# CVEs published 2009-04-15

63 CVEs were published on April 15, 2009: 0 critical, 2 high. Days are UTC.

- [CVE-2009-1119](https://cve.now/CVE-2009-1119.md): Multiple heap-based buffer overflows in EMC RepliStor 6.2 before SP5 and 6.3 before SP2 allow remote attackers to execute arbitrary code via (no CVSS)
- [CVE-2007-4514](https://cve.now/CVE-2007-4514.md): Unspecified vulnerability in HP ProCurve Manager and HP ProCurve Manager Plus 2.3 and earlier allows remote attackers to obtain sensitive in (no CVSS)
- [CVE-2009-0681](https://cve.now/CVE-2009-0681.md): PGP Desktop before 9.10 allows local users to (1) cause a denial of service (crash) via a crafted IOCTL request to pgpdisk.sys, and (2) caus (no CVSS)
- [CVE-2009-0972](https://cve.now/CVE-2009-0972.md): Unspecified vulnerability in the Workspace Manager component in Oracle Database 11.1.0.6, 11.1.0.7, 10.2.0.3, 10.2.0.4, 10.1.0.5, 9.2.0.8, a (no CVSS)
- [CVE-2009-0973](https://cve.now/CVE-2009-0973.md): Unspecified vulnerability in the Cluster Ready Services component in Oracle Database 10.1.0.5 allows remote attackers to affect availability (no CVSS)
- [CVE-2009-0974](https://cve.now/CVE-2009-0974.md): Unspecified vulnerability in the Portal component in Oracle Application Server 10.1.2.3 and 10.1.4.2 allows remote attackers to affect integ (no CVSS)
- [CVE-2009-0975](https://cve.now/CVE-2009-0975.md): Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4 and 11.1.0.6 allows remote authenticated users to a (no CVSS)
- [CVE-2009-0976](https://cve.now/CVE-2009-0976.md): Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4 and 11.1.0.6 allows remote authenticated users to a (no CVSS)
- [CVE-2009-0977](https://cve.now/CVE-2009-0977.md): Unspecified vulnerability in the Advanced Queuing component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote auth (no CVSS)
- [CVE-2009-0978](https://cve.now/CVE-2009-0978.md): Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4 and 11.1.0.6 allows remote authenticated users to a (no CVSS)
- [CVE-2009-0979](https://cve.now/CVE-2009-0979.md): Unspecified vulnerability in the Resource Manager component in Oracle Database 9.2.0.8 and 9.2.0.8DV allows remote authenticated users to af (no CVSS)
- [CVE-2009-0980](https://cve.now/CVE-2009-0980.md): Unspecified vulnerability in the SQLX Functions component in Oracle Database 10.2.0.3 and 11.1.0.6 allows remote authenticated users to affe (no CVSS)
- [CVE-2009-0981](https://cve.now/CVE-2009-0981.md): Unspecified vulnerability in the Application Express component in Oracle Database 11.1.0.7 allows remote authenticated users to affect confi (no CVSS)
- [CVE-2009-0982](https://cve.now/CVE-2009-0982.md): Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8. (no CVSS)
- [CVE-2009-0983](https://cve.now/CVE-2009-0983.md): Unspecified vulnerability in the Portal component in Oracle Application Server 10.1.2.3 and 10.1.4.2 allows remote attackers to affect integ (no CVSS)
- [CVE-2009-0984](https://cve.now/CVE-2009-0984.md): Unspecified vulnerability in the Database Vault component in Oracle Database 9.2.0.8DV, 10.2.0.4, and 11.1.0.6 allows remote authenticated u (no CVSS)
- [CVE-2009-0985](https://cve.now/CVE-2009-0985.md): Unspecified vulnerability in the Core RDBMS component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.6 allows remote authenticated users (no CVSS)
- [CVE-2009-0986](https://cve.now/CVE-2009-0986.md): Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4 and 11.1.0.6 allows remote authenticated users to a (no CVSS)
- [CVE-2009-0988](https://cve.now/CVE-2009-0988.md): Unspecified vulnerability in the Password Policy component in Oracle Database 11.1.0.6 allows remote authenticated users to affect confident (no CVSS)
- [CVE-2009-0989](https://cve.now/CVE-2009-0989.md): Unspecified vulnerability in the BI Publisher component in Oracle Application Server 5.6.2, 10.1.3.2.1, and 10.1.3.3.3 allows remote authent (no CVSS)
- [CVE-2009-0990](https://cve.now/CVE-2009-0990.md): Unspecified vulnerability in the BI Publisher component in Oracle Application Server 5.6.2, 10.1.3.2.1, and 10.1.3.3.3 allows remote authent (no CVSS)
- [CVE-2009-0991](https://cve.now/CVE-2009-0991.md): Unspecified vulnerability in the Listener component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote at (no CVSS)
- [CVE-2009-0992](https://cve.now/CVE-2009-0992.md): Unspecified vulnerability in the Advanced Queuing component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated (no CVSS)
- [CVE-2009-0993](https://cve.now/CVE-2009-0993.md): Unspecified vulnerability in the OPMN component in Oracle Application Server 10.1.2.3 allows remote attackers to affect confidentiality, int (no CVSS)
- [CVE-2009-0994](https://cve.now/CVE-2009-0994.md): Unspecified vulnerability in the BI Publisher component in Oracle Application Server 5.6.2, 10.1.3.2.1, 10.1.3.3.3, and 10.1.3.4 allows remo (no CVSS)
- [CVE-2009-0995](https://cve.now/CVE-2009-0995.md): Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.0.6 and 11i10CU2 allows remote attack (no CVSS)
- [CVE-2009-0996](https://cve.now/CVE-2009-0996.md): Unspecified vulnerability in the BI Publisher component in Oracle Application Server 10.1.3.2.1, 10.1.3.3.3, and 10.1.3.4 allows remote auth (no CVSS)
- [CVE-2009-0997](https://cve.now/CVE-2009-0997.md): Unspecified vulnerability in the Database Vault component in Oracle Database 11.1.0.6 allows remote authenticated users to affect confidenti (no CVSS)
- [CVE-2009-0998](https://cve.now/CVE-2009-0998.md): Unspecified vulnerability in the PeopleSoft Enterprise HRMS - eBenefits component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseO (no CVSS)
- [CVE-2009-0999](https://cve.now/CVE-2009-0999.md): Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.6 allows remote attackers to af (no CVSS)
- [CVE-2009-1000](https://cve.now/CVE-2009-1000.md): The Oracle Applications Framework component in Oracle E-Business Suite 12.0.6 and 11i10CU2 uses default passwords for unspecified "FND Appli (no CVSS)
- [CVE-2009-1001](https://cve.now/CVE-2009-1001.md): Unspecified vulnerability in Oracle BEA WebLogic Portal 8.1 Gold through SP6 allows remote authenticated users to gain privileges via unknow (no CVSS)
- [CVE-2009-1002](https://cve.now/CVE-2009-1002.md): Unspecified vulnerability in Oracle BEA WebLogic Server 10.3, 10.0 Gold through MP1, 9.2 Gold through MP3, 9.1, 9.0, 8.1 Gold through SP6, a (no CVSS)
- [CVE-2009-1003](https://cve.now/CVE-2009-1003.md): Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, and 9.0 allows remote attacker (no CVSS)
- [CVE-2009-1004](https://cve.now/CVE-2009-1004.md): Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3 allows remote attackers to affect confidentiality and i (no CVSS)
- [CVE-2009-1005](https://cve.now/CVE-2009-1005.md): Unspecified vulnerability in the Oracle Data Service Integrator (AquaLogic Data Services Platform) component in BEA Product Suite 10.3.0, 3. (no CVSS)
- [CVE-2009-1006](https://cve.now/CVE-2009-1006.md): Unspecified vulnerability in the JRockit component in BEA Product Suite R27.6.2 and earlier, with SDK/JRE 1.4.2, JRE/JDK 5, and JRE/JDK 6, a (no CVSS)
- [CVE-2009-1008](https://cve.now/CVE-2009-1008.md): Unspecified vulnerability in the Outside In Technology component in Oracle Application Server 8.2.2 and 8.3.0 allows local users to affect c (no CVSS)
- [CVE-2009-1009](https://cve.now/CVE-2009-1009.md): Unspecified vulnerability in the Outside In Technology component in Oracle Application Server 8.1.9 allows local users to affect confidentia (no CVSS)
- [CVE-2009-1010](https://cve.now/CVE-2009-1010.md): Unspecified vulnerability in the Outside In Technology component in Oracle Application Server 8.2.2 and 8.3.0 allows local users to affect c (no CVSS)
- [CVE-2009-1011](https://cve.now/CVE-2009-1011.md): Unspecified vulnerability in the Outside In Technology component in Oracle Application Server 8.2.2 and 8.3.0 allows local users to affect c (no CVSS)
- [CVE-2009-1012](https://cve.now/CVE-2009-1012.md): Unspecified vulnerability in the plug-ins for Apache and IIS web servers in Oracle BEA WebLogic Server 7.0 Gold through SP7, 8.1 Gold throug (no CVSS)
- [CVE-2009-1013](https://cve.now/CVE-2009-1013.md): Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8. (no CVSS)
- [CVE-2009-1014](https://cve.now/CVE-2009-1014.md): Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8. (no CVSS)
- [CVE-2009-1016](https://cve.now/CVE-2009-1016.md): Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 allo (no CVSS)
- [CVE-2009-1017](https://cve.now/CVE-2009-1017.md): Unspecified vulnerability in the BI Publisher component in Oracle Application Server 5.6.2, 10.1.3.2.1, 10.1.3.3.3, and 10.1.3.4 allows remo (no CVSS)
- [CVE-2009-0077](https://cve.now/CVE-2009-0077.md): The firewall engine in Microsoft Forefront Threat Management Gateway, Medium Business Edition (TMG MBE); and Internet Security and Accelerat (no CVSS)
- [CVE-2009-0078](https://cve.now/CVE-2009-0078.md): The Windows Management Instrumentation (WMI) provider in Microsoft Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and (no CVSS)
- [CVE-2009-0079](https://cve.now/CVE-2009-0079.md): The RPCSS service in Microsoft Windows XP SP2 and SP3 and Server 2003 SP1 and SP2 does not properly implement isolation among a set of disti (no CVSS)
- [CVE-2009-0080](https://cve.now/CVE-2009-0080.md): The ThreadPool class in Windows Vista Gold and SP1, and Server 2008, does not properly implement isolation among a set of distinct processes (no CVSS)
- [CVE-2009-0084](https://cve.now/CVE-2009-0084.md): Use-after-free vulnerability in DirectShow in Microsoft DirectX 8.1 and 9.0 allows remote attackers to execute arbitrary code via an MJPEG f (no CVSS)
- [CVE-2009-0086](https://cve.now/CVE-2009-0086.md): Integer underflow in Windows HTTP Services (aka WinHTTP) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold (no CVSS)
- [CVE-2009-0087](https://cve.now/CVE-2009-0087.md): Unspecified vulnerability in the Word 6 text converter in WordPad in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2 (no CVSS)
- [CVE-2009-0088](https://cve.now/CVE-2009-0088.md): The WordPerfect 6.x Converter (WPFT632.CNV, 1998.1.27.0) in Microsoft Office Word 2000 SP3 and Microsoft Office Converter Pack does not prop (no CVSS)
- [CVE-2009-0089](https://cve.now/CVE-2009-0089.md): Windows HTTP Services (aka WinHTTP) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, and Vista Gold allows remote web (no CVSS)
- [CVE-2009-0100](https://cve.now/CVE-2009-0100.md): Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1; Excel in Microsoft Office 2004 and 2008 for Mac; Microsoft Office Excel V (no CVSS)
- [CVE-2009-0235](https://cve.now/CVE-2009-0235.md): Stack-based buffer overflow in the Word 97 text converter in WordPad in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and (no CVSS)
- [CVE-2009-0237](https://cve.now/CVE-2009-0237.md): Cross-site scripting (XSS) vulnerability in cookieauth.dll in the HTML forms authentication component in Microsoft Forefront Threat Manageme (no CVSS)
- [CVE-2009-0550](https://cve.now/CVE-2009-0550.md): Windows HTTP Services (aka WinHTTP) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2 (no CVSS)
- [CVE-2009-0551](https://cve.now/CVE-2009-0551.md): Microsoft Internet Explorer 6 SP1, 6 and 7 on Windows XP SP2 and SP3, 6 and 7 on Windows Server 2003 SP1 and SP2, 7 on Windows Vista Gold an (CVSS 8.1)
- [CVE-2009-0552](https://cve.now/CVE-2009-0552.md): Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4, 6 SP1, 6 on Windows XP SP2 and SP3, and 6 on Windows Server 2003 SP1 and (no CVSS)
- [CVE-2009-0553](https://cve.now/CVE-2009-0553.md): Microsoft Internet Explorer 6 SP1, 6 and 7 on Windows XP SP2 and SP3, 6 and 7 on Windows Server 2003 SP1 and SP2, 7 on Windows Vista Gold an (no CVSS)
- [CVE-2009-0554](https://cve.now/CVE-2009-0554.md): Microsoft Internet Explorer 5.01 SP4, 6 SP1, 6 and 7 on Windows XP SP2 and SP3, 6 and 7 on Windows Server 2003 SP1 and SP2, 7 on Windows Vis (CVSS 8.8)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-04-15
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.