# CVEs published 2009-04-13

18 CVEs were published on April 13, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2008-4420](https://cve.now/CVE-2008-4420.md): Multiple stack-based buffer overflows in DZIP32.DLL before 5.0.0.8 in DynaZip Max and DZIPS32.DLL before 6.0.0.5 in DynaZip Max Secure; as u (no CVSS)
- [CVE-2009-0218](https://cve.now/CVE-2009-0218.md): Insecure method vulnerability in Particle Software IntraLaunch Application Launcher ActiveX control in IntraLaunch.ocx, as used in LDRA TBbr (no CVSS)
- [CVE-2009-0794](https://cve.now/CVE-2009-0794.md): Integer overflow in the PulseAudioTargetDataL class in src/java/org/classpath/icedtea/pulseaudio/PulseAudioTargetDataLine.java in Pulse-Java (no CVSS)
- [CVE-2009-1244](https://cve.now/CVE-2009-1244.md): Unspecified vulnerability in the virtual machine display function in VMware Workstation 6.5.1 and earlier; VMware Player 2.5.1 and earlier; (no CVSS)
- [CVE-2009-1267](https://cve.now/CVE-2009-1267.md): Unspecified vulnerability in the LDAP dissector in Wireshark 0.99.2 through 1.0.6, when running on Windows, allows remote attackers to cause (no CVSS)
- [CVE-2009-1268](https://cve.now/CVE-2009-1268.md): The Check Point High-Availability Protocol (CPHAP) dissector in Wireshark 0.9.6 through 1.0.6 allows remote attackers to cause a denial of s (no CVSS)
- [CVE-2009-1269](https://cve.now/CVE-2009-1269.md): Unspecified vulnerability in Wireshark 0.99.6 through 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted Tektr (no CVSS)
- [CVE-2009-1286](https://cve.now/CVE-2009-1286.md): The IMAP task in the server in IBM Lotus Domino 8.0.2 before FP1 IF1 and 8.5 before IF3 allows remote attackers to cause a denial of service (no CVSS)
- [CVE-2009-1287](https://cve.now/CVE-2009-1287.md): Cross-site scripting (XSS) vulnerability in Cisco Subscriber Edge Services Manager (SESM) allows remote attackers to inject arbitrary web sc (no CVSS)
- [CVE-2009-1288](https://cve.now/CVE-2009-1288.md): Multiple cross-site scripting (XSS) vulnerabilities in the Advanced Management Module (AMM) on the IBM BladeCenter, including the BladeCente (no CVSS)
- [CVE-2009-1289](https://cve.now/CVE-2009-1289.md): private/login.ssi in the Advanced Management Module (AMM) on the IBM BladeCenter, including the BladeCenter H with BPET36H 54, allows remote (no CVSS)
- [CVE-2009-1290](https://cve.now/CVE-2009-1290.md): Multiple cross-site request forgery (CSRF) vulnerabilities in the web administration interface in the Advanced Management Module (AMM) on th (no CVSS)
- [CVE-2008-6715](https://cve.now/CVE-2008-6715.md): Multiple cross-site scripting (XSS) vulnerabilities in Pre ADS Portal 2.0 and earlier allow remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2008-6716](https://cve.now/CVE-2008-6716.md): homeadmin/adminhome.php in Pre ADS Portal 2.0 and earlier does not require administrative authentication, which allows remote attackers to h (no CVSS)
- [CVE-2008-6717](https://cve.now/CVE-2008-6717.md): U&M Software Signup 1.0 and 1.1 does not require administrative authentication for all scripts in the admin/ directory, which allows remote (no CVSS)
- [CVE-2008-6718](https://cve.now/CVE-2008-6718.md): U&M Software JustBookIt 1.0 does not require administrative authentication for all scripts in the admin/ directory, which allows remote atta (no CVSS)
- [CVE-2008-6719](https://cve.now/CVE-2008-6719.md): U&M Software Event Lister (aka JustListIt) 1.0 does not require administrative authentication for all scripts in the admin/ directory, which (no CVSS)
- [CVE-2008-6720](https://cve.now/CVE-2008-6720.md): SQL injection vulnerability in admin/adm\_login.php in DeltaScripts PHP Links 1.3 and earlier allows remote attackers to execute arbitrary SQ (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-04-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.