# CVEs published 2009-07-30

16 CVEs were published on July 30, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2008-6883](https://cve.now/CVE-2008-6883.md): SQL injection vulnerability in the Live Chat (com\_livechat) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL comma (no CVSS)
- [CVE-2009-2651](https://cve.now/CVE-2009-2651.md): main/rtp.c in Asterisk Open Source 1.6.1 before 1.6.1.2 allows remote attackers to cause a denial of service (crash) via an RTP text frame w (no CVSS)
- [CVE-2008-6879](https://cve.now/CVE-2008-6879.md): Cross-site scripting (XSS) vulnerability in Apache Roller 2.3, 3.0, 3.1, and 4.0 allows remote attackers to inject arbitrary web script or H (no CVSS)
- [CVE-2008-6880](https://cve.now/CVE-2008-6880.md): SQL injection vulnerability in joke.php in EasySiteNetwork Free Jokes Website allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2008-6881](https://cve.now/CVE-2008-6881.md): Multiple SQL injection vulnerabilities in the Live Chat (com\_livechat) component 1.0 for Joomla! allow remote attackers to execute arbitrary (no CVSS)
- [CVE-2008-6882](https://cve.now/CVE-2008-6882.md): Live Chat (com\_livechat) component 1.0 for Joomla! allows remote attackers to use the xmlhttp.php script as an open HTTP proxy to hide netwo (no CVSS)
- [CVE-2009-2408](https://cve.now/CVE-2009-2408.md): Mozilla Network Security Services (NSS) before 3.12.3, Firefox before 3.0.13, Thunderbird before 2.0.0.23, and SeaMonkey before 1.1.18 do no (no CVSS)
- [CVE-2009-2409](https://cve.now/CVE-2009-2409.md): The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; (no CVSS)
- [CVE-2009-2646](https://cve.now/CVE-2009-2646.md): Multiple unspecified vulnerabilities in the PDF distiller in the Attachment Service component in Research In Motion (RIM) BlackBerry Enterpr (no CVSS)
- [CVE-2009-2647](https://cve.now/CVE-2009-2647.md): Unspecified vulnerability in Kaspersky Anti-Virus 2010 and Kaspersky Internet Security 2010 before Critical Fix 9.0.0.463 allows remote atta (no CVSS)
- [CVE-2009-2648](https://cve.now/CVE-2009-2648.md): FlashDen Guestbook allows remote attackers to obtain configuration information via a direct request to amfphp/phpinfo.php, which calls the p (no CVSS)
- [CVE-2009-2649](https://cve.now/CVE-2009-2649.md): The IATA (ata) driver in FreeBSD 6.0 and 8.0, when read access to /dev is available, allows local users to cause a denial of service (kernel (no CVSS)
- [CVE-2009-2650](https://cve.now/CVE-2009-2650.md): Heap-based buffer overflow in Sorcerer Software MultiMedia Jukebox 4.0 Build 020124 allows remote attackers to cause a denial of service (ap (no CVSS)
- [CVE-2009-1168](https://cve.now/CVE-2009-1168.md): Cisco IOS 12.0(32)S12 through 12.0(32)S13 and 12.0(33)S3 through 12.0(33)S4, 12.0(32)SY8 through 12.0(32)SY9, 12.2(33)SXI1, 12.2XNC before 1 (no CVSS)
- [CVE-2009-2049](https://cve.now/CVE-2009-2049.md): Cisco IOS 12.0(32)S12 through 12.0(32)S13 and 12.0(33)S3 through 12.0(33)S4, 12.0(32)SY8 through 12.0(32)SY9, 12.2(33)SXI1 through 12.2(33)S (no CVSS)
- [CVE-2009-2410](https://cve.now/CVE-2009-2410.md): The local\_handler\_callback function in server/responder/pam/pam\_LOCAL\_domain.c in sssd 0.4.1 does not properly handle blank-password account (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-07-30
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.