shopping_cart.php in Zen Cart 1.2.0...CVE-2008-6985Public exploit6.8 MediumAugust 18, 2009
parallels pleskPlesk 8.6.0, when short mail login names (SHORTNAMES) are enabled, allows remote attackers to...CVE-2008-69845.8 MediumAugust 18, 2009
devalcmsmodules/tool/hitcounter.php in devalcms 1.4a allows remote attackers to execute arbitrary PHP...CVE-2008-6983Public exploit7.5 HighAugust 18, 2009
devalcmsCross-site scripting (XSS) vulnerability in index.php in devalcms 1.4a allows remote attackers to...CVE-2008-6982Public exploit4.3 MediumAugust 18, 2009
phpadultsite cmsindex.php in phpAdultSite CMS, possibly 2.3.2, allows remote attackers to obtain the full...CVE-2008-69815.0 MediumAugust 18, 2009
phpadultsite cmsSQL injection vulnerability in as_archives.php in phpAdultSite CMS, possibly 2.3.2, allows remote...CVE-2008-69807.5 HighAugust 18, 2009
phpadultsite cmsCross-site scripting (XSS) vulnerability in as_archives.php in phpAdultSite CMS, possibly 2.3.2,...CVE-2008-6979Public exploit4.3 MediumAugust 18, 2009
fullrevolution aspwebalbumUnrestricted file upload vulnerability in Full Revolution aspWebAlbum 3.2 allows remote attackers...CVE-2008-6978Public exploit6.8 MediumAugust 18, 2009
fullrevolution aspwebalbumCross-site scripting (XSS) vulnerability in album.asp in Full Revolution aspWebAlbum 3.2 allows...CVE-2008-6977Public exploit4.3 MediumAugust 18, 2009
mikrotik routerosMikroTik RouterOS 3.x through 3.13 and 2.x through 2.9.51 allows remote attackers to modify...CVE-2008-6976Public exploit6.4 MediumAugust 18, 2009
joshua oliver really simple cmsDirectory traversal vulnerability in plugings/pagecontent.php in Really Simple CMS (RSCMS) 0.3a...CVE-2009-2792Public exploit7.5 HighAugust 17, 2009
webdynamite projectbutlerPHP remote file inclusion vulnerability in pda_projects.php in WebDynamite ProjectButler 1.5.0...CVE-2009-2791Public exploit7.5 HighAugust 17, 2009
softbizscripts dating scriptSQL injection vulnerability in cat_products.php in SoftBiz Dating Script allows remote attackers...CVE-2009-2790Public exploit7.5 HighAugust 17, 2009
permis com groupsSQL injection vulnerability in the Permis (com_groups) component 1.0 for Joomla! allows remote...CVE-2009-27897.5 HighAugust 17, 2009
mobilelib goldMultiple SQL injection vulnerabilities in Mobilelib GOLD 3 allow remote attackers to execute...CVE-2009-2788Public exploit7.5 HighAugust 17, 2009
reputationDirectory traversal vulnerability in include/reputation/rep_profile.php in the Reputation plugin...CVE-2009-2787Public exploit6.8 MediumAugust 17, 2009
reputationSQL injection vulnerability in reputation.php in the Reputation plugin 2.2.4, 2.2.3, 2.0.4, and...CVE-2009-2786Public exploit7.5 HighAugust 17, 2009
classifiedphpscript php open classifieds scriptMultiple cross-site scripting (XSS) vulnerabilities in PHP Open Classifieds Script allow remote...CVE-2009-27854.3 MediumAugust 17, 2009
ditcms dit.cmsMultiple directory traversal vulnerabilities in dit.cms 1.3, when register_globals is enabled,...CVE-2009-2784Public exploit9.3 HighAugust 17, 2009
xoopsMultiple cross-site scripting (XSS) vulnerabilities in XOOPS 2.3.3 allow remote attackers to...CVE-2009-2783Public exploit4.3 MediumAugust 17, 2009
jfusion com jfusionSQL injection vulnerability in the JFusion (com_jfusion) component for Joomla! allows remote...CVE-2009-2782Public exploit7.5 HighAugust 17, 2009
arabportal arab portalSQL injection vulnerability in forum.php in Arab Portal 2.x, when magic_quotes_gpc is disabled,...CVE-2009-2781Public exploit6.0 MediumAugust 17, 2009
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open