# CVEs published 2009-06-01

20 CVEs were published on June 1, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2003-1572](https://cve.now/CVE-2003-1572.md): Sun Java Media Framework (JMF) 2.1.1 through 2.1.1c allows unsigned applets to cause a denial of service (JVM crash) and read or write… (no CVSS)
- [CVE-2003-1573](https://cve.now/CVE-2003-1573.md): The PointBase 4.6 database component in the J2EE 1.4 reference implementation (J2EE/RI) allows remote attackers to execute arbitrary… (no CVSS)
- [CVE-2004-2763](https://cve.now/CVE-2004-2763.md): The default configuration of Sun ONE/iPlanet Web Server 4.1 SP1 through SP12 and 6.0 SP1 through SP5 responds to the HTTP TRACE request… (no CVSS)
- [CVE-2008-6819](https://cve.now/CVE-2008-6819.md): win32k.sys in Microsoft Windows Server 2003 and Vista allows local users to cause a denial of service (system crash) via vectors related… (no CVSS)
- [CVE-2009-1805](https://cve.now/CVE-2009-1805.md): Unspecified vulnerability in the VMware Descheduled Time Accounting driver in VMware Workstation 6.5.1 and earlier, VMware Player 2.5.1… (no CVSS)
- [CVE-2009-1845](https://cve.now/CVE-2009-1845.md): Cross-site scripting (XSS) vulnerability in ajax/updatecheck.php in Lussumo Vanilla 1.1.5 and 1.1.7 allows remote attackers to inject… (no CVSS)
- [CVE-2009-1846](https://cve.now/CVE-2009-1846.md): Multiple directory traversal vulnerabilities in SiteX 0.7.4 Build 418 and earlier allow remote attackers to include and execute arbitrary… (no CVSS)
- [CVE-2009-1847](https://cve.now/CVE-2009-1847.md): Directory traversal vulnerability in index.php in Easy PX 41 CMS 9.0 B1 allows remote attackers to include and execute arbitrary local… (no CVSS)
- [CVE-2009-1848](https://cve.now/CVE-2009-1848.md): SQL injection vulnerability in the JoomlaMe AgoraGroups (aka AG or com\_agoragroup) component 0.3.5.3 for Joomla! allows remote attackers… (no CVSS)
- [CVE-2009-1849](https://cve.now/CVE-2009-1849.md): Cross-site scripting (XSS) vulnerability in the Monitor\_Bandwidth function in PRTG Traffic Grapher 6.2.2.977 and earlier allows remote… (no CVSS)
- [CVE-2009-1850](https://cve.now/CVE-2009-1850.md): SQL injection vulnerability in index.php in phpBugTracker 1.0.3 allows remote attackers to execute arbitrary SQL commands via the password… (no CVSS)
- [CVE-2009-1851](https://cve.now/CVE-2009-1851.md): SQL injection vulnerability in include.php in phpBugTracker 1.0.4 and earlier allows remote attackers to execute arbitrary SQL commands… (no CVSS)
- [CVE-2009-1852](https://cve.now/CVE-2009-1852.md): Multiple SQL injection vulnerabilities in Graphiks MyForum 1.3 allow remote attackers to execute arbitrary SQL commands via the (1)… (no CVSS)
- [CVE-2009-1853](https://cve.now/CVE-2009-1853.md): Multiple SQL injection vulnerabilities in index.php in Kensei Board 2.0 BETA (aka 2.0.0b) and earlier allow remote attackers to execute… (no CVSS)
- [CVE-2009-1854](https://cve.now/CVE-2009-1854.md): Million Dollar Text Links 1.0 allows remote attackers to bypass authentication and gain administrative access by setting the userid cookie… (no CVSS)
- [CVE-2008-6817](https://cve.now/CVE-2008-6817.md): Mole Group Lastminute Script 4.0 and earlier stores passwords in cleartext, which allows context-dependent attackers to obtain sensitive… (no CVSS)
- [CVE-2008-6818](https://cve.now/CVE-2008-6818.md): Mole Group Real Estate Script 1.1 and earlier stores passwords in cleartext, which allows context-dependent attackers to obtain sensitive… (no CVSS)
- [CVE-2009-1842](https://cve.now/CVE-2009-1842.md): SQL injection vulnerability in main/tracking/userLog.php in Francisco Burzi PHP-Nuke 8.0 allows remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2009-1843](https://cve.now/CVE-2009-1843.md): Multiple SQL injection vulnerabilities in Flash Quiz Beta 2 allow remote attackers to execute arbitrary SQL commands via the (1) quiz… (no CVSS)
- [CVE-2009-1844](https://cve.now/CVE-2009-1844.md): Multiple cross-site scripting (XSS) vulnerabilities in Drupal 5.x before 5.18 and 6.x before 6.12 allow (1) remote authenticated users to… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2009-06-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.