# CVEs published 2009-07-13

17 CVEs were published on July 13, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2009-2445](https://cve.now/CVE-2009-2445.md): Oracle iPlanet Web Server (formerly Sun Java System Web Server or Sun ONE Web Server) 6.1 before SP12, and 7.0 through Update 6, when runnin (no CVSS)
- [CVE-2009-2446](https://cve.now/CVE-2009-2446.md): Multiple format string vulnerabilities in the dispatch\_command function in libmysqld/sql\_parse.cc in mysqld in MySQL 4.0.0 through 5.0.83 al (no CVSS)
- [CVE-2009-2447](https://cve.now/CVE-2009-2447.md): Multiple cross-site scripting (XSS) vulnerabilities in ogp\_show.php in Online Guestbook Pro 5.1 allow remote attackers to inject arbitrary w (no CVSS)
- [CVE-2009-2448](https://cve.now/CVE-2009-2448.md): Cross-site scripting (XSS) vulnerability in ogp\_show.php in Online Guestbook Pro 5.1 allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2009-2449](https://cve.now/CVE-2009-2449.md): Directory traversal vulnerability in maillinglist/admin/change\_config.php in ADbNewsSender before 1.5.6 allows remote attackers to include a (no CVSS)
- [CVE-2009-2450](https://cve.now/CVE-2009-2450.md): The OAmon.sys kernel driver 3.1.0.0 and earlier in Tall Emu Online Armor Personal Firewall AV+ before 3.5.0.12, and Personal Firewall 3.5 be (no CVSS)
- [CVE-2009-2434](https://cve.now/CVE-2009-2434.md): Buffer overflow in the syscall implementation in IBM AIX 5.3 allows local users to gain privileges via unspecified vectors. (no CVSS)
- [CVE-2009-2435](https://cve.now/CVE-2009-2435.md): The Sametime server in IBM Lotus Instant Messaging and Web Conferencing 6.5.1 generates error messages for a failed logon attempt with diffe (no CVSS)
- [CVE-2009-2436](https://cve.now/CVE-2009-2436.md): SQL injection vulnerability in page.php in Online Dating Software MyPHPDating 1.0 allows remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2009-2437](https://cve.now/CVE-2009-2437.md): Multiple cross-site scripting (XSS) vulnerabilities in index.php in Rentventory 1.0.1 allow remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2009-2438](https://cve.now/CVE-2009-2438.md): Cross-site scripting (XSS) vulnerability in index.php in the search module in ClanSphere 2009.0 and 2009.0.2 allows remote attackers to inje (no CVSS)
- [CVE-2009-2439](https://cve.now/CVE-2009-2439.md): Multiple SQL injection vulnerabilities in Web Development House Alibaba Clone allow remote attackers to execute arbitrary SQL commands via t (no CVSS)
- [CVE-2009-2440](https://cve.now/CVE-2009-2440.md): Cross-site scripting (XSS) vulnerability in index.php in JNM Guestbook 3.0 allows remote attackers to inject arbitrary web script or HTML vi (no CVSS)
- [CVE-2009-2441](https://cve.now/CVE-2009-2441.md): Cross-site scripting (XSS) vulnerability in ogp\_show.php in Online Guestbook Pro 5.1 allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2009-2442](https://cve.now/CVE-2009-2442.md): Cross-site scripting (XSS) vulnerability in public/index.php in Linea21 1.2.1 allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2009-2443](https://cve.now/CVE-2009-2443.md): Siteframe 3.2.3, and other 3.2.x versions, allows remote attackers to obtain configuration information via a direct request to phpinfo.php, (no CVSS)
- [CVE-2009-2444](https://cve.now/CVE-2009-2444.md): Directory traversal vulnerability in maillinglist/setup/step1.php.inc in ADbNewsSender before 1.5.6, and 2.0 before RC2, allows remote attac (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-07-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.