# CVEs published 2009-02-04

21 CVEs were published on February 4, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2009-0352](https://cve.now/CVE-2009-0352.md): Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.6, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allow rem (no CVSS)
- [CVE-2009-0353](https://cve.now/CVE-2009-0353.md): Unspecified vulnerability in Mozilla Firefox 3.x before 3.0.6, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allows remote attack (no CVSS)
- [CVE-2009-0354](https://cve.now/CVE-2009-0354.md): Cross-domain vulnerability in js/src/jsobj.cpp in Mozilla Firefox 3.x before 3.0.6 allows remote attackers to bypass the Same Origin Policy, (no CVSS)
- [CVE-2009-0355](https://cve.now/CVE-2009-0355.md): components/sessionstore/src/nsSessionStore.js in Mozilla Firefox before 3.0.6 does not block changes of INPUT elements to type="file" during (no CVSS)
- [CVE-2009-0356](https://cve.now/CVE-2009-0356.md): Mozilla Firefox before 3.0.6 and SeaMonkey do not block links to the (1) about:plugins and (2) about:config URIs from .desktop files, which (no CVSS)
- [CVE-2009-0357](https://cve.now/CVE-2009-0357.md): Mozilla Firefox before 3.0.6 and SeaMonkey before 1.1.15 do not properly restrict access from web pages to the (1) Set-Cookie and (2) Set-Co (no CVSS)
- [CVE-2009-0358](https://cve.now/CVE-2009-0358.md): Mozilla Firefox 3.x before 3.0.6 does not properly implement the (1) no-store and (2) no-cache Cache-Control directives, which allows local (no CVSS)
- [CVE-2009-0388](https://cve.now/CVE-2009-0388.md): Multiple integer signedness errors in (1) UltraVNC 1.0.2 and 1.0.5 and (2) TightVnc 1.3.9 allow remote VNC servers to cause a denial of serv (no CVSS)
- [CVE-2009-0418](https://cve.now/CVE-2009-0418.md): The IPv6 Neighbor Discovery Protocol (NDP) implementation in HP HP-UX B.11.11, B.11.23, and B.11.31 does not validate the origin of Neighbor (no CVSS)
- [CVE-2009-0419](https://cve.now/CVE-2009-0419.md): Microsoft XML Core Services, as used in Microsoft Expression Web, Office, Internet Explorer 6 and 7, and other products, does not properly r (no CVSS)
- [CVE-2008-6046](https://cve.now/CVE-2008-6046.md): SQL injection vulnerability in ADbNewsSender before 1.5.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors (no CVSS)
- [CVE-2008-6047](https://cve.now/CVE-2008-6047.md): Cross-site scripting (XSS) vulnerability in ADbNewsSender before 1.5.2 allows remote attackers to inject arbitrary web script or HTML via un (no CVSS)
- [CVE-2008-6048](https://cve.now/CVE-2008-6048.md): Multiple cross-site request forgery (CSRF) vulnerabilities in TangoCMS before 2.2.0 allow remote attackers to hijack the authentication of a (no CVSS)
- [CVE-2008-6050](https://cve.now/CVE-2008-6050.md): SQL injection vulnerability in the Tech Articles (com\_tech\_article) 1.0 component for Joomla! allows remote attackers to execute arbitrary S (no CVSS)
- [CVE-2008-6051](https://cve.now/CVE-2008-6051.md): MetaCart Free stores metacart.mdb under the web root with insufficient access control, which allows remote attackers to obtain usernames and (no CVSS)
- [CVE-2008-6052](https://cve.now/CVE-2008-6052.md): PreProjects Pre E-Learning Portal stores db\_elearning.mdb under the web root with insufficient access control, which allows remote attackers (no CVSS)
- [CVE-2008-6053](https://cve.now/CVE-2008-6053.md): PreProjects Pre Resume Submitter stores onlineresume.mdb under the web root with insufficient access control, which allows remote attackers (no CVSS)
- [CVE-2008-6054](https://cve.now/CVE-2008-6054.md): PreProjects Pre Courier and Cargo Business stores dbcourior.mdb under the web root with insufficient access control, which allows remote att (no CVSS)
- [CVE-2008-6055](https://cve.now/CVE-2008-6055.md): PreProjects Pre Classified Listings stores pclasp.mdb under the web root with insufficient access control, which allows remote attackers to (no CVSS)
- [CVE-2008-6056](https://cve.now/CVE-2008-6056.md): Multiple cross-site scripting (XSS) vulnerabilities in World Recipe 2.11 allow remote attackers to inject arbitrary web script or HTML via t (no CVSS)
- [CVE-2008-6057](https://cve.now/CVE-2008-6057.md): Doug Luxem Liberum Help Desk 0.97.3 stores db/helpdesk2000.mdb under the web root with insufficient access control, which allows remote atta (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-02-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.