# CVEs published 2009-07-16

17 CVEs were published on July 16, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2009-2480](https://cve.now/CVE-2009-2480.md): Cross-site scripting (XSS) vulnerability in mt-wizard.cgi in Six Apart Movable Type 4.24, and 4.25 when global templates are not… (no CVSS)
- [CVE-2009-2481](https://cve.now/CVE-2009-2481.md): mt-wizard.cgi in Six Apart Movable Type before 4.261, when global templates are not initialized, allows remote attackers to bypass access… (no CVSS)
- [CVE-2009-2482](https://cve.now/CVE-2009-2482.md): The pam\_unix module in OpenPAM in NetBSD 4.0 before 4.0.2 and 5.0 before 5.0.1 allows local users to change the current root password if… (no CVSS)
- [CVE-2009-2483](https://cve.now/CVE-2009-2483.md): libprop/prop\_object.c in proplib in NetBSD 4.0 and 4.0.1 allows local users to cause a denial of service (NULL pointer dereference and… (no CVSS)
- [CVE-2009-2484](https://cve.now/CVE-2009-2484.md): Stack-based buffer overflow in the Win32AddConnection function in modules/access/smb.c in VideoLAN VLC media player 0.9.9, when running on… (no CVSS)
- [CVE-2009-2485](https://cve.now/CVE-2009-2485.md): Stack-based buffer overflow in HT-MP3Player 1.0 allows remote attackers to execute arbitrary code via a long string in a .ht3 file. (no CVSS)
- [CVE-2009-2486](https://cve.now/CVE-2009-2486.md): Unspecified vulnerability in the SCTP implementation in Sun Solaris 10, and OpenSolaris before snv\_120, allows remote attackers to cause a… (no CVSS)
- [CVE-2009-2487](https://cve.now/CVE-2009-2487.md): Use-after-free vulnerability in the frpr\_icmp function in the ipfilter (aka IP Filter) subsystem in Sun Solaris 10, and OpenSolaris snv\_45… (no CVSS)
- [CVE-2009-2488](https://cve.now/CVE-2009-2488.md): Unspecified vulnerability in the NFSv4 module in the kernel in Sun Solaris 10, and OpenSolaris snv\_102 through snv\_119, allows local users… (no CVSS)
- [CVE-2009-2489](https://cve.now/CVE-2009-2489.md): Unspecified vulnerability in the utdmsession program in Sun Ray Server Software (SRSS) 4.0 allows local users to access the sessions of… (no CVSS)
- [CVE-2009-2490](https://cve.now/CVE-2009-2490.md): Unspecified vulnerability in the utaudiod daemon in Sun Ray Server Software (SRSS) 4.0, when Solaris Trusted Extensions is enabled, allows… (no CVSS)
- [CVE-2009-2491](https://cve.now/CVE-2009-2491.md): The utaudiod daemon in Sun Ray Server Software (SRSS) 4.0, when Solaris Trusted Extensions is enabled, allows local users to access the… (no CVSS)
- [CVE-2009-1895](https://cve.now/CVE-2009-1895.md): The personality subsystem in the Linux kernel before 2.6.31-rc3 has a PER\_CLEAR\_ON\_SETID setting that does not clear the… (no CVSS)
- [CVE-2009-2047](https://cve.now/CVE-2009-2047.md): Directory traversal vulnerability in the Administration interface in Cisco Customer Response Solutions (CRS) before 7.0(1) SR2 in Cisco… (no CVSS)
- [CVE-2009-2048](https://cve.now/CVE-2009-2048.md): Cross-site scripting (XSS) vulnerability in the Administration interface in Cisco Customer Response Solutions (CRS) before 7.0(1) SR2 in… (no CVSS)
- [CVE-2009-2478](https://cve.now/CVE-2009-2478.md): Mozilla Firefox 3.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via unspecified… (no CVSS)
- [CVE-2009-2479](https://cve.now/CVE-2009-2479.md): Mozilla Firefox 3.0.x, 3.5, and 3.5.1 on Windows allows remote attackers to cause a denial of service (uncaught exception and application… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2009-07-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.