# CVEs published 2009-05-29 25 CVEs were published on May 29, 2009: 0 critical, 1 high. 1 is now in CISA KEV. Days are UTC. - [CVE-2009-1829](https://cve.now/CVE-2009-1829.md): Unspecified vulnerability in the PCNFSD dissector in Wireshark 0.8.20 through 1.0.7 allows remote attackers to cause a denial of service (cr (no CVSS) - [CVE-2009-1830](https://cve.now/CVE-2009-1830.md): Stack-based buffer overflow in Soulseek 156 and 157 NS allows remote attackers to execute arbitrary code via a long search query. (no CVSS) - [CVE-2009-1831](https://cve.now/CVE-2009-1831.md): The Nullsoft Modern Skins Support module (gen\_ff.dll) in Nullsoft Winamp before 5.552 allows remote attackers to execute arbitrary code via (no CVSS) - [CVE-2009-1825](https://cve.now/CVE-2009-1825.md): modules/admuser.php in myColex 1.4.2 does not require administrative authentication, which allows remote authenticated users to list user ac (no CVSS) - [CVE-2009-1826](https://cve.now/CVE-2009-1826.md): modules/admuser.php in myGesuad 0.9.14 (aka 0.9) does not require administrative authentication, which allows remote authenticated users to (no CVSS) - [CVE-2009-1827](https://cve.now/CVE-2009-1827.md): The SVG component in Mozilla Firefox 3.0.4 allows remote attackers to cause a denial of service (application hang) via a large value in the (no CVSS) - [CVE-2009-1828](https://cve.now/CVE-2009-1828.md): Mozilla Firefox 3.0.10 allows remote attackers to cause a denial of service (infinite loop, application hang, and memory consumption) via a (no CVSS) - [CVE-2009-1537](https://cve.now/CVE-2009-1537.md): Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows (CVSS 8.8, KEV) - [CVE-2009-1792](https://cve.now/CVE-2009-1792.md): The system.openURL function in StoneTrip Ston3D StandalonePlayer (aka S3DPlayer StandAlone) 1.6.2.4 and 1.7.0.1 and WebPlayer (aka S3DPlayer (no CVSS) - [CVE-2009-1824](https://cve.now/CVE-2009-1824.md): The ps\_drv.sys kernel driver in ArcaBit ArcaVir 2009 Antivirus Protection 9.4.3201.9 and earlier, ArcaVir 2009 Internet Security 9.4.3202.9 (no CVSS) - [CVE-2009-1809](https://cve.now/CVE-2009-1809.md): Multiple cross-site scripting (XSS) vulnerabilities in myColex 1.4.2 allow remote attackers to inject arbitrary web script or HTML via (1) t (no CVSS) - [CVE-2009-1810](https://cve.now/CVE-2009-1810.md): Multiple SQL injection vulnerabilities in myColex 1.4.2 allow remote attackers to execute arbitrary SQL commands via (1) the formUser parame (no CVSS) - [CVE-2009-1811](https://cve.now/CVE-2009-1811.md): Multiple cross-site scripting (XSS) vulnerabilities in myGesuad 0.9.14 (aka 0.9) allow remote attackers to inject arbitrary web script or HT (no CVSS) - [CVE-2009-1812](https://cve.now/CVE-2009-1812.md): Multiple SQL injection vulnerabilities in myGesuad 0.9.14 (aka 0.9) allow remote attackers to execute arbitrary SQL commands via (1) the for (no CVSS) - [CVE-2009-1813](https://cve.now/CVE-2009-1813.md): Multiple SQL injection vulnerabilities in admin/index.php in Submitter Script 2 allow remote attackers to execute arbitrary SQL commands via (no CVSS) - [CVE-2009-1814](https://cve.now/CVE-2009-1814.md): SQL injection vulnerability in mail.php in PHPenpals 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the ID pa (no CVSS) - [CVE-2009-1815](https://cve.now/CVE-2009-1815.md): Stack-based buffer overflow in Sonic Spot Audioactive Player 1.93b allows remote attackers to execute arbitrary code via a long string in a (no CVSS) - [CVE-2009-1816](https://cve.now/CVE-2009-1816.md): SQL injection vulnerability in admin.php in My Game Script 2.0 allows remote attackers to execute arbitrary SQL commands via the user parame (no CVSS) - [CVE-2009-1817](https://cve.now/CVE-2009-1817.md): Multiple buffer overflows in DigiMode Maya 1.0.2 allow remote attackers to execute arbitrary code via a long string in a malformed (1) .m3u (no CVSS) - [CVE-2009-1818](https://cve.now/CVE-2009-1818.md): SQL injection vulnerability in admin/admin\_manager.asp in MaxCMS 2.0 allows remote attackers to execute arbitrary SQL commands via an m\_user (no CVSS) - [CVE-2009-1819](https://cve.now/CVE-2009-1819.md): SQL injection vulnerability in product.php in 2daybiz Custom T-shirt Design Script allows remote attackers to execute arbitrary SQL commands (no CVSS) - [CVE-2009-1820](https://cve.now/CVE-2009-1820.md): Cross-site scripting (XSS) vulnerability in product.php in 2daybiz Custom T-shirt Design Script allows remote attackers to inject arbitrary (no CVSS) - [CVE-2009-1821](https://cve.now/CVE-2009-1821.md): DMXReady Registration Manager 1.1 stores sensitive information under the web root with insufficient access control, which allows remote atta (no CVSS) - [CVE-2009-1822](https://cve.now/CVE-2009-1822.md): Multiple PHP remote file inclusion vulnerabilities in the InterJoomla ArtForms (com\_artforms) component 2.1b7 for Joomla! allow remote attac (no CVSS) - [CVE-2009-1823](https://cve.now/CVE-2009-1823.md): Cross-site scripting (XSS) vulnerability in the Print (aka Printer, e-mail and PDF versions) module 5.x before 5.x-4.7 and 6.x before 6.x-1. (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2009-05-29 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.