# CVEs published 2009-06-04

17 CVEs were published on June 4, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2009-1932](https://cve.now/CVE-2009-1932.md): Multiple integer overflows in the (1) user\_info\_callback, (2) user\_endrow\_callback, and (3) gst\_pngdec\_task functions… (no CVSS)
- [CVE-2009-1915](https://cve.now/CVE-2009-1915.md): Stack-based buffer overflow in the URL Search Hook (ICQToolBar.dll) in ICQ 6.5 allows remote attackers to cause a denial of service… (no CVSS)
- [CVE-2009-1916](https://cve.now/CVE-2009-1916.md): dig.php in GScripts.net DNS Tools allows remote attackers to execute arbitrary commands via shell metacharacters in the ns parameter. (no CVSS)
- [CVE-2008-6822](https://cve.now/CVE-2008-6822.md): Unrestricted file upload vulnerability in uploadp.php in New Earth Programming Team (NEPT) imgupload (aka Image Uploader) 1.0 allows… (no CVSS)
- [CVE-2008-6823](https://cve.now/CVE-2008-6823.md): Multiple cross-site request forgery (CSRF) vulnerabilities in the management interface on the A-LINK WL54AP3 and WL54AP2 access points… (no CVSS)
- [CVE-2008-6824](https://cve.now/CVE-2008-6824.md): The management interface on the A-LINK WL54AP3 and WL54AP2 access points has a blank default password for the admin account, which makes… (no CVSS)
- [CVE-2009-1385](https://cve.now/CVE-2009-1385.md): Integer underflow in the e1000\_clean\_rx\_irq function in drivers/net/e1000/e1000\_main.c in the e1000 driver in the Linux kernel before… (no CVSS)
- [CVE-2009-1386](https://cve.now/CVE-2009-1386.md): ssl/s3\_pkt.c in OpenSSL before 0.9.8i allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via… (no CVSS)
- [CVE-2009-1387](https://cve.now/CVE-2009-1387.md): The dtls1\_retrieve\_buffered\_fragment function in ssl/d1\_both.c in OpenSSL before 1.0.0 Beta 2 allows remote attackers to cause a denial of… (no CVSS)
- [CVE-2009-1907](https://cve.now/CVE-2009-1907.md): Cross-site scripting (XSS) vulnerability in claroline/linker/notfound.php in Claroline 1.8.11 allows remote attackers to inject arbitrary… (no CVSS)
- [CVE-2009-1908](https://cve.now/CVE-2009-1908.md): Cross-site scripting (XSS) vulnerability in Skip 1.0.2 and earlier, and 1.1RC2 and earlier 1.1RC versions, allows remote attackers to… (no CVSS)
- [CVE-2009-1909](https://cve.now/CVE-2009-1909.md): SQL injection vulnerability in Skip 1.0.2 and earlier, and 1.1RC2 and earlier 1.1RC versions, allows remote attackers to execute arbitrary… (no CVSS)
- [CVE-2009-1910](https://cve.now/CVE-2009-1910.md): SQL injection vulnerability in index.php in RTWebalbum 1.0.462 allows remote attackers to execute arbitrary SQL commands via the AlbumId… (no CVSS)
- [CVE-2009-1911](https://cve.now/CVE-2009-1911.md): Directory traversal vulnerability in .include/init.php (aka admin/\_include/init.php) in QuiXplorer 2.3.2 and earlier, as used in… (no CVSS)
- [CVE-2009-1912](https://cve.now/CVE-2009-1912.md): Directory traversal vulnerability in src/func/language.php in webSPELL 4.2.0e and earlier allows remote attackers to include and execute… (no CVSS)
- [CVE-2009-1913](https://cve.now/CVE-2009-1913.md): SQL injection vulnerability in manager.php in LuxBum 0.5.5, when magic\_quotes\_gpc is disabled and dotclear authentication is used, allows… (no CVSS)
- [CVE-2009-1914](https://cve.now/CVE-2009-1914.md): The pci\_register\_iommu\_region function in arch/sparc/kernel/pci\_common.c in the Linux kernel before 2.6.29 on the sparc64 platform allows… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2009-06-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.