CVEs published June 15, 2009
17 CVEs were published on June 15, 2009: 0 critical, 0 high.
- Published
- 17
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 17
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 17
- CVE-2009-2057Microsoft Internet Explorer before 8 uses the HTTP Host header to determine the context of a document provided in a (1) 4xx or (2) 5xx CONNE
- CVE-2009-2058Apple Safari before 3.2.2 uses the HTTP Host header to determine the context of a document provided in a (1) 4xx or (2) 5xx CONNECT response
- CVE-2009-2059Opera, possibly before 9.25, uses the HTTP Host header to determine the context of a document provided in a (1) 4xx or (2) 5xx CONNECT respo
- CVE-2009-2060src/net/http/http_transaction_winhttp.cc in Google Chrome before 1.0.154.53 uses the HTTP Host header to determine the context of a document
- CVE-2009-2061Mozilla Firefox before 3.0.10 processes a 3xx HTTP CONNECT response before a successful SSL handshake, which allows man-in-the-middle attack
- CVE-2009-2062Apple Safari before 3.2.2 processes a 3xx HTTP CONNECT response before a successful SSL handshake, which allows man-in-the-middle attackers
- CVE-2009-2063Opera, possibly before 9.25, processes a 3xx HTTP CONNECT response before a successful SSL handshake, which allows man-in-the-middle attacke
- CVE-2009-2064Microsoft Internet Explorer 8, and possibly other versions, detects http content in https web pages only when the top-level frame uses https
- CVE-2009-2065Mozilla Firefox 3.0.10, and possibly other versions, detects http content in https web pages only when the top-level frame uses https, which
- CVE-2009-2066Apple Safari detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle attackers to e
- CVE-2009-2067Opera detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle attackers to execute
- CVE-2009-2068Google Chrome detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle attackers to
- CVE-2009-2069Microsoft Internet Explorer before 8 displays a cached certificate for a (1) 4xx or (2) 5xx CONNECT response page returned by a proxy server
- CVE-2009-2070Opera displays a cached certificate for a (1) 4xx or (2) 5xx CONNECT response page returned by a proxy server, which allows man-in-the-middl
- CVE-2009-2071Google Chrome before 1.0.154.53 displays a cached certificate for a (1) 4xx or (2) 5xx CONNECT response page returned by a proxy server, whi
- CVE-2009-2072Apple Safari does not require a cached certificate before displaying a lock icon for an https web site, which allows man-in-the-middle attac
- CVE-2009-2073Cross-site request forgery (CSRF) vulnerability in Linksys WRT160N wireless router hardware 1 and firmware 1.02.2 allows remote attackers to