# CVEs published 2009-03-23 19 CVEs were published on March 23, 2009: 0 critical, 0 high. Days are UTC. - [CVE-2008-6508](https://cve.now/CVE-2008-6508.md): Directory traversal vulnerability in the AuthCheck filter in the Admin Console in Openfire 3.6.0a and earlier allows remote attackers to byp (no CVSS) - [CVE-2008-6509](https://cve.now/CVE-2008-6509.md): SQL injection vulnerability in CallLogDAO in SIP Plugin in Openfire 3.6.0a and earlier allows remote attackers to execute arbitrary SQL comm (no CVSS) - [CVE-2008-6510](https://cve.now/CVE-2008-6510.md): Cross-site scripting (XSS) vulnerability in login.jsp in the Admin Console in Openfire 3.6.0a and earlier allows remote attackers to inject (no CVSS) - [CVE-2008-6511](https://cve.now/CVE-2008-6511.md): Open redirect vulnerability in login.jsp in Openfire 3.6.0a and earlier allows remote attackers to redirect users to arbitrary web sites and (no CVSS) - [CVE-2009-0583](https://cve.now/CVE-2009-0583.md): Multiple integer overflows in icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and (no CVSS) - [CVE-2009-0584](https://cve.now/CVE-2009-0584.md): icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and earlier and Argyll Color Mana (no CVSS) - [CVE-2009-1047](https://cve.now/CVE-2009-1047.md): Cross-site scripting (XSS) vulnerability in the Send by e-mail module in the "Printer, e-mail and PDF versions" module 5.x before 5.x-4.4 an (no CVSS) - [CVE-2008-6506](https://cve.now/CVE-2008-6506.md): Unspecified vulnerability in phpBB before 3.0.4 allows attackers to bypass intended access restrictions and activate de-activated accounts v (no CVSS) - [CVE-2008-6507](https://cve.now/CVE-2008-6507.md): Unspecified vulnerability in phpBB before 3.0.4 allows attackers to obtain sensitive information via unknown vectors related to the lack of (no CVSS, phpbb/phpbb) - [CVE-2009-1045](https://cve.now/CVE-2009-1045.md): requests/status.xml in VLC 0.9.8a allows remote attackers to cause a denial of service (stack consumption and crash) via a long input argume (no CVSS) - [CVE-2009-1046](https://cve.now/CVE-2009-1046.md): The console selection feature in the Linux kernel 2.6.28 before 2.6.28.4, 2.6.25, and possibly earlier versions, when the UTF-8 console is u (no CVSS) - [CVE-2008-6504](https://cve.now/CVE-2008-6504.md): ParametersInterceptor in OpenSymphony XWork 2.0.x before 2.0.6 and 2.1.x before 2.1.2, as used in Apache Struts and other products, does not (no CVSS, com.opensymphony:xwork) - [CVE-2008-6505](https://cve.now/CVE-2008-6505.md): Multiple directory traversal vulnerabilities in Apache Struts 2.0.x before 2.0.12 and 2.1.x before 2.1.3 allow remote attackers to read arbi (no CVSS, org.apache.struts:struts2-core) - [CVE-2009-0581](https://cve.now/CVE-2009-0581.md): Memory leak in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allows context-dependent att (no CVSS) - [CVE-2009-0723](https://cve.now/CVE-2009-0723.md): Multiple integer overflows in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allow context (no CVSS) - [CVE-2009-0733](https://cve.now/CVE-2009-0733.md): Multiple stack-based buffer overflows in the ReadSetOfCurves function in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefo (no CVSS) - [CVE-2009-1042](https://cve.now/CVE-2009-1042.md): Unspecified vulnerability in Apple Safari on Mac OS X 10.5.6 allows remote attackers to execute arbitrary code via unknown vectors triggered (no CVSS) - [CVE-2009-1043](https://cve.now/CVE-2009-1043.md): Unspecified vulnerability in Microsoft Internet Explorer 8 on Windows 7 allows remote attackers to execute arbitrary code via unknown vector (no CVSS) - [CVE-2009-1044](https://cve.now/CVE-2009-1044.md): Mozilla Firefox 3.0.7 on Windows 7 allows remote attackers to execute arbitrary code via unknown vectors related to the \_moveToEdgeShift XUL (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2009-03-23 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.