# CVEs published 2009-03-09

24 CVEs were published on March 9, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2009-0027](https://cve.now/CVE-2009-0027.md): The request handler in JBossWS in JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP06 and 4.3 before 4.3.0. (no CVSS)
- [CVE-2009-0537](https://cve.now/CVE-2009-0537.md): Integer overflow in the fts\_build function in fts.c in libc in (1) OpenBSD 4.4 and earlier and (2) Microsoft Interix 6.0 build 10.0.6030.0 a (no CVSS)
- [CVE-2009-0781](https://cve.now/CVE-2009-0781.md): Cross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples web application in Apache Tomcat 4. (no CVSS, org.apache.tomcat:tomcat)
- [CVE-2009-0825](https://cve.now/CVE-2009-0825.md): SQL injection vulnerability in system/rss.php in TinX/cms 3.x before 3.5.1 allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2009-0856](https://cve.now/CVE-2009-0856.md): Multiple cross-site scripting (XSS) vulnerabilities in sample applications in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35, (no CVSS)
- [CVE-2009-0857](https://cve.now/CVE-2009-0857.md): Cross-site scripting (XSS) vulnerability in /prm/reports in the Performance Reporting Module (PRM) for Sun Management Center (SunMC) 3.6.1 a (no CVSS)
- [CVE-2009-0858](https://cve.now/CVE-2009-0858.md): The response\_addname function in response.c in Daniel J. (no CVSS)
- [CVE-2009-0859](https://cve.now/CVE-2009-0859.md): The shm\_get\_stat function in ipc/shm.c in the shm subsystem in the Linux kernel before 2.6.28.5, when CONFIG\_SHMEM is disabled, misinterpret (no CVSS)
- [CVE-2009-0849](https://cve.now/CVE-2009-0849.md): Stack-based buffer overflow in the DtbClsLogin function in NovaStor NovaNET 12 allows remote attackers to (1) execute arbitrary code on Linu (no CVSS)
- [CVE-2009-0850](https://cve.now/CVE-2009-0850.md): Cross-site scripting (XSS) vulnerability in BitDefender Internet Security 2009 allows user-assisted remote attackers to inject arbitrary web (no CVSS)
- [CVE-2009-0851](https://cve.now/CVE-2009-0851.md): Multiple SQL injection vulnerabilities in CelerBB 0.0.2, when magic\_quotes\_gpc is disabled, allow remote attackers to execute arbitrary SQL (no CVSS)
- [CVE-2009-0852](https://cve.now/CVE-2009-0852.md): showme.php in CelerBB 0.0.2 allows remote attackers to obtain "reserved information" via the user parameter. (no CVSS)
- [CVE-2009-0853](https://cve.now/CVE-2009-0853.md): login.php in CelerBB 0.0.2, when magic\_quotes\_gpc is disabled, allows remote attackers to bypass authentication and obtain administrative ac (no CVSS)
- [CVE-2008-6441](https://cve.now/CVE-2008-6441.md): Format string vulnerability in the Epic Games Unreal engine client, as used in multiple games, allows remote servers to execute arbitrary co (no CVSS)
- [CVE-2008-6442](https://cve.now/CVE-2008-6442.md): Insecure method vulnerability in Sina Inc. (no CVSS)
- [CVE-2008-6443](https://cve.now/CVE-2008-6443.md): SQL injection vulnerability in forum\_duzen.php in phpKF allows remote attackers to execute arbitrary SQL commands via the fno parameter. (no CVSS)
- [CVE-2008-6444](https://cve.now/CVE-2008-6444.md): Stack-based buffer overflow in CSTransfer.dll in Baidu Hi IM might allow remote attackers to execute arbitrary code via a crafted packet, pr (no CVSS)
- [CVE-2008-6445](https://cve.now/CVE-2008-6445.md): Unspecified vulnerability in YourPlace before 1.0.1 has unknown impact and attack vectors, possibly related to improper authentication and t (no CVSS)
- [CVE-2008-6446](https://cve.now/CVE-2008-6446.md): Static code injection vulnerability in the Guestbook component in CMS MAXSITE allows remote attackers to inject arbitrary PHP code into the (no CVSS)
- [CVE-2008-6447](https://cve.now/CVE-2008-6447.md): Buffer overflow in emmailstore.dll 6.5.0.3 in the QuikSoft EasyMail MailStore ActiveX control allows remote attackers to execute arbitrary c (no CVSS)
- [CVE-2008-6448](https://cve.now/CVE-2008-6448.md): Cross-site scripting (XSS) vulnerability in install.cgi in SKYARC System MTCMS WYSIWYG Editor allows remote attackers to inject arbitrary we (no CVSS)
- [CVE-2008-6449](https://cve.now/CVE-2008-6449.md): Cross-site request forgery (CSRF) vulnerability in multiple Century Systems routers including XR-410 before 1.6.9, XR-510 before 3.5.3, XR-4 (no CVSS)
- [CVE-2008-6450](https://cve.now/CVE-2008-6450.md): Cross-site scripting (XSS) vulnerability in Under Construction, Baby (UCB) PC2M 0.9.22.4 and earlier allows remote attackers to inject arbit (no CVSS)
- [CVE-2009-0855](https://cve.now/CVE-2009-0855.md): Cross-site scripting (XSS) vulnerability in the administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.23 on z/OS (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-03-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.