CVEs published May 11, 2009
27 CVEs were published on May 11, 2009: 0 critical, 0 high.
- Published
- 27
- Critical
- 0
- High
- 0
- Medium
- 1
- Low
- 0
- Unrated
- 26
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- org.igniterealtime.openfire:parent
- 1
Medium, low and unrated 27
- CVE-2008-6803SQL injection vulnerability in diziler.asp in Yigit Aybuga Dizi Portali allows remote attackers to execute arbitrary SQL commands via the id
- CVE-2008-6804Tribiq CMS 5.0.9a beta allows remote attackers to bypass authentication and gain administrative access by setting the COOKIE_LAST_ADMIN_USER
- CVE-2008-6805Multiple SQL injection vulnerabilities in Mic_Blog 0.0.3, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL
- CVE-2009-1612Stack-based buffer overflow in the MPS.StormPlayer.1 ActiveX control in mps.dll 3.9.4.27 in Baofeng Storm allows remote attackers to execute
- CVE-2009-1613Multiple SQL injection vulnerabilities in leap.php in Leap CMS 0.1.4, when magic_quotes_gpc is disabled, allow remote attackers to execute a
- CVE-2009-1614Multiple cross-site scripting (XSS) vulnerabilities in Leap CMS 0.1.4 allow remote attackers to inject arbitrary web script or HTML via (1)
- CVE-2009-1615Unrestricted file upload vulnerability in Leap CMS 0.1.4 allows remote attackers to execute arbitrary code by uploading a file with an execu
- CVE-2009-1616Cross-site scripting (XSS) vulnerability in docs/showdoc.php in Coppermine Photo Gallery (CPG) before 1.4.22 allows remote attackers to inje
- CVE-2009-1604Unspecified vulnerability in LimeSurvey before 1.82 allows remote attackers to execute commands and obtain sensitive data via unknown attack
- CVE-2009-1605Heap-based buffer overflow in the loadexponentialfunc function in mupdf/pdf_function.c in MuPDF in the mupdf-20090223-win32 package, as used
- CVE-2009-1606Multiple stack-based and heap-based buffer overflows in Dafolo DafoloControl ActiveX control (DafoloFFControl.dll) 1.108.6.195 allow remote
- CVE-2009-1607Cross-site scripting (XSS) vulnerability in the administrator panel in phpForm.net LinkBase 2.0 allows remote attackers to inject arbitrary
- CVE-2009-1608Multiple buffer overflows in Microchip MPLAB IDE 8.30 and possibly earlier versions allow user-assisted remote attackers to execute arbitrar
- CVE-2009-1609Unrestricted file upload vulnerability in admin/uploadform.asp in Battle Blog 1.25 allows remote attackers to execute arbitrary code by uplo
- CVE-2009-1610admin/changepassword.php in Job Script Job Board Software 2.0 allows remote attackers to change the administrator password and gain administ
- CVE-2009-1611Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a long 257 reply to a
- CVE-2009-1603src/tools/pkcs11-tool.c in pkcs11-tool in OpenSC 0.11.7, when used with unspecified third-party PKCS#11 modules, generates RSA keys with inc
- CVE-2009-0194The domain-locking implementation in the GARMINAXCONTROL.GarminAxControl_t.1 ActiveX control in npGarmin.dll in the Garmin Communicator Plug
- CVE-2009-1194Integer overflow in the pango_glyph_string_set_size function in pango/glyphstring.c in Pango before 1.24 allows context-dependent attackers
- CVE-2009-1597Mozilla Firefox executes DOM calls in response to a javascript: URI in the target attribute of a submit element within a form contained in a
- CVE-2009-1598Google Chrome executes DOM calls in response to a javascript: URI in the target attribute of a submit element within a form contained in an
- CVE-2009-1599Opera executes DOM calls in response to a javascript: URI in the target attribute of a submit element within a form contained in an inline P
- CVE-2009-1600Apple Safari executes DOM calls in response to a javascript: URI in the target attribute of a submit element within a form contained in an i
- CVE-2009-1601The Ubuntu clamav-milter.init script in clamav-milter before 0.95.1+dfsg-1ubuntu1.2 in Ubuntu 9.04 sets the ownership of the current working
- CVE-2009-1602Pablo Software Solutions Quick 'n Easy Mail Server 3.3 allows remote attackers to cause a denial of service (daemon outage or CPU consumptio
- CVE-2009-1595The jabber:iq:auth implementation in IQAuthHandler.java in Ignite Realtime Openfire before 3.6.4 allows remote authenticated users to changeorg.igniterealtime.openfire:parent
- CVE-2009-1596Ignite Realtime Openfire before 3.6.5 does not properly implement the register.password (aka canChangePassword) console configuration settin