# CVEs published 2009-06-01

20 CVEs were published on June 1, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2003-1572](https://cve.now/CVE-2003-1572.md): Sun Java Media Framework (JMF) 2.1.1 through 2.1.1c allows unsigned applets to cause a denial of service (JVM crash) and read or write unaut (no CVSS)
- [CVE-2003-1573](https://cve.now/CVE-2003-1573.md): The PointBase 4.6 database component in the J2EE 1.4 reference implementation (J2EE/RI) allows remote attackers to execute arbitrary program (no CVSS)
- [CVE-2004-2763](https://cve.now/CVE-2004-2763.md): The default configuration of Sun ONE/iPlanet Web Server 4.1 SP1 through SP12 and 6.0 SP1 through SP5 responds to the HTTP TRACE request, whi (no CVSS)
- [CVE-2008-6819](https://cve.now/CVE-2008-6819.md): win32k.sys in Microsoft Windows Server 2003 and Vista allows local users to cause a denial of service (system crash) via vectors related to (no CVSS)
- [CVE-2009-1805](https://cve.now/CVE-2009-1805.md): Unspecified vulnerability in the VMware Descheduled Time Accounting driver in VMware Workstation 6.5.1 and earlier, VMware Player 2.5.1 and (no CVSS)
- [CVE-2009-1845](https://cve.now/CVE-2009-1845.md): Cross-site scripting (XSS) vulnerability in ajax/updatecheck.php in Lussumo Vanilla 1.1.5 and 1.1.7 allows remote attackers to inject arbitr (no CVSS)
- [CVE-2009-1846](https://cve.now/CVE-2009-1846.md): Multiple directory traversal vulnerabilities in SiteX 0.7.4 Build 418 and earlier allow remote attackers to include and execute arbitrary lo (no CVSS)
- [CVE-2009-1847](https://cve.now/CVE-2009-1847.md): Directory traversal vulnerability in index.php in Easy PX 41 CMS 9.0 B1 allows remote attackers to include and execute arbitrary local files (no CVSS)
- [CVE-2009-1848](https://cve.now/CVE-2009-1848.md): SQL injection vulnerability in the JoomlaMe AgoraGroups (aka AG or com\_agoragroup) component 0.3.5.3 for Joomla! allows remote attackers to (no CVSS)
- [CVE-2009-1849](https://cve.now/CVE-2009-1849.md): Cross-site scripting (XSS) vulnerability in the Monitor\_Bandwidth function in PRTG Traffic Grapher 6.2.2.977 and earlier allows remote attac (no CVSS)
- [CVE-2009-1850](https://cve.now/CVE-2009-1850.md): SQL injection vulnerability in index.php in phpBugTracker 1.0.3 allows remote attackers to execute arbitrary SQL commands via the password p (no CVSS)
- [CVE-2009-1851](https://cve.now/CVE-2009-1851.md): SQL injection vulnerability in include.php in phpBugTracker 1.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2009-1852](https://cve.now/CVE-2009-1852.md): Multiple SQL injection vulnerabilities in Graphiks MyForum 1.3 allow remote attackers to execute arbitrary SQL commands via the (1) Username (no CVSS)
- [CVE-2009-1853](https://cve.now/CVE-2009-1853.md): Multiple SQL injection vulnerabilities in index.php in Kensei Board 2.0 BETA (aka 2.0.0b) and earlier allow remote attackers to execute arbi (no CVSS)
- [CVE-2009-1854](https://cve.now/CVE-2009-1854.md): Million Dollar Text Links 1.0 allows remote attackers to bypass authentication and gain administrative access by setting the userid cookie t (no CVSS)
- [CVE-2008-6817](https://cve.now/CVE-2008-6817.md): Mole Group Lastminute Script 4.0 and earlier stores passwords in cleartext, which allows context-dependent attackers to obtain sensitive inf (no CVSS)
- [CVE-2008-6818](https://cve.now/CVE-2008-6818.md): Mole Group Real Estate Script 1.1 and earlier stores passwords in cleartext, which allows context-dependent attackers to obtain sensitive in (no CVSS)
- [CVE-2009-1842](https://cve.now/CVE-2009-1842.md): SQL injection vulnerability in main/tracking/userLog.php in Francisco Burzi PHP-Nuke 8.0 allows remote attackers to execute arbitrary SQL co (no CVSS)
- [CVE-2009-1843](https://cve.now/CVE-2009-1843.md): Multiple SQL injection vulnerabilities in Flash Quiz Beta 2 allow remote attackers to execute arbitrary SQL commands via the (1) quiz parame (no CVSS)
- [CVE-2009-1844](https://cve.now/CVE-2009-1844.md): Multiple cross-site scripting (XSS) vulnerabilities in Drupal 5.x before 5.18 and 6.x before 6.12 allow (1) remote authenticated users to in (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-06-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.