# CVEs published 2009-04-23 25 CVEs were published on April 23, 2009: 0 critical, 0 high. Days are UTC. - [CVE-2009-0165](https://cve.now/CVE-2009-0165.md): Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, as used in Poppler and other products, when running on Mac OS X, has unsp (no CVSS) - [CVE-2009-1187](https://cve.now/CVE-2009-1187.md): Integer overflow in the JBIG2 decoding feature in Poppler before 0.10.6 allows remote attackers to cause a denial of service (crash) and pos (no CVSS) - [CVE-2009-1188](https://cve.now/CVE-2009-1188.md): Integer overflow in the JBIG2 decoding feature in the SplashBitmap::SplashBitmap function in SplashBitmap.cc in Xpdf 3.x before 3.02pl4 and (no CVSS) - [CVE-2008-6744](https://cve.now/CVE-2008-6744.md): Cross-site request forgery (CSRF) vulnerability in Cybozu Office 6, Cybozu Dezie before 6.0(1.0), and Cybozu Garoon 2.0.0 through 2.1.3 allo (no CVSS) - [CVE-2008-6745](https://cve.now/CVE-2008-6745.md): index.php in BlogPHP 2.0 allows remote attackers to gain administrator privileges via a crafted email parameter in a register2 action. (no CVSS) - [CVE-2008-6746](https://cve.now/CVE-2008-6746.md): Cross-site scripting (XSS) vulnerability in the contact display view in Turba Contact Manager H3 before 2.2.1 allows remote attackers to inj (no CVSS) - [CVE-2008-6747](https://cve.now/CVE-2008-6747.md): dotProject before 2.1.2 does not properly restrict access to administrative pages, which allows remote attackers to gain privileges. (no CVSS) - [CVE-2009-0146](https://cve.now/CVE-2009-0146.md): Multiple buffer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allow remote attacker (no CVSS) - [CVE-2009-0147](https://cve.now/CVE-2009-0147.md): Multiple integer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allow remote attacke (no CVSS) - [CVE-2009-0163](https://cve.now/CVE-2009-0163.md): Integer overflow in the TIFF image decoding routines in CUPS 1.3.9 and earlier allows remote attackers to cause a denial of service (daemon (no CVSS) - [CVE-2009-0166](https://cve.now/CVE-2009-0166.md): The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allows remote attackers to cause a denial of servi (no CVSS) - [CVE-2009-0195](https://cve.now/CVE-2009-0195.md): Heap-based buffer overflow in Xpdf 3.02pl2 and earlier, CUPS 1.3.9, and probably other products, allows remote attackers to execute arbitrar (no CVSS) - [CVE-2009-0662](https://cve.now/CVE-2009-0662.md): The PlonePAS product 3.x before 3.9 and 3.2.x before 3.2.2, a product for Plone, does not properly handle the login form, which allows remot (no CVSS, plone ยท products-plonepas) - [CVE-2009-0664](https://cve.now/CVE-2009-0664.md): Multiple cross-site scripting (XSS) vulnerabilities in Mahara 1.0.x before 1.0.11 and 1.1.x before 1.1.3 allow remote attackers to inject ar (no CVSS) - [CVE-2009-0799](https://cve.now/CVE-2009-0799.md): The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to (no CVSS) - [CVE-2009-0800](https://cve.now/CVE-2009-0800.md): Multiple "input validation flaws" in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other (no CVSS) - [CVE-2009-1179](https://cve.now/CVE-2009-1179.md): Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows (no CVSS) - [CVE-2009-1180](https://cve.now/CVE-2009-1180.md): The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to (no CVSS) - [CVE-2009-1181](https://cve.now/CVE-2009-1181.md): The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to (no CVSS) - [CVE-2009-1182](https://cve.now/CVE-2009-1182.md): Multiple buffer overflows in the JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other pro (no CVSS) - [CVE-2009-1183](https://cve.now/CVE-2009-1183.md): The JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers (no CVSS) - [CVE-2009-1191](https://cve.now/CVE-2009-1191.md): mod\_proxy\_ajp.c in the mod\_proxy\_ajp module in the Apache HTTP Server 2.2.11 allows remote attackers to obtain sensitive response data, inte (no CVSS) - [CVE-2009-1357](https://cve.now/CVE-2009-1357.md): CRLF injection vulnerability in da/DA/Login in Sun Java System Delegated Administrator 6.2 through 6.4 allows remote attackers to inject arb (no CVSS) - [CVE-2009-1371](https://cve.now/CVE-2009-1371.md): The CLI\_ISCONTAINED macro in libclamav/others.h in ClamAV before 0.95.1 allows remote attackers to cause a denial of service (application cr (no CVSS) - [CVE-2009-1372](https://cve.now/CVE-2009-1372.md): Stack-based buffer overflow in the cli\_url\_canon function in libclamav/phishcheck.c in ClamAV before 0.95.1 allows remote attackers to cause (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2009-04-23 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.