# CVEs published 2009-04-23 25 CVEs were published on April 23, 2009: 0 critical, 0 high. Days are UTC. - [CVE-2009-0165](https://cve.now/CVE-2009-0165.md): Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, as used in Poppler and other products, when running on Mac OS X, has… (no CVSS) - [CVE-2009-1187](https://cve.now/CVE-2009-1187.md): Integer overflow in the JBIG2 decoding feature in Poppler before 0.10.6 allows remote attackers to cause a denial of service (crash) and… (no CVSS) - [CVE-2009-1188](https://cve.now/CVE-2009-1188.md): Integer overflow in the JBIG2 decoding feature in the SplashBitmap::SplashBitmap function in SplashBitmap.cc in Xpdf 3.x before 3.02pl4… (no CVSS) - [CVE-2008-6744](https://cve.now/CVE-2008-6744.md): Cross-site request forgery (CSRF) vulnerability in Cybozu Office 6, Cybozu Dezie before 6.0(1.0), and Cybozu Garoon 2.0.0 through 2.1.3… (no CVSS) - [CVE-2008-6745](https://cve.now/CVE-2008-6745.md): index.php in BlogPHP 2.0 allows remote attackers to gain administrator privileges via a crafted email parameter in a register2 action. (no CVSS) - [CVE-2008-6746](https://cve.now/CVE-2008-6746.md): Cross-site scripting (XSS) vulnerability in the contact display view in Turba Contact Manager H3 before 2.2.1 allows remote attackers to… (no CVSS) - [CVE-2008-6747](https://cve.now/CVE-2008-6747.md): dotProject before 2.1.2 does not properly restrict access to administrative pages, which allows remote attackers to gain privileges. (no CVSS) - [CVE-2009-0146](https://cve.now/CVE-2009-0146.md): Multiple buffer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allow remote… (no CVSS) - [CVE-2009-0147](https://cve.now/CVE-2009-0147.md): Multiple integer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allow remote… (no CVSS) - [CVE-2009-0163](https://cve.now/CVE-2009-0163.md): Integer overflow in the TIFF image decoding routines in CUPS 1.3.9 and earlier allows remote attackers to cause a denial of service… (no CVSS) - [CVE-2009-0166](https://cve.now/CVE-2009-0166.md): The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allows remote attackers to cause a denial of… (no CVSS) - [CVE-2009-0195](https://cve.now/CVE-2009-0195.md): Heap-based buffer overflow in Xpdf 3.02pl2 and earlier, CUPS 1.3.9, and probably other products, allows remote attackers to execute… (no CVSS) - [CVE-2009-0662](https://cve.now/CVE-2009-0662.md): The PlonePAS product 3.x before 3.9 and 3.2.x before 3.2.2, a product for Plone, does not properly handle the login form, which allows… (no CVSS, plone · products-plonepas) - [CVE-2009-0664](https://cve.now/CVE-2009-0664.md): Multiple cross-site scripting (XSS) vulnerabilities in Mahara 1.0.x before 1.0.11 and 1.1.x before 1.1.3 allow remote attackers to inject… (no CVSS) - [CVE-2009-0799](https://cve.now/CVE-2009-0799.md): The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers… (no CVSS) - [CVE-2009-0800](https://cve.now/CVE-2009-0800.md): Multiple "input validation flaws" in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and… (no CVSS) - [CVE-2009-1179](https://cve.now/CVE-2009-1179.md): Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products… (no CVSS) - [CVE-2009-1180](https://cve.now/CVE-2009-1180.md): The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers… (no CVSS) - [CVE-2009-1181](https://cve.now/CVE-2009-1181.md): The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers… (no CVSS) - [CVE-2009-1182](https://cve.now/CVE-2009-1182.md): Multiple buffer overflows in the JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other… (no CVSS) - [CVE-2009-1183](https://cve.now/CVE-2009-1183.md): The JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote… (no CVSS) - [CVE-2009-1191](https://cve.now/CVE-2009-1191.md): mod\_proxy\_ajp.c in the mod\_proxy\_ajp module in the Apache HTTP Server 2.2.11 allows remote attackers to obtain sensitive response data… (no CVSS) - [CVE-2009-1357](https://cve.now/CVE-2009-1357.md): CRLF injection vulnerability in da/DA/Login in Sun Java System Delegated Administrator 6.2 through 6.4 allows remote attackers to inject… (no CVSS) - [CVE-2009-1371](https://cve.now/CVE-2009-1371.md): The CLI\_ISCONTAINED macro in libclamav/others.h in ClamAV before 0.95.1 allows remote attackers to cause a denial of service (application… (no CVSS) - [CVE-2009-1372](https://cve.now/CVE-2009-1372.md): Stack-based buffer overflow in the cli\_url\_canon function in libclamav/phishcheck.c in ClamAV before 0.95.1 allows remote attackers to… (no CVSS) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/archive/2009-04-23 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.