# CVEs published 2009-07-30

16 CVEs were published on July 30, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2008-6883](https://cve.now/CVE-2008-6883.md): SQL injection vulnerability in the Live Chat (com\_livechat) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2009-2651](https://cve.now/CVE-2009-2651.md): main/rtp.c in Asterisk Open Source 1.6.1 before 1.6.1.2 allows remote attackers to cause a denial of service (crash) via an RTP text frame… (no CVSS)
- [CVE-2008-6879](https://cve.now/CVE-2008-6879.md): Cross-site scripting (XSS) vulnerability in Apache Roller 2.3, 3.0, 3.1, and 4.0 allows remote attackers to inject arbitrary web script or… (no CVSS)
- [CVE-2008-6880](https://cve.now/CVE-2008-6880.md): SQL injection vulnerability in joke.php in EasySiteNetwork Free Jokes Website allows remote attackers to execute arbitrary SQL commands… (no CVSS)
- [CVE-2008-6881](https://cve.now/CVE-2008-6881.md): Multiple SQL injection vulnerabilities in the Live Chat (com\_livechat) component 1.0 for Joomla! allow remote attackers to execute… (no CVSS)
- [CVE-2008-6882](https://cve.now/CVE-2008-6882.md): Live Chat (com\_livechat) component 1.0 for Joomla! allows remote attackers to use the xmlhttp.php script as an open HTTP proxy to hide… (no CVSS)
- [CVE-2009-2408](https://cve.now/CVE-2009-2408.md): Mozilla Network Security Services (NSS) before 3.12.3, Firefox before 3.0.13, Thunderbird before 2.0.0.23, and SeaMonkey before 1.1.18 do… (no CVSS)
- [CVE-2009-2409](https://cve.now/CVE-2009-2409.md): The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through… (no CVSS)
- [CVE-2009-2646](https://cve.now/CVE-2009-2646.md): Multiple unspecified vulnerabilities in the PDF distiller in the Attachment Service component in Research In Motion (RIM) BlackBerry… (no CVSS)
- [CVE-2009-2647](https://cve.now/CVE-2009-2647.md): Unspecified vulnerability in Kaspersky Anti-Virus 2010 and Kaspersky Internet Security 2010 before Critical Fix 9.0.0.463 allows remote… (no CVSS)
- [CVE-2009-2648](https://cve.now/CVE-2009-2648.md): FlashDen Guestbook allows remote attackers to obtain configuration information via a direct request to amfphp/phpinfo.php, which calls the… (no CVSS)
- [CVE-2009-2649](https://cve.now/CVE-2009-2649.md): The IATA (ata) driver in FreeBSD 6.0 and 8.0, when read access to /dev is available, allows local users to cause a denial of service… (no CVSS)
- [CVE-2009-2650](https://cve.now/CVE-2009-2650.md): Heap-based buffer overflow in Sorcerer Software MultiMedia Jukebox 4.0 Build 020124 allows remote attackers to cause a denial of service… (no CVSS)
- [CVE-2009-1168](https://cve.now/CVE-2009-1168.md): Cisco IOS 12.0(32)S12 through 12.0(32)S13 and 12.0(33)S3 through 12.0(33)S4, 12.0(32)SY8 through 12.0(32)SY9, 12.2(33)SXI1, 12.2XNC before… (no CVSS)
- [CVE-2009-2049](https://cve.now/CVE-2009-2049.md): Cisco IOS 12.0(32)S12 through 12.0(32)S13 and 12.0(33)S3 through 12.0(33)S4, 12.0(32)SY8 through 12.0(32)SY9, 12.2(33)SXI1 through… (no CVSS)
- [CVE-2009-2410](https://cve.now/CVE-2009-2410.md): The local\_handler\_callback function in server/responder/pam/pam\_LOCAL\_domain.c in sssd 0.4.1 does not properly handle blank-password… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2009-07-30
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.