# CVEs published 2009-04-14

6 CVEs were published on April 14, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2008-6721](https://cve.now/CVE-2008-6721.md): SQL injection vulnerability in index.php in AJ Square AJ Article allows remote attackers to execute arbitrary SQL commands via the txtName p (no CVSS)
- [CVE-2008-6722](https://cve.now/CVE-2008-6722.md): Novell Access Manager 3 SP4 does not properly expire X.509 certificate sessions, which allows physically proximate attackers to obtain a log (no CVSS)
- [CVE-2008-6723](https://cve.now/CVE-2008-6723.md): TurnkeyForms Entertainment Portal 2.0 allows remote attackers to bypass authentication and gain administrative access by setting the adminLo (no CVSS)
- [CVE-2009-0792](https://cve.now/CVE-2009-0792.md): Multiple integer overflows in icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and (no CVSS)
- [CVE-2009-1292](https://cve.now/CVE-2009-1292.md): UCM-CQ in IBM Rational ClearCase 7.0.0.x before 7.0.0.5, 7.0.1.x before 7.0.1.4, and 7.1.x before 7.1.0.1 on Linux and AIX places a username (no CVSS)
- [CVE-2009-0159](https://cve.now/CVE-2009-0159.md): Stack-based buffer overflow in the cookedprint function in ntpq/ntpq.c in ntpq in NTP before 4.2.4p7-RC2 allows remote NTP servers to execut (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-04-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.