# CVEs published 2009-08-10

27 CVEs were published on August 10, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2009-2727](https://cve.now/CVE-2009-2727.md): Stack-based buffer overflow in the \_tt\_internal\_realpath function in the ToolTalk library (libtt.a) in IBM AIX 5.2.0, 5.3.0, 5.3.7 through… (no CVSS)
- [CVE-2008-6924](https://cve.now/CVE-2008-6924.md): Multiple cross-site scripting (XSS) vulnerabilities in register.php in eSyndiCat Directory 2.2 allow remote attackers to inject arbitrary… (no CVSS)
- [CVE-2008-6925](https://cve.now/CVE-2008-6925.md): Cross-site scripting (XSS) vulnerability in function.php in Zenphoto 1.1.7 allows remote attackers to inject arbitrary web script or HTML… (no CVSS)
- [CVE-2008-6926](https://cve.now/CVE-2008-6926.md): Directory traversal vulnerability in autoinstall4imagesgalleryupgrade.php in the Fantastico De Luxe Module for cPanel allows remote… (no CVSS)
- [CVE-2008-6927](https://cve.now/CVE-2008-6927.md): Multiple cross-site scripting (XSS) vulnerabilities in autoinstall4imagesgalleryupgrade.php in the Fantastico De Luxe Module for cPanel… (no CVSS)
- [CVE-2009-2716](https://cve.now/CVE-2009-2716.md): The plugin functionality in Sun Java SE 6 before Update 15 does not properly implement version selection, which allows context-dependent… (no CVSS)
- [CVE-2009-2717](https://cve.now/CVE-2009-2717.md): The Abstract Window Toolkit (AWT) implementation in Sun Java SE 6 before Update 15 on Windows 2000 Professional does not provide a… (no CVSS)
- [CVE-2009-2718](https://cve.now/CVE-2009-2718.md): The Abstract Window Toolkit (AWT) implementation in Sun Java SE 6 before Update 15 on X11 does not impose the intended constraint on… (no CVSS)
- [CVE-2009-2719](https://cve.now/CVE-2009-2719.md): The Java Web Start implementation in Sun Java SE 6 before Update 15 allows context-dependent attackers to cause a denial of service… (no CVSS)
- [CVE-2009-2720](https://cve.now/CVE-2009-2720.md): Unspecified vulnerability in the javax.swing.plaf.synth.SynthContext.isSubregion method in the Swing implementation in Sun Java SE 6… (no CVSS)
- [CVE-2009-2721](https://cve.now/CVE-2009-2721.md): Multiple unspecified vulnerabilities in the Provider class in Sun Java SE 5.0 before Update 20 have unknown impact and attack vectors, aka… (no CVSS)
- [CVE-2009-2722](https://cve.now/CVE-2009-2722.md): Multiple unspecified vulnerabilities in the Provider class in Sun Java SE 5.0 before Update 20 have unknown impact and attack vectors, aka… (no CVSS)
- [CVE-2009-2723](https://cve.now/CVE-2009-2723.md): Unspecified vulnerability in deserialization in the Provider class in Sun Java SE 5.0 before Update 20 has unknown impact and attack… (no CVSS)
- [CVE-2009-2724](https://cve.now/CVE-2009-2724.md): Race condition in the java.lang package in Sun Java SE 5.0 before Update 20 has unknown impact and attack vectors, related to a "3Y Race… (no CVSS)
- [CVE-2008-6922](https://cve.now/CVE-2008-6922.md): Multiple stack-based buffer overflows in CMailCOM.dll in CMailServer 5.4.6 allow remote attackers to execute arbitrary code via a long… (no CVSS)
- [CVE-2008-6923](https://cve.now/CVE-2008-6923.md): SQL injection vulnerability in the content component (com\_content) 1.0.0 for Joomla! allows remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2009-1896](https://cve.now/CVE-2009-1896.md): The Java Web Start framework in IcedTea in OpenJDK before 1.6.0.0-20.b16.fc10 on Fedora 10, and before 1.6.0.0-27.b16.fc11 on Fedora 11… (no CVSS)
- [CVE-2009-2026](https://cve.now/CVE-2009-2026.md): Stack-based buffer overflow in a token searching function in the dtscore library in Data Transport Services in CA Software Delivery r11.2… (no CVSS)
- [CVE-2009-2415](https://cve.now/CVE-2009-2415.md): Multiple integer overflows in memcached 1.1.12 and 1.2.2 allow remote attackers to execute arbitrary code via vectors involving length… (no CVSS)
- [CVE-2009-2475](https://cve.now/CVE-2009-2475.md): Sun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, might allow context-dependent attackers to obtain sensitive… (no CVSS)
- [CVE-2009-2476](https://cve.now/CVE-2009-2476.md): The Java Management Extensions (JMX) implementation in Sun Java SE 6 before Update 15, and OpenJDK, does not properly enforce OpenType… (no CVSS)
- [CVE-2009-2689](https://cve.now/CVE-2009-2689.md): JDK13Services.getProviders in Sun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, grants full privileges to instances of… (no CVSS)
- [CVE-2009-2690](https://cve.now/CVE-2009-2690.md): The encoder in Sun Java SE 6 before Update 15, and OpenJDK, grants read access to private variables with unspecified names, which allows… (no CVSS)
- [CVE-2008-6918](https://cve.now/CVE-2008-6918.md): Unrestricted file upload vulnerability in admin/galeria.php in ThePortal2 2.2 allows remote attackers to execute arbitrary PHP code by… (no CVSS)
- [CVE-2008-6919](https://cve.now/CVE-2008-6919.md): profileedit.php TaskDriver 1.3 and earlier allows remote attackers to bypass authentication and gain administrative access by setting the… (no CVSS)
- [CVE-2008-6920](https://cve.now/CVE-2008-6920.md): Unrestricted file upload vulnerability in auth.php in phpEmployment 1.8 allows remote attackers to execute arbitrary code by uploading a… (no CVSS)
- [CVE-2008-6921](https://cve.now/CVE-2008-6921.md): Unrestricted file upload vulnerability in index.php in phpAdBoard 1.8 allows remote attackers to execute arbitrary code by uploading a… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2009-08-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.