# CVEs published 2009-07-16

17 CVEs were published on July 16, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2009-2480](https://cve.now/CVE-2009-2480.md): Cross-site scripting (XSS) vulnerability in mt-wizard.cgi in Six Apart Movable Type 4.24, and 4.25 when global templates are not initialized (no CVSS)
- [CVE-2009-2481](https://cve.now/CVE-2009-2481.md): mt-wizard.cgi in Six Apart Movable Type before 4.261, when global templates are not initialized, allows remote attackers to bypass access re (no CVSS)
- [CVE-2009-2482](https://cve.now/CVE-2009-2482.md): The pam\_unix module in OpenPAM in NetBSD 4.0 before 4.0.2 and 5.0 before 5.0.1 allows local users to change the current root password if it (no CVSS)
- [CVE-2009-2483](https://cve.now/CVE-2009-2483.md): libprop/prop\_object.c in proplib in NetBSD 4.0 and 4.0.1 allows local users to cause a denial of service (NULL pointer dereference and kerne (no CVSS)
- [CVE-2009-2484](https://cve.now/CVE-2009-2484.md): Stack-based buffer overflow in the Win32AddConnection function in modules/access/smb.c in VideoLAN VLC media player 0.9.9, when running on M (no CVSS)
- [CVE-2009-2485](https://cve.now/CVE-2009-2485.md): Stack-based buffer overflow in HT-MP3Player 1.0 allows remote attackers to execute arbitrary code via a long string in a .ht3 file. (no CVSS)
- [CVE-2009-2486](https://cve.now/CVE-2009-2486.md): Unspecified vulnerability in the SCTP implementation in Sun Solaris 10, and OpenSolaris before snv\_120, allows remote attackers to cause a d (no CVSS)
- [CVE-2009-2487](https://cve.now/CVE-2009-2487.md): Use-after-free vulnerability in the frpr\_icmp function in the ipfilter (aka IP Filter) subsystem in Sun Solaris 10, and OpenSolaris snv\_45 t (no CVSS)
- [CVE-2009-2488](https://cve.now/CVE-2009-2488.md): Unspecified vulnerability in the NFSv4 module in the kernel in Sun Solaris 10, and OpenSolaris snv\_102 through snv\_119, allows local users t (no CVSS)
- [CVE-2009-2489](https://cve.now/CVE-2009-2489.md): Unspecified vulnerability in the utdmsession program in Sun Ray Server Software (SRSS) 4.0 allows local users to access the sessions of arbi (no CVSS)
- [CVE-2009-2490](https://cve.now/CVE-2009-2490.md): Unspecified vulnerability in the utaudiod daemon in Sun Ray Server Software (SRSS) 4.0, when Solaris Trusted Extensions is enabled, allows l (no CVSS)
- [CVE-2009-2491](https://cve.now/CVE-2009-2491.md): The utaudiod daemon in Sun Ray Server Software (SRSS) 4.0, when Solaris Trusted Extensions is enabled, allows local users to access the sess (no CVSS)
- [CVE-2009-1895](https://cve.now/CVE-2009-1895.md): The personality subsystem in the Linux kernel before 2.6.31-rc3 has a PER\_CLEAR\_ON\_SETID setting that does not clear the ADDR\_COMPAT\_LAYOUT (no CVSS)
- [CVE-2009-2047](https://cve.now/CVE-2009-2047.md): Directory traversal vulnerability in the Administration interface in Cisco Customer Response Solutions (CRS) before 7.0(1) SR2 in Cisco Unif (no CVSS)
- [CVE-2009-2048](https://cve.now/CVE-2009-2048.md): Cross-site scripting (XSS) vulnerability in the Administration interface in Cisco Customer Response Solutions (CRS) before 7.0(1) SR2 in Cis (no CVSS)
- [CVE-2009-2478](https://cve.now/CVE-2009-2478.md): Mozilla Firefox 3.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via unspecified ve (no CVSS)
- [CVE-2009-2479](https://cve.now/CVE-2009-2479.md): Mozilla Firefox 3.0.x, 3.5, and 3.5.1 on Windows allows remote attackers to cause a denial of service (uncaught exception and application cr (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-07-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.