cve.nowby Sazabi

CVEs published May 11, 2009

27 CVEs were published on May 11, 2009: 0 critical, 0 high. Browse them by severity, product and exploitation status.

Published: 27
Critical: 0
High: 0
Medium: 1
Low: 0
Unrated: 26
Now in CISA KEV: 0
Fix available: 1

Most affected products

org.igniterealtime.openfire:parent: 1

Medium, low and unrated 27

CVE-2008-6803SQL injection vulnerability in diziler.asp in Yigit Aybuga Dizi Portali allows remote attackers to execute arbitrary SQL commands via the…UnratedMay 11, 2009
CVE-2008-6804Tribiq CMS 5.0.9a beta allows remote attackers to bypass authentication and gain administrative access by setting the…UnratedMay 11, 2009
CVE-2008-6805Multiple SQL injection vulnerabilities in Mic_Blog 0.0.3, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary…UnratedMay 11, 2009
CVE-2009-1612Stack-based buffer overflow in the MPS.StormPlayer.1 ActiveX control in mps.dll 3.9.4.27 in Baofeng Storm allows remote attackers to…UnratedMay 11, 2009
CVE-2009-1613Multiple SQL injection vulnerabilities in leap.php in Leap CMS 0.1.4, when magic_quotes_gpc is disabled, allow remote attackers to execute…UnratedMay 11, 2009
CVE-2009-1614Multiple cross-site scripting (XSS) vulnerabilities in Leap CMS 0.1.4 allow remote attackers to inject arbitrary web script or HTML via…UnratedMay 11, 2009
CVE-2009-1615Unrestricted file upload vulnerability in Leap CMS 0.1.4 allows remote attackers to execute arbitrary code by uploading a file with an…UnratedMay 11, 2009
CVE-2009-1616Cross-site scripting (XSS) vulnerability in docs/showdoc.php in Coppermine Photo Gallery (CPG) before 1.4.22 allows remote attackers to…UnratedMay 11, 2009
CVE-2009-1604Unspecified vulnerability in LimeSurvey before 1.82 allows remote attackers to execute commands and obtain sensitive data via unknown…UnratedMay 11, 2009
CVE-2009-1605Heap-based buffer overflow in the loadexponentialfunc function in mupdf/pdf_function.c in MuPDF in the mupdf-20090223-win32 package, as…Medium · 5.4May 11, 2009
CVE-2009-1606Multiple stack-based and heap-based buffer overflows in Dafolo DafoloControl ActiveX control (DafoloFFControl.dll) 1.108.6.195 allow…UnratedMay 11, 2009
CVE-2009-1607Cross-site scripting (XSS) vulnerability in the administrator panel in phpForm.net LinkBase 2.0 allows remote attackers to inject…UnratedMay 11, 2009
CVE-2009-1608Multiple buffer overflows in Microchip MPLAB IDE 8.30 and possibly earlier versions allow user-assisted remote attackers to execute…UnratedMay 11, 2009
CVE-2009-1609Unrestricted file upload vulnerability in admin/uploadform.asp in Battle Blog 1.25 allows remote attackers to execute arbitrary code by…UnratedMay 11, 2009
CVE-2009-1610admin/changepassword.php in Job Script Job Board Software 2.0 allows remote attackers to change the administrator password and gain…UnratedMay 11, 2009
CVE-2009-1611Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a long 257 reply to…UnratedMay 11, 2009
CVE-2009-1603src/tools/pkcs11-tool.c in pkcs11-tool in OpenSC 0.11.7, when used with unspecified third-party PKCS#11 modules, generates RSA keys with…UnratedMay 11, 2009
CVE-2009-0194The domain-locking implementation in the GARMINAXCONTROL.GarminAxControl_t.1 ActiveX control in npGarmin.dll in the Garmin Communicator…UnratedMay 11, 2009
CVE-2009-1194Integer overflow in the pango_glyph_string_set_size function in pango/glyphstring.c in Pango before 1.24 allows context-dependent…UnratedMay 11, 2009
CVE-2009-1597Mozilla Firefox executes DOM calls in response to a javascript: URI in the target attribute of a submit element within a form contained in…UnratedMay 11, 2009
CVE-2009-1598Google Chrome executes DOM calls in response to a javascript: URI in the target attribute of a submit element within a form contained in…UnratedMay 11, 2009
CVE-2009-1599Opera executes DOM calls in response to a javascript: URI in the target attribute of a submit element within a form contained in an inline…UnratedMay 11, 2009
CVE-2009-1600Apple Safari executes DOM calls in response to a javascript: URI in the target attribute of a submit element within a form contained in an…UnratedMay 11, 2009
CVE-2009-1601The Ubuntu clamav-milter.init script in clamav-milter before 0.95.1+dfsg-1ubuntu1.2 in Ubuntu 9.04 sets the ownership of the current…UnratedMay 11, 2009
CVE-2009-1602Pablo Software Solutions Quick 'n Easy Mail Server 3.3 allows remote attackers to cause a denial of service (daemon outage or CPU…UnratedMay 11, 2009

Show all 27 entriesShow fewer entries