cve.nowby Sazabi

CVEs published April 9, 2009

31 CVEs were published on April 9, 2009: 0 critical, 0 high. Browse them by severity, product and exploitation status.

Published: 31
Critical: 0
High: 0
Medium: 0
Low: 0
Unrated: 31
Now in CISA KEV: 0
Fix available: 5

Most affected products

dojo: 1
org.apache.struts:struts2-core: 1
org.apache.struts:struts2-dojo-plugin: 1
org.apache.tiles:tiles-core: 1
struts:struts: 1

Medium, low and unrated 31

CVE-2009-1277SQL injection vulnerability in index.php in Gravity Board X (GBX) 2.0 BETA allows remote attackers to execute arbitrary SQL commands via…UnratedApr 9, 2009
CVE-2009-1278Static code injection vulnerability in forms/ajax/configure.php in Gravity Board X (GBX) 2.0 BETA allows remote attackers to inject…UnratedApr 9, 2009
CVE-2009-1279Multiple cross-site scripting (XSS) vulnerabilities in Joomla! 1.5 through 1.5.9 allow remote attackers to inject arbitrary web script or…UnratedApr 9, 2009
CVE-2009-1280Multiple cross-site request forgery (CSRF) vulnerabilities in the com_media component for Joomla! 1.5.x through 1.5.9 allow remote…UnratedApr 9, 2009
CVE-2009-1281Cross-site scripting (XSS) vulnerability in glFusion before 1.1.3 allows remote attackers to inject arbitrary web script or HTML via…UnratedApr 9, 2009
CVE-2009-1282SQL injection vulnerability in private/system/lib-session.php in glFusion 1.1.2 and earlier allows remote attackers to execute arbitrary…UnratedApr 9, 2009
CVE-2009-1283glFusion before 1.1.3 performs authentication with a user-provided password hash instead of a password, which allows remote attackers to…UnratedApr 9, 2009
CVE-2009-1284Buffer overflow in BibTeX 0.99 allows context-dependent attackers to cause a denial of service (memory corruption and crash) via a long…UnratedApr 9, 2009
CVE-2007-6726Multiple cross-site scripting (XSS) vulnerabilities in Dojo 0.4.1 and 0.4.2, as used in Apache Struts and other products, allow remote…org.apache.struts:struts2-dojo-pluginUnratedFix availableApr 9, 2009
CVE-2008-2025Cross-site scripting (XSS) vulnerability in Apache Struts before 1.2.9-162.31.1 on SUSE Linux Enterprise (SLE) 11, before 1.2.9-108.2 on…struts:strutsUnratedFix availableApr 9, 2009
CVE-2008-5519The JK Connector (aka mod_jk) 1.2.0 through 1.2.26 in Apache Tomcat allows remote attackers to obtain sensitive information via an…UnratedApr 9, 2009
CVE-2008-6681Cross-site scripting (XSS) vulnerability in dijit.Editor in Dojo before 1.1 allows remote attackers to inject arbitrary web script or HTML…dojoUnratedFix availableApr 9, 2009
CVE-2008-6682Multiple cross-site scripting (XSS) vulnerabilities in Apache Struts 2.0.x before 2.0.11.1 and 2.1.x before 2.1.1 allow remote attackers…org.apache.struts:struts2-coreUnratedFix availableApr 9, 2009
CVE-2009-0197Integer overflow in the FORMATS Plugin before 4.23 for IrfanView allows remote attackers to execute arbitrary code or cause a denial of…UnratedApr 9, 2009
CVE-2009-0793cmsxform.c in LittleCMS (aka lcms or liblcms) 1.18, as used in OpenJDK and other products, allows remote attackers to cause a denial of…UnratedApr 9, 2009
CVE-2009-1144Untrusted search path vulnerability in the Gentoo package of Xpdf before 3.02-r2 allows local users to gain privileges via a Trojan horse…UnratedApr 9, 2009
CVE-2009-1155Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.1(1) through 7.1(2)82, 7.2 before 7.2(4)27, 8.0 before…UnratedApr 9, 2009
CVE-2009-1156Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 Series devices 8.0 before 8.0(4)25 and 8.1 before 8.1(2)15…UnratedApr 9, 2009
CVE-2009-1157Memory leak on Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.0 before 7.0(8)6, 7.1 before 7.1(2)82…UnratedApr 9, 2009
CVE-2009-1158Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 Series devices 7.0 before 7.0(8)6, 7.1 before 7.1(2)82, 7.2…UnratedApr 9, 2009
CVE-2009-1159Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.2 before 7.2(4)26, 8.0…UnratedApr 9, 2009
CVE-2009-1160Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.0 before 7.0(8)1, 7.1 before 7.1(2)74, 7.2 before…UnratedApr 9, 2009
CVE-2009-1275Apache Tiles 2.1 before 2.1.2, as used in Apache Struts and other products, evaluates Expression Language (EL) expressions twice in…org.apache.tiles:tiles-coreUnratedFix availableApr 9, 2009
CVE-2009-1276XScreenSaver in Sun Solaris 10 and OpenSolaris before snv_109, and Solaris 8 and 9 with GNOME 2.0 or 2.0.2, allows physically proximate…UnratedApr 9, 2009
CVE-2009-0844The get_input_token function in the SPNEGO implementation in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3 allows remote attackers to cause…UnratedApr 9, 2009

Show all 31 entriesShow fewer entries